Your firm's security plan, written in one call and checked by a pro.
The IRS requires every paid preparer to keep a written information security plan (WISP). We write yours with you, check that MFA, backups and encryption actually work, and hand you the finished plan within 5 business days.
For tax, EA, CPA and bookkeeping firms with 2–15 people. Fully remote. Refund if the plan misses an IRS-required element.
Why this is on your desk now
A WISP isn't optional paperwork. It's a federal requirement for anyone who prepares returns for pay.
The IRS says it's federal law
Tax pros count as financial institutions under the Gramm-Leach-Bliley Act and the FTC Safeguards Rule, so a written plan is required. The IRS repeated this in August 2026.
IRS news release IR-2026-92Your PTIN renewal asks about it
Form W-12 asks every preparer whether they know they must create and maintain a WISP. Renewal season is when most firms realize they don't have one.
About Form W-12A breach has deadlines
Under the FTC Safeguards Rule, a breach affecting 500 or more people must be reported to the FTC, generally within 30 days. A real plan is what you'll be asked for.
Details in IR-2026-92How it works
About two hours of your time, spread over one week. We do the writing.
Pay and book
Check out online, then pick a time for your intake call.
Day 1 · 5 minutes
Fill in the intake form
Staff, software, devices, vendors and where client data lives. Plain questions, no jargon.
Before the call · 15 minutes
Intake call and control check
We walk through the IRS risk questions together. Then you share your screen and show us the settings that matter.
One call · 60 minutes
Delivery call
We walk you through your finished plan and the fix list. You sign and date it. Done.
By day 5 · 30 minutes
The six controls we check on every plan
- MFA on email and tax software
- Endpoint protection on every device
- Encrypted, tested, off-site backups
- Full-disk encryption on laptops
- Email authentication (SPF, DKIM, DMARC)
- Secure client file exchange
One price, set before you start
No contract and no monthly IT bill. Just a plan written for your firm, with proof that it matches how you actually work.
WISP-in-a-Week
$595 one time
- For firms with 2–15 people
- WISP built on IRS Publication 5708
- Live check of all six controls
- One-page fix list, in plain English
- Delivered within 5 business days
Solo
$395 one time
- For sole proprietors
- The same WISP and fix list
- Guided self-check of the controls
- 20-minute review call
Annual review
$195 per year
- For past clients
- Plan updated for staff and software changes
- Controls re-checked
- Reminder timed to PTIN renewal
Guarantee: if your plan doesn't cover every element the IRS lists as required, we fix it or refund you in full.
What this isn't
Not legal advice
We write and check a security plan. For legal questions about your obligations, talk to your attorney.
Not a compliance certificate
No one can certify you "compliant." You get a real plan, checked against how your firm actually runs.
Not an IT contract
No monthly fees and no lock-in. If we find gaps, we'll quote fixed-price fixes, and you decide.
Questions preparers ask
Can't I just fill in the free IRS template?
You can, and the IRS sample (Publication 5708) is a good start. Most firms find it takes a weekend to adapt, and the template can't tell you whether your MFA, backups and encryption actually work. That check is what you're paying for.
Do you need access to my computers?
No. You share your screen on a call and show us the settings. We never ask for passwords and never install anything.
What happens if you find gaps?
They go on your fix list, in plain English, with what to change. You can fix them yourself, have your current IT person do it, or ask us for a fixed-price quote.
What do you keep after delivery?
Your signed plan and the check results, so we can do your annual review. Screenshots from the call are deleted after delivery. We never see or store taxpayer data.
I'm a one-person practice. Is this for me?
Yes. The Solo plan covers the same IRS elements, with a guided self-check instead of a live one.
Who checks your plan
Your plan is prepared and reviewed by IT and cybersecurity professionals with hands-on experience securing small businesses. From Microsoft 365 and endpoint protection to backups and firewalls, we work with these technologies every day to help ensure your security plan reflects the real-world protections your business needs.
Writing a plan is the easy part. Making sure it matches how your office really works is the part templates skip, and that's why every plan here includes a live check.
Get your plan done before filing season.
Book a 15-minute call to ask questions first, or check out now and pick your intake time. Email works too: hello@filedfortified.com