Every paid tax preparer must keep a Written Information Security Plan, and your PTIN renewal asks whether you know it. Answer 25 questions about your practice and get a complete plan tailored to your software, devices and staff, built on IRS Publication 5708 and mapped to the FTC Safeguards Rule.
About 10 minutes of questions. No client data needed. Your plan appears the moment you pay.
Under the Gramm-Leach-Bliley Act and the FTC Safeguards Rule, every paid preparer, solo or not, needs a written security program. The IRS repeats it every renewal season.
Form W-12, the PTIN application and renewal, asks whether you know about the requirement. Saying yes without a plan is a risk you don't need.
Since May 2024, a breach affecting 500 or more people must be reported to the FTC within 30 days. Your WISP is the playbook for that day.
About your systems, devices, staff and paper. Never about clients.
Secure checkout by Stripe.
Read it on screen, download Word or PDF, print it and sign it.
Yes. IRS Publication 5708 is a free 28-page template, and it's a good one. It's also a fill-in-the-blanks document full of bracketed instructions, and many preparers never finish it.
WISP Ready does the filling in for you: your software, your devices, your staff, the small-firm exemption under 16 CFR 314.6 if it applies, the FTC 500-person rule, and a list of what's still missing in your office.
Same foundation as the IRS template. Finished tonight instead of someday.
If your plan is missing any element of 16 CFR 314.4, tell us within 30 days and we'll fix it or refund you in full.
No. It's a plan document tailored from your answers using public IRS and FTC guidance. You stay responsible for putting the safeguards in place. Speak with a lawyer about your specific obligations, including state law.
No product is approved by the IRS or the FTC. Your plan follows the structure of IRS Publication 5708 and covers each element of the FTC Safeguards Rule, 16 CFR 314.4.
No. We ask about your systems and setup, never about clients. Please don't enter Social Security numbers or client names.
Yes. Size doesn't remove the requirement. If you hold information on fewer than 5,000 consumers, a few elements become optional under 16 CFR 314.6, and your plan says so. We include them anyway because the IRS recommends them.
Your plan includes the steps for state breach notification. It also flags extra rules in Massachusetts, New York and California. It doesn't replace advice on state law.
The plan works for firms of any size and switches on the full requirements for firms holding information on 5,000 or more consumers. Larger firms may also want an outside security assessment.
WISP Ready is a product of Fiduci Consulting Inc. Not affiliated with or endorsed by the IRS or FTC. Not legal, tax or cybersecurity advice. Prices in US dollars. Terms, privacy and refunds · support@wispready.com