Security Planning & Responsibilities
Security planning, ownership, sensitive information, risk assessments, and keeping your WISP current.
FREE RESOURCE FOR ACCOUNTING & CPA FIRMS
Is Your Accounting Firm's IT Ready for Its WISP?
Protecting taxpayer information takes clear responsibilities, informed employees, and technology safeguards that support your firm's written security plan. Start a practical review with our Accounting Firm IT Security & WISP Readiness Checklist.
Download the Free PDF Checklist →30 questions · 7 printable pages · No email address required
SIX AREAS TO REVIEW
A clearer picture of your current practices.
Answer Yes, Needs Attention, or Not Sure. The questions help owners and administrators identify what is in place and where a closer look may be useful.
Account Security & Access Controls
Multifactor authentication, individual accounts, appropriate access, offboarding, and password practices.
Computers, Servers & Networks
Updates, endpoint protection, encryption, firewalls, remote access, and vulnerability reviews.
Email Security & Employee Education
Protection against email threats, recurring education, reporting, and verifying unusual requests.
Data Protection & Business Continuity
Backup schedules, protected recovery copies, restoration tests, continuity, and information disposal.
Incident Response & Service Providers
Incident procedures, notification responsibilities, provider oversight, safeguard reviews, and corrective action.
Turn uncertainty into practical next steps.
Needs Attention and Not Sure responses may indicate areas warranting further review. Gather the facts, prioritize open questions, and agree who will address each next step. A Yes response is not a compliance finding.
Print the checklist or read it on your device. Keep your completed responses within your firm; you do not need to submit them to access this resource.
Download the Checklist →Support for your firm's technology.
The CI Guys can help review the technology supporting your security program, from account access and email protection to backup and recovery planning.
Grounded in official guidance.
IRS guidance emphasizes written security planning for tax professionals. The FTC Safeguards Rule requires covered firms to maintain a written information security program. Your firm's responsibilities depend on its activities and circumstances.
- IRS Publication 4557: Safeguarding Taxpayer Data
- IRS Publication 5708: Creating a Written Information Security Plan
- FTC Safeguards Rule: What Your Business Needs to Know
This checklist is an educational self-assessment resource. It is not a complete WISP, legal advice, a formal security assessment, or a determination of regulatory compliance.
Let's review your next steps.
Talk with Computer Innovations about the technology supporting your firm's information security responsibilities.