For tax preparers & CPA firms
Your tax firm’s required written security plan, done in two weeks.
The FTC Safeguards Rule requires tax preparers to keep a written information security plan (WISP). We build yours with you in plain English — built to address the FTC Safeguards Rule and IRS Publication 4557 — and your firm owns it. Founded and run by a U.S. Marine Corps veteran.
WISP & FTC Safeguards Security Plan
$950 founding price · first 3 tax/CPA firms
Standard price $1,200–$2,500 · optional annual review $400–$800.
- Your written plan, tailored to how your office actually works
- A named Qualified Individual and simple risk assessment
- Plain-English policies your staff can follow
- A prioritized fix list — fixing gaps is quoted separately
The plan is built to address the FTC Safeguards Rule (16 CFR Part 314) and IRS Publication 4557. It does not guarantee any regulatory outcome.
What happens in week one
- Day 1 · Kickoff
30–45 min call. We confirm scope and name your Qualified Individual.
- Day 2 · Inventory
List of systems, software, and where client data lives.
- Day 3 · Checkup
Remote review of MFA, backups, email, devices, and access.
- Day 4 · Risk review
Findings ranked by priority, in plain English.
- Day 5 · Draft
First WISP draft to you. Week two: your edits, final plan, staff walkthrough.
WISP table of contents
- Purpose, scope, and firm overview
- Qualified Individual and responsibilities
- Inventory of customer information and systems
- Risk assessment
- Access controls and multi-factor authentication
- Encryption of data at rest and in transit
- Secure disposal and data retention
- Vendor and service-provider oversight
- Employee training and awareness
- Monitoring, logging, and testing
- Backup and recovery
- Incident response plan (including IRS and FTC reporting steps)
- Change management
- Annual review and report to leadership
Ready before next tax season?
Book a free 20-minute call, or call (602) 456-0961.