Issue Number: 2026-49
Written Information Security Plans are essential for tax pros
A Written Information Security Plan – or WISP – is just one tool for tax professionals to protect their client’s data, and it’s required by law. The IRS and the Security Summit partners have created an easy sample guide that tax pros can use when making their own WISP. The Security Summit is a public-private partnership made up of representatives from the IRS, state tax administrators, tax software companies, tax professionals, and the larger tax community that helps protect taxpayers from identity theft.
Create a WISP A WISP protects client information most effectively when tailored to the size, scope, complexity and sensitivity of the customer data it handles. A WISP should focus on:
- Employee training and management
- Information systems
- Detecting and managing system failures
WISP requirements As a part of their security plan, each tax professional needs to:
- Designate one or more employees to coordinate its information security program
- Evaluate the effectiveness of the current safeguards for controlling those risks
- Identify and assess risks to customer information in each relevant area of the company’s operation
- Design and implement a safeguards program and regularly monitor and test it
- Contract a service provider that maintains safeguards and handling of customer information
Maintain and update The best plans require maintenance and assessment. Here are some tips to keep a WISP updated and relevant:
- Once completed, keep the plan in an easy-to-read format such as a PDF or Word document
- Store a digital copy, in the event of a natural disaster or emergency
- Regularly review and update any security plan, along with adjusting the plan to accommodate changes to the size, scope and complexity of a tax professional’s business
- It is also recommended to create a data theft response plan and report any ID theft
More information
Subscribe to IRS Tax Tips
Back to top

Thank you for subscribing to IRS Tax Tips, an IRS e-mail service. For more information on federal taxes please visit IRS.gov.
RECEIVE TEXT MESSAGES FROM THE IRS!
Did you know you can now receive IRS bulletins directly on your mobile phone?
Stay informed wherever you are with convenient text message updates. Some IRS topics like IRS Newswire and QuickAlerts are available for text subscription, giving you faster access to important information through a new, easy-to-use communication channel.
Additional topics will be added throughout the year, expanding the information you can receive by text.
Opt-in today to start receiving IRS text message bulletins and stay connected on the go.
This message was distributed automatically from the IRS Tax Tips mailing list. Please Do Not Reply To This Message.
|