A written security plan that matches what actually happens.

Every paid tax preparer is expected to keep a written information security plan, and the IRS describes what it should cover in Publications 4557 and 5708. Compliance: IRS WISP keeps your plan current and gives you quarterly evidence that what it says is actually happening.

Up to$500,000Cyber WarrantyBacked by Cork Inc.

Book a call What the rule asks for

At a glance

Package: Compliance: IRS WISP
Evidence: Compliance Posture Report, quarterly
Stacks on: Complete IT: Managed or Co-Managed

Does this apply to you?

It likely applies if your firm is one of these:

A paid tax return preparer
A CPA firm that employs paid preparers

What the rule asks for, and what you receive.

01
Name who is responsible for security
Clear roles, written into your plan
A written information security plan kept current
02
Assess the risks to client data
Risk assessment support, kept current
Risk records in your plan
03
Describe the safeguards that protect client data
The safeguards your plan describes, kept running
Evidence that the safeguards your plan describes are in place
04
Set out how you'll respond to an incident
A response runbook
Incident records
05
Review the plan as your firm changes
Plan updates as your firm changes
Dated plan updates you can point to whenever you're asked to confirm you have a plan