Free WISP Template for Tax Preparers

The IRS has made it crystal clear through Publication 5708 and the Security Summit initiatives that tax preparers must implement robust data security measures. These aren’t suggestions – they’re requirements that directly impact your ability to maintain your PTIN and e-filing privileges. Your WISP template must address all these requirements comprehensively.

Publication 5708 outlines the minimum standards for protecting taxpayer information. Every tax preparer must designate a Data Security Coordinator responsible for implementing and maintaining the security program. This person doesn’t need to be a tech expert, but they must understand the security requirements and ensure compliance across your practice. Our WISP template includes detailed coordinator responsibilities.

The IRS requires specific components in your WISP template, including: risk assessment procedures to identify vulnerabilities in your practice; employee management protocols including background checks and training programs; information systems security covering your computers, software, and networks; detecting and managing system failures; and procedures for adjusting your security program as your practice evolves. Each WISP template section addresses these requirements.

Beyond the written plan, the IRS expects implementation of technical controls like anti-virus software updated regularly, firewalls on all devices accessing taxpayer data, encryption for data at rest and in transit, secure passwords with regular changes, and multi-factor authentication for all tax software and systems. Physical security measures are equally important. Your WISP template should document all these measures.

The IRS actively monitors compliance through various means, including PTIN renewal requirements, e-file application reviews, and security checks during examinations. Non-compliance can result in PTIN suspension, loss of e-filing privileges, and referral to the Office of Professional Responsibility. Don’t wait – get your WISP template now.

The FTC Safeguards Rule underwent significant updates that became fully effective in 2023, with continued enforcement ramping up through 2025. These changes dramatically expanded the security requirements for tax preparers, making the old “check-the-box” approach to compliance obsolete. Your WISP template must reflect these comprehensive new requirements.

The updated rule now requires nine specific elements in your information security program and WISP template. You must designate a qualified individual to oversee your security program, conduct regular risk assessments, implement specific safeguards to control identified risks, regularly test and monitor your safeguards, provide security awareness training, oversee service providers, maintain an incident response plan, require your designated coordinator to report to leadership, and periodically assess and modify your security program. Our WISP template covers all nine elements.

The 2025 enforcement focus areas that must be in your WISP template include mandatory multi-factor authentication for any system containing taxpayer information, encryption of all taxpayer data both at rest and in transit, annual penetration testing or bi-annual vulnerability assessments, formal incident response plans with specific procedures, and documented training programs with attendance records. The FTC has made it clear that generic, boilerplate security plans won’t pass scrutiny.

Penalties for non-compliance are severe, with fines up to $100,000 per violation according to the FTC, and each improperly protected taxpayer record can count as a separate violation. Beyond monetary penalties, the FTC can pursue injunctive relief, essentially shutting down non-compliant practices. Use our WISP template to ensure compliance.