Renewing your PTIN? Federal law requires a WISP.
Take the next step on your required Written Information Security Plan. Download the free template and document the people, systems and safeguards your tax practice uses.
Start your WISP documentation
Free template · Instant download · No credit card
We use your details to deliver the template and follow up.
- Tax-practice WISP template based on IRS Publication 5708
- Employee security training and incident response sections
- Risk assessment and FTC Safeguards checklist
- Instant access to the free download
Form W-12, Line 11 asks you to acknowledge the WISP requirement. Your plan should reflect the safeguards your practice actually uses.
Download first. Customize the plan for your practice next.
Why PTIN renewal brings up your WISP
A written plan is required
The FTC Safeguards Rule requires covered tax preparation practices to create and maintain a written information security program. Your plan must reflect how your practice actually protects taxpayer data.
Your PTIN renewal calls it out
Form W-12, Line 11 asks you to acknowledge that paid tax return preparers are required by law to create and maintain a WISP. It does not ask you to certify that your plan is already complete.
A template is a starting point
Download the free template, then tailor it to your systems, staff, service providers, and response process. A file left uncustomized does not protect client information.
A practical starting point for your practice.
The template gives you a structure for documenting your own people, technology, vendors and procedures. Complete it with your actual safeguards, put the plan into use and keep it current.
Organized around IRS Publication 5708 and core FTC Safeguards Rule topics.
Get my free WISP templateWhat your plan documents
- Purpose, scope and plan objectives
- Responsible individuals and your Data Security Coordinator
- Risk assessment
- Hardware and software inventory
- Data safeguards and access controls
- Employee training and management
- Incident response and breach notification
- Service provider oversight
- Annual review and updates
The requirements behind the document
IRS Publication 4557
IRS guidance explains the administrative, technical, and physical safeguards tax professionals should use to protect taxpayer information.
FTC Safeguards Rule
Covered practices must designate a qualified individual, assess risks, and implement safeguards suited to the business. The written plan records the security program.
Form W-12, Line 11
Line 11 asks you to acknowledge awareness of the legal duty to create and maintain a written information security plan.
Your practice
The free template gives you a structure. Complete it with your actual people, devices, vendors, safeguards, and incident procedures.
Common questions from tax professionals
Is a WISP really required by federal law?
Yes. The FTC Safeguards Rule requires covered tax preparation practices to have a written information security program. Form W-12, Line 11 asks preparers to acknowledge awareness of the requirement.
Does downloading the template make my practice compliant?
No. The template is a starting point. You need to document your practice-specific risks and safeguards, put the plan into use, and keep it current.
Does Bellator renew my PTIN?
No. You renew through your IRS PTIN account or Form W-12. Bellator provides the WISP template and optional help with your security plan.
How is this different from a generic template?
It is organized for tax practices around IRS Publication 5708 and core FTC Safeguards Rule topics, with places to fill in your actual procedures.
I am a solo practitioner. Do I still need this?
A solo tax practice handling taxpayer information still needs a written security plan. The specific safeguards should fit the size and complexity of your practice.
Your WISP starts here.
Download the free template and make it reflect your practice. If you want a custom plan, our team can write it with you.