A written security plan built around your practice. Free.
Use this editable Word and PDF template to document the safeguards your firm actually uses to protect taxpayer data. Adapt every section to your people, systems, and procedures.
Turn your safeguards into a firm-specific plan
A complete example plan arrives instantly as an editable Word document and PDF, structured section by section.
A useful WISP reflects your real practice. Every section arrives pre-written, so your work is naming your people, your systems, and the safeguards you actually use.
Keep it with your records, review it regularly, and update it when your people, systems, or safeguards change.
Inside the editable WISP template
This template gives you a practical starting structure for documenting how your practice safeguards taxpayer data, with clear places to add your firm’s real people, systems, and procedures.
What goes into a written information security plan
A written information security plan documents how your firm protects client data in practice: who is responsible, what hardware and software touch taxpayer information, how access is controlled, how staff are trained, and what happens if something goes wrong.
Publication 4557 is IRS guidance for safeguarding taxpayer data, while the FTC Safeguards Rule requires covered firms to maintain a written information security program. A template removes the blank page; it does not replace firm-specific judgment or advice.
Built for tax-preparer workflows
Start with a usable structure instead of a blank page. The template organizes the planning areas so you can focus on the details of your own practice.
Make the document firm-specific. Identify your responsible people, technology, data-handling practices, and review schedule before you approve it.
Common questions about written information security plans
It is your firm’s written record of how client data is protected: the responsible people, systems, safeguards, and incident-response procedures that apply to your practice.
The FTC Safeguards Rule can apply to tax-preparation firms, including smaller practices. Confirm the requirements that apply to your business and document the safeguards you actually use.
Long enough to honestly cover the required sections for your firm; for most small practices that is a focused document, not a binder. Substance beats page count: a short plan that reflects reality outperforms a long one that does not.
Yes, genuinely free and complete. Bellator is a cybersecurity firm for tax professionals. Some preparers who start with the template later ask us to review their plan or manage their security, and that is the whole business model.
A firm-specific WISP can be part of a written information security program. Tailor it to your actual safeguards and obtain appropriate advice before treating it as your complete compliance program.
Start with a plan built for your practice.
Download the editable Written Information Security Plan template and tailor it to how your firm protects taxpayer data.
Get My Free WISP Template →Free template · No credit card · Instant download