Your free Written Information Security Plan, audit-ready in under 30 minutes.
The IRS and FTC require every tax preparer to keep a Written Information Security Plan (WISP). Download the free WISP template 4,000+ tax professionals use: a complete example plan you adapt to how your firm actually works.
How this WISP template works
A complete example plan arrives instantly as an editable Word document and PDF, structured section by section.
The IRS only publishes an example; a compliant WISP has to reflect your real practice. Every section arrives pre-written, so your work is naming your people, your systems, and the safeguards you actually use.
Keep it with your records and check the box with confidence at PTIN renewal. Review and update it once a year.
What’s inside your WISP template
IRS Publication 4557 and the FTC Safeguards Rule spell out what a compliant Written Information Security Plan must address. The template drafts every required section for you, written by cybersecurity professionals, with clear marks where your firm’s real details go.
What goes into a written information security plan
A written information security plan documents how your firm protects client data in practice: who is responsible, what hardware and software touch taxpayer information, how access is controlled, how staff are trained, and what happens if something goes wrong.
The IRS only publishes an example, and no template replaces the footwork of describing your real practice. What the template removes is the blank page: every section arrives pre-written, so your work is naming your people, your systems, and the safeguards you actually use, then reviewing the plan once a year.
Why tax preparers trust this WISP template
I spent two weeks trying to write a WISP from scratch before finding Bellator’s template. It covered everything I missed and I had it customized for my practice in under two hours. This should be required reading for every tax preparer.
I downloaded the free WISP template and had it customized for my practice in under an hour. When I was ready for full protection, Bellator handled everything — EDR, monitoring, the works.
Common questions about written information security plans
It is your firm’s own written record of how client data is protected: the responsible person, your systems, your safeguards, and your incident response. The IRS and FTC both require professional tax preparers to maintain one.
Every professional tax preparer, from solo practitioners to large firms. PTIN renewal now asks you to confirm you have one, and the FTC Safeguards Rule applies regardless of firm size.
Long enough to honestly cover the required sections for your firm; for most small practices that is a focused document, not a binder. Substance beats page count: a short plan that reflects reality outperforms a long one that does not.
Yes, genuinely free and complete. Bellator is a cybersecurity firm for tax professionals. Some preparers who start with the template later ask us to review their plan or manage their security, and that is the whole business model.
Yes, when adapted to your firm. The rule’s elements, from the named coordinator to service provider oversight, map onto the plan’s sections, and the template covers IRS Publication 4557 at the same time.
Don’t wait for the audit letter.
Download the free Written Information Security Plan template now and be audit-ready before your next client walks in.
Get My Free WISP Template →Free forever · No credit card · Instant download