All services
Tax & accounting firms

FTC Safeguards & WISP Compliance

Everything the FTC Safeguards Rule and the IRS WISP requirement ask of a tax or accounting firm — assessed, written, and maintained for you, in plain English.

What this solves

If you prepare tax returns or handle client financial data, the FTC Safeguards Rule treats your firm as a financial institution — and the IRS expects every paid preparer to have a Written Information Security Plan (WISP). We build a defensible program around that requirement, so you can prove compliance, not just claim it.

What’s included

Everything in this engagement

Data risk assessment

We map how client data enters, moves through, and leaves your firm — and where the real risks are.

A custom WISP

A Written Information Security Plan written for your firm and your systems, not a generic template you have to finish.

Supporting security policies

Access control, acceptable use, data retention, and incident response — in language your team can actually follow.

Service-provider oversight

Documentation and criteria for the third parties and vendors that touch your client data.

Staff training materials

So the people in your firm become a strength, not the weakest link.

Designated-coordinator structure

The accountable-person framework the Safeguards Rule requires, set up properly.

Who it’s for

Solo and small-firm CPAs, enrolled agents, tax preparers, and bookkeepers across the DFW area — especially anyone facing an IRS or insurance request to produce their WISP.

Works with your IT provider

We’re the compliance layer, not a replacement for your IT company or MSP. We document what’s required, tell your IT provider exactly what to change, and verify it gets done — without stepping on the relationship you already have.

How it works

A clear path, start to finish

1

Readiness call

We confirm the rule applies to you and scope the work.

2

Assess

We run the data risk assessment across your firm.

3

Document

We write your WISP, policies, vendor and training materials.

4

Coordinate & maintain

We brief your IT provider on fixes and keep it current each year.

Need a WISP you can actually show?

Book a free 20-minute readiness call. We’ll confirm what applies to you and outline next steps — in plain English.