PTIN renewal season is open. Every PTIN expires December 31.Get your WISP before you renew →
Apex Tech 4 Tax Pros
(979) 710-3386
For paid tax preparers & tax offices

Your WISP, written for your practice. In under 5 minutes.

Skip the blank template. Answer fewer than 23 plain-language questions about your office, and get a complete Written Information Security Plan with your firm name, your software, your staff and your incident response contacts already filled in.

$199One-timeUSD
Instant downloadEnglish or Spanish
  • Names your Qualified Individual, as the Safeguards Rule requires
  • Incident response plan with IRS reporting steps pre-filled
  • No IT background, legal knowledge or software install needed
  • Bonus included: Security Self-Checklist with 77 checks mapped to IRS, FTC and NIST guidance
Built onIRS Pub 4557IRS Pub 5708FTC 16 CFR 314
Takes 30 secondsCustom WISP $199
  1. 1 · Your details
  2. 2 · Checkout
  3. 3 · Your WISP

Start your custom WISP

Enter your details, then complete checkout and answer your questions on the next step.

Secure checkoutInstant downloadBilingual support
Not ready to buy? Get the free WISP Readiness Checklist
Bonus: 77-point Self-Checklist
Line 11

Form W-12 asks every preparer, at every PTIN renewal and under penalties of perjury, to acknowledge that the law requires a written information security plan.

Dec 31

Every PTIN expires at year end. Renewal season is open now, the natural time to get your plan in writing.

Next business day

Authorized IRS e-file providers must report security incidents to the IRS as soon as possible, and no later than the next business day after confirmation.

30 days

Under the FTC Safeguards Rule, a breach involving 500 or more consumers must be reported to the FTC within 30 days of discovery.

The problem

Most preparers download a template, then never finish it.

A blank WISP template looks simple until you hit the risk assessment, vendor oversight and incident response sections. Then it sits in a folder with "[INSERT FIRM NAME]" still in it.

Publication 5708 is clear that your plan should describe your actual practice: your systems, your people, your procedures. A placeholder template does not do that.

Where unfinished WISPs usually break down

  • No Qualified Individual named
  • Generic risk assessment that doesn't match your software or devices
  • Vendors (software, cloud, email) never listed
  • Incident response that says "respond promptly" with no contacts
  • No employee training or annual review schedule
Choose your path

Do it yourself, or have it written for you.

Free template
$0
Custom WISPRecommended
$199
Writing
You write every section yourself
Under 5 minutes, every section written for you
Effort
Hours of work, plus reading Pub 4557, Pub 5708 and the Safeguards Rule
Fewer than 23 plain-language questions
Your details
No guidance on what to put in each section
Your firm name, staff, software and vendors, no placeholders
Incident response
—
Incident response with IRS reporting steps pre-filled
Language
English only, translate it yourself
English or Spanish
Bonus
—
Bonus: Security Self-Checklist (77 checks)
Instant download · English or Spanish
What's in your WISP

Every section, written with your firm's details.

Apex Tech 4 Tax ProsWISP · 2026
Written Information Security Plan
Your firm
Built on IRS Pub 4557, Pub 5708 and the FTC Safeguards Rule
Contents
  1. 01Qualified Individual
  2. 02Risk assessment
  3. 03Technical safeguards
  4. 04Physical safeguards
  5. 05Employee training
  6. 06Vendor oversight
  7. 07Incident response plan
  8. 08Annual review schedule
Your name
Qualified Individual · Signed and reviewed every year
Bonus: Security Self-Checklist (77 checks)
01

Qualified Individual

The named person who oversees your security program, with responsibilities.

02

Risk assessment

The client data you hold, where it lives, and the risks to it.

03

Technical safeguards

MFA, encryption, antivirus, firewall, backups and access controls.

04

Physical safeguards

Office security, device handling and secure disposal.

05

Employee training

Training requirements and acknowledgment records for your staff.

06

Vendor oversight

Your software, cloud and service providers, with a review schedule.

07

Incident response plan

Who to call and what to do, with IRS reporting steps pre-filled.

08

Annual review schedule

When and how to update the plan as your practice changes.

Bonus included

Security Self-Checklist

77 yes/no checks to test your office against your WISP, every year. See a preview ↓

A peek at the questions

Questions you can answer without calling your IT person.

Most take a few seconds. If you don't know an answer, that's a sign the area needs attention, and the plan tells you what to do.

1. What tax software do you use?
2. How many preparers work in your office?
3
120+
3. Do you use MFA on your tax software and email?
5. How do you back up client files?
Live preview
Written Information Security Plan
0/5
Prepared for Your firm
Qualified Individual

Answer question 4 to name your Qualified Individual.

Risk assessment

Answer questions 1–2 to describe where client data lives.

Technical safeguards

Answer question 3 to fill in your MFA safeguard.

Backups

Answer question 5 to fill in your backup procedure.

Sample of 5 questions. Your full WISP has every section filled in from fewer than 23 questions.
Instant download · No account, no software to install
Included with your WISP

Plus your Security Self-Checklist.

Your WISP says what your office does. The checklist shows whether it's actually happening. 77 yes/no checks across 16 areas, each one tied to its source in IRS Publication 4557, Publication 5708, the FTC Safeguards Rule or NIST password guidance.

  • Find gaps before a hacker or a reviewer does
  • Use it for your required annual WISP review
  • Hand it to your staff or IT provider, then sign and keep it on file
  • Updated for 2026: MFA for everyone, encryption, the FTC 30-day breach notice and current NIST password rules
WISP + checklist, one-time · Instant download
Security ChecklistPreview · 3 of 16 areas
Multi-Factor Authentication (MFA)
1.Tax preparation software
FTC 314.4(c)(5)
2.Business email account
FTC 314.4(c)(5)
3.Cloud storage and client portal
FTC 314.4(c)(5)
Encrypt client data
1.Full-disk encryption on all laptops and desktops
IRS Pub 4557 · Security Six
2.Client documents sent through a secure portal, not plain email
FTC 314.4(c)(3)
Incident Response Plan
1.Contacting the IRS Stakeholder Liaison is part of the plan
IRS Pub 5708
2.FTC notified within 30 days if 500+ consumers are affected
FTC 314.4(j)
+ 70 more checks across 13 more areas
How it works

Three steps. Done before your coffee cools.

1

Check out

Pick English or Spanish. No account, no software to install.

2

Answer the questions

Fewer than 23 plain-language questions: your firm, software, devices, staff, vendors.

3

Download your WISP

Review it, sign it, train your staff on it, and keep it on file. Review it at least once a year.

No account, no software to install

Your WISP says you train staff and test your safeguards. We can help you do both.

Cybersecurity Training & Certificate

Staff training with a certificate for your records.

$149

Remote IT Security Assessment

We check your actual devices against what your WISP says.

From $599
FAQ

Questions, answered.

Mon–Fri, 9 a.m.–6 p.m. CT, in English or Spanish.

(979) 710-3386info@at4tp.com
PTIN renewal season is open

Every PTIN expires December 31. Get your WISP before you renew.

$199 one-time · instant download · English or Spanish

Call (979) 710-3386
Secure checkoutInstant downloadBilingual support
Custom WISP $199 · one-time · instant download