CENTRALCTOINDEPENDENT TECHNOLOGY LEADERSHIPLet’s talk
← Written security plans for tax firms
FREE 2-MINUTE SELF-CHECK

Are you IRS-compliant?
Find out in 2 minutes.

Ten yes-or-no questions based on the FTC Safeguards Rule and IRS Publications 5708 and 4557. Your answers stay in your browser. Nothing is sent or stored.

QUESTION 1 OF 10Does your firm have a written information security plan (WISP)?

A document describing how your office protects client information. Not just good habits; it has to be written down.

QUESTION 2 OF 10Have you named one person who is responsible for it?

The rule calls this person the Qualified Individual. In a small office it's often the owner.

QUESTION 3 OF 10Have you written down what client data you keep, where it lives, and what could go wrong?

For example: tax software, email, file shares, paper files, backups, and laptops that leave the office.

QUESTION 4 OF 10Is multi-factor login turned on for email, tax software, and remote access?

A code from an app or text in addition to the password, for everyone who touches client data.

QUESTION 5 OF 10Are laptops, backups, and client files encrypted?

Including data at rest on devices and data sent outside your office.

QUESTION 6 OF 10Does everyone have their own login, and are former staff removed right away?

No shared passwords, and access limited to what each person needs.

QUESTION 7 OF 10Has everyone on staff had security awareness training in the last 12 months?

Phishing, fake client emails, and what to do when something looks wrong.

QUESTION 8 OF 10Do you check that your vendors protect client data?

Tax software, cloud storage, IT provider, and anyone else who can reach client information.

QUESTION 9 OF 10Do you know exactly who to call and what to do if client data is stolen?

The IRS asks preparers to report data theft to their IRS Stakeholder Liaison right away.

QUESTION 10 OF 10Do you review and update your plan at least once a year?

Including after you change software, hire or lose staff, or have a security scare.

0 of 10 answered