845-210-1677Book intro call
CPA & Tax Firm WISP Kit

Your written security plan.
A practical starting point.

CPA & Tax Firm WISP Kit (FTC Safeguards Rule)

A fill-in Written Information Security Plan (WISP) for small CPA and tax practices, organized around the FTC Safeguards Rule (16 CFR Part 314) and IRS Publications 4557 and 5708.

Editable DOCX + PDF. Helps you document your program. Using it doesn’t make you compliant. Not affiliated with or endorsed by the IRS or the FTC.

See what’s included
Who it’s for

Built for small
tax & accounting practices.

For solo tax preparers and small CPA, bookkeeping and accounting firms, roughly 1–25 people, that want a fill-in starting point for documenting their information security program. Customize the plan to your firm’s people, systems, risks and actual practices.

Inside the document

One WISP.
The working sections together.

The risk register, vendor register, incident-response plan and annual report are sections inside the WISP. They are not separate DOCX or spreadsheet files.

Program ownership & risk

  • Qualified Individual
  • Information and systems inventory
  • Written risk assessment with risk register

Safeguards & day-to-day work

  • Access controls, encryption and multi-factor authentication
  • Disposal, monitoring, backups and email
  • Physical security and client identity
  • Testing and monitoring, staff training and remote work

Vendors, incidents & review

  • Vendor oversight and vendor register
  • Incident-response plan
  • Annual owner report
  • Optional New York SHIELD addendum

Appendices & final check

  • 12-month calendar
  • Staff acknowledgment
  • Offboarding checklist
  • Incident log
  • “Am I done?” checklist
Digital delivery

A three-file ZIP.
No physical shipment.

When purchasing opens, the intended delivery is an instant digital download after checkout through Lemon Squeezy. Checkout and fulfillment are not yet launched or tested.

What the download will contain

One editable DOCX WISP, a PDF with the same content, and LICENSE.txt. The final download will be made available when sales open.

Important to know

A template needs your work.

Educational templates only. Not legal, tax or accounting advice, and not an audit or compliance certification. You are responsible for your own program; consult a qualified attorney about your obligations.

Completing a document does not replace implementing, maintaining and reviewing your firm’s security practices.

Questions about the kit?

Talk with FIX256.

The CPA & Tax Firm WISP Kit is coming soon at $59 one-time.

Call 845-210-1677