Every tax preparer needs a written information security plan, called a WISP. I write yours in plain words, check that your office really follows it, and train your team to spot scams.
It doesn't matter if you work alone. Federal rules treat tax preparers as financial institutions, so the same data security rules apply to you.
I'm a security professional, not a lawyer. This is a plain summary, and the links go to the official sources.
Your plan, written for your office and ready to sign.
$599
More than 3 people? Ask me for a price.
The full check-up, plus the written security plan the law requires tax preparers to have.
$1,499
You can, and it's free. The hard part is filling it in honestly: the plan has to match what your office really does. I fill it in with you, check that it's true, and help you fix the gaps.
Tax season is when you have the least time and scammers are the busiest. Getting your plan done in the fall means one less thing to worry about when clients start calling.
Yes. The FTC rule applies regardless of size. If you keep information on fewer than 5,000 people, a few parts are lighter (for example, your risk assessment and incident response plan don't have to be written down), but you still need the written security plan and the safeguards.
No. You keep it, follow it and update it. What matters is that it's written down, it matches what your office really does, and your team knows it.
Usually a couple of short meetings, then I write it. I'll give you a date before we start. The full package takes longer because it includes the check-up and staff training.
Yes. Insurance forms ask many of the same questions: 2-step login, backups, training. With the plan done, the forms get easier, and the package includes help filling them in.
No. I'm a CompTIA Security+ and CySA+ certified security professional. I make the security part simple and correct. For legal questions about your obligations, talk to your attorney.