TEST copy for review, not the live site. WISP Check runs here for real; the Build my WISP buttons go to the live WISP Instant page.
StratumWISP Instant by Stratum Tech GroupBuild my WISP

Stratum Tech Group · Katy, TX

Your tax practice's WISP, filled in for your office and ready to sign.

Answer about 25 questions about your office. Get a complete Written Information Security Plan built on IRS Publication 5708 and the FTC Safeguards Rule, as a Word file and a printable PDF, plus a checklist of what to fix. $149, one time.

Build my WISP, $149See a full sample plan

Delivered on screen right after checkout. 14-day refund if it does not fit your office.

Already have a plan? Check it free against Pub 5708 and the FTC rule. Nothing is uploaded.

"Federal law requires all professional tax preparers to create and implement a data security plan."
IRS, Security Summit news release

What you get

Your complete WISP

Sections I to X in the IRS Pub 5708 order: objective, scope, your Data Security Coordinator, a written risk assessment, office policies, incident response and breach notification, and the implementation page with signature lines.

Written for your setup

Your tax software, email, client portal, remote access, Wi-Fi, backups and staff go into the plan by name. Texas firms get the Texas Attorney General breach notice rules.

Gap checklist with dates

Your answers are checked against the FTC rule (MFA, encryption, disposal, testing). Anything missing becomes a dated action item, so the plan describes what you actually do.

All six IRS attachments

Record retention, rules of behavior, breach procedures, staff acknowledgment forms, hardware inventory and access list, plus an FTC element map.

How it works

  1. Answer the questions about your office (about 10 minutes; no IT knowledge needed).
  2. Pay $149 through Stripe checkout.
  3. Your plan opens on screen. Download the Word file or save it as a PDF, fix the items on your gap checklist, sign it, and have your staff sign their acknowledgments.

Compared with the other options

IRS blank template

Free
A 28-page sample in Publication 5708 that you fill in and rewrite by hand. Good if you have the time.

WISP Instant

$149
The same structure, already written around your answers, with your gaps listed. About 10 minutes.

Custom from an IT vendor

$999 and up
Examples: a custom WISP listed at $999 (Verito); managed WISP tiers from $999 a year (Uncle Kam). Good if you want someone to interview you.

Questions

Is a WISP really required for a small or one-person practice?

Under the Gramm-Leach-Bliley Act and the FTC Safeguards Rule, tax and accounting professionals are treated as financial institutions regardless of size, and must keep a written information security program (IRS Publication 5708). The PTIN renewal form also asks preparers to acknowledge this requirement. A sole practitioner can use a shorter plan, and this one scales to your answers.

Does buying this make my firm compliant?

No document does that on its own. Compliance comes from actually doing what the plan says. That is why every plan includes a gap checklist with due dates. This is a documentation template, not legal advice.

What if we hold data on 5,000 or more people?

Choose that answer in the form. Your plan then treats the written risk assessment, incident response plan, annual report and testing schedule (annual penetration test and scans every six months, unless you have continuous monitoring) as required, as 16 CFR 314.6 sets out.

Can I edit it?

Yes. The Word file is yours to edit. Review it each year; the plan includes your next review date.

What do you do with my answers?

We use them only to build your plan. We never sell them. See terms and privacy.

Build my WISP, $149