FTC Safeguards Rule and IRS WISP, done properly.
Protect client data and meet the FTC Safeguards Rule and IRS WISP requirements
Tax preparers and accounting firms that serve consumers are treated as financial institutions under the FTC Safeguards Rule, and the IRS reminds every paid preparer that a written information security plan (WISP) is required. We build the program and the documentation, then help you keep it current.
What we align to
FTC Safeguards Rule (16 CFR 314) IRS Pub 4557 IRS Pub 5708 (WISP) NIST CSF Book a Free Security ReviewWhat's at stake for a firm
A WISP is a requirement, not a template
The IRS's own guidance tells tax professionals they're legally required to maintain a written information security plan and to keep it current.
Breaches may have to be reported to the FTC
Since May 2024, covered firms must notify the FTC within 30 days after discovering unauthorized access to unencrypted information on 500 or more consumers.
Busy season is the worst time for an outage
A compromised email account or ransomware during filing season costs far more than the security work that would have prevented it.
Three steps, fixed scope
01
Safeguards & WISP Readiness
Fixed price, from $2,500. A risk assessment, a WISP tailored from IRS Pub 5708, and a check of MFA, encryption, vendor oversight, and incident response.
02
Fix what matters
MFA everywhere, encrypted devices, backups you can restore, secure client file exchange, and staff training, coordinated with your IT provider.
03
Stay protected
24/7 monitoring through our security operations partner, annual WISP and risk updates, and the owner/partner report the Safeguards Rule calls for.
