irs wisp creation
NEED A PROFESSIONAL WRITTEN INFORMATION SECURITY PLAN BASED ON THE DATA SECURITY RISKS YOU FACE?
I develop your WISP from how your firm actually operates, based on a full security audit that determines the data security posture your plan needs to achieve. Your WISP is included with your risk assessment.
Please don't include client names or tax information. I use your details only to reply.
No payment to start. We talk first.
- Written from your answers
- Included in the $500 package
- One revision included
What your plan covers
The Parts of a Complete WISP
- A named security lead at your firm
- Where client data lives and how it's handled
- Access, passwords and multi-factor authentication
- Devices, remote work and physical safeguards
- Vendors and service providers
- Backup, retention and secure disposal
- Staff training
- What to do after an incident, and who to tell
- When and how the plan is reviewed
What a WISP is
A written information security plan (WISP) is a document that says how your firm protects client information: who is responsible, what safeguards are in place, how staff are trained, how vendors are overseen, and what you do if something goes wrong. The IRS expects tax professionals to have one.
How I write it
Your plan comes from your risk assessment interview, not a generic template. Each finding in your report points to the plan section that addresses it, so the plan and the assessment stay connected.
Why the assessment comes first
A plan that doesn’t match how you work is a plan nobody follows. The assessment finds the gaps. The plan says how you’ll close them and keep them closed.
Pricing
$500
Included with the risk assessment
The WISP comes with the assessment
- Custom WISP written from your answers
- Plus the risk assessment, vendor check and implementation guide
- One revision within 14 days
- Not sold on its own, because the assessment is what makes it yours
Launch pricing. Paid before the interview.
Request an Intro CallFAQ
Questions About the WISP
Can you just send me a template?
The IRS publishes a sample plan you’re free to use. I do this for firms that want a plan written for how they really operate.
I already have a plan. Do I need this?
The assessment tests whether your plan matches your practice. Same $500.
Can I buy the WISP on its own?
No. The assessment is what makes the plan yours, so they come together.
How do I keep it current?
When a year has passed or your firm changes, ask me. I’ll review your assessment and update your plan.
Want a plan that matches your practice?
Request an intro call. I reply personally.