For tax professionals
Your WISP, done in an afternoon.
Federal law requires every professional tax preparer to have a written information security plan. The Ledgerguard WISP Kit gives you a fill-in-the-blank plan, a plain-English guide, a staff training checklist and a breach response plan.
Instant download · Word and Google Docs · Written by a cybersecurity engineer
What you get
- WISP template with 12 sections and 6 attachments
- Step-by-step fill-in guide with examples
- Ready-made risk assessment table
- Employee security training checklist
- Data breach response plan: who to call, in what order
- Annual review checklist
Why tax pros need this
Identity thieves target tax offices because one breach can expose hundreds of Social Security numbers. A WISP is your plan to prevent that, and to respond fast if it happens.
Required by federal law
Tax preparers must protect client data under the FTC Safeguards Rule, and the IRS expects every practice to have a written plan.
Built on the IRS sample
The kit follows the structure of IRS Publication 5708 and the Safeguards Rule, then adds the guidance and examples the sample leaves out.
Hours, not weeks
Most small firms can complete the plan in an afternoon. Fill in the brackets, sign it, train your staff, done.
What's inside
Everything a small or mid-size tax practice needs to write, adopt and maintain its security plan.
| Part | What it is |
|---|---|
| Fill-in guide | Plain-English instructions and examples for every section of your plan |
| WISP template | Your written plan: responsible people, risk assessment, safeguards, vendors, testing, training and sign-off |
| Attachments A–F | Record retention schedule, rules of behavior, staff acknowledgement, device inventory and access list |
| Training checklist | Yearly security training topics, a pre-tax-season check and a sign-off record |
| Breach response plan | A contact list and step-by-step actions for the first hour, first day and first month |
| Annual review checklist | What to re-check every year to keep your plan current |
How it works
No security background needed.
Download
Get every file instantly after checkout, in Word and Google Docs.
Fill in the blanks
Follow the guide to add your firm's details, people, devices and vendors.
Sign, train and file it
Adopt the plan, train your staff with the checklist and keep copies in two places.
Not ready to buy? Start with the free checklist.
15 quick checks to find the biggest security gaps in your practice, in about 10 minutes.
Questions
Do I really need a WISP?
Yes. The IRS states that federal law requires all professional tax preparers to create and implement a data security plan. The plan should fit your firm's size and the client data you handle.
The IRS has a free sample. Why buy this?
The IRS sample (Publication 5708) is a good starting point, and this kit is built on it. The kit adds what most firms struggle with: a step-by-step guide with examples, a ready-made risk assessment, a breach response plan with a contact list, a training checklist and an annual review checklist. It's about saving you hours.
I'm a sole practitioner. Is it overkill?
No. The guide shows where a one-person office can keep things short, and you can hold more than one role yourself.
What format are the files?
Microsoft Word (.docx) plus a Google Docs copy, so you can edit anywhere.
Does this guarantee compliance?
No template can. Your plan has to describe what your firm actually does. The kit gives you the structure and guidance; we recommend reviewing your finished plan with your own advisor.
Will I get updates?
When we update the kit, you can download the latest version from your Gumroad library.