The written security program regulators expect, in plain English.
If your business handles customer financial information, the FTC Safeguards Rule likely applies to you. Tax professionals have IRS expectations on top. We help you meet them with documents that match how your office actually works.
Written Information Security Program (WISP)
The Safeguards Rule (16 CFR Part 314) requires covered businesses, including tax preparers, auto dealers, mortgage brokers and many other non-bank financial businesses, to keep a written information security program.
- Risk assessment of how customer information is stored and handled
- A WISP written for your office, not a generic template
- Named qualified individual and the safeguards that go with the rule
- Incident response plan and yearly review checklist
IRS Publication 4557 safeguards
The IRS expects tax professionals to protect taxpayer data and to have a written plan. Publication 4557 lays out the safeguards; we turn them into a plan and a short list of changes.
- Review against Publication 4557 safeguards
- Fits alongside your WISP
- Ready before filing season, with a plain summary for staff
Security assessments
A look at the controls that matter most for small businesses: sign-in security, email, endpoints, backups, patching and admin access.
- Outside-in check of your public footprint and email security settings
- Inside review with read-only access
- A ranked fix list, not a hundred-page report
Good to know
- We help you build and keep a security program. Whether a regulator considers you compliant is their call, and we won't claim otherwise.
- This is security work, not legal advice. If you need a legal opinion on which rules apply, ask your attorney; we are happy to work with them.
- A WISP is not a one-time document. The rule expects regular review, and we can handle that each year.
Not sure where to start?
Tell us what you are seeing or what your renewal asks for. We reply with a plain next step.