Free · No email · Nothing uploaded
Free WISP Check for tax offices.
Paste your plan, see what is missing. Nothing leaves your browser. We check your written information security plan against the IRS Publication 5708 sample sections and the FTC Safeguards Rule elements in 16 CFR 314.4, plus Texas breach notice rules.
Check your plan
Or drop the file here. It is read on this device only.
Your checklist
This check is a readiness tool, not legal advice. It reads the wording of your plan only, so it cannot tell whether your office actually does what the plan says.
Want the gaps filled in for your office? WISP Instant builds a full plan from about 25 questions for $149, one time. See WISP Instant
What it checks
IRS Publication 5708
The 20 sections and attachments of the IRS sample WISP: objective, purpose, scope, responsible people, office policies, implementation clause and Attachments A to F.FTC Safeguards Rule
The 18 elements of 16 CFR 314.4 (a) to (j): Qualified Individual, written risk assessment, access controls, encryption, MFA, disposal, testing, training, service providers, incident response, yearly report and the FTC notice.Texas offices
The breach notices in Bus. & Com. Code 521.053: affected people within 60 days, and the Attorney General within 30 days when 250 or more Texans are involved.Each line in your checklist shows the rule it comes from and, when we found it, the words from your plan that matched. Sources: IRS Pub 5708, 16 CFR Part 314, Texas Bus. & Com. Code ch. 521.
Questions
Is my plan uploaded anywhere?
No. Your browser reads the file or text on your own device. Nothing is sent to us and nothing is stored. The page has no form that submits your plan, and its security settings only let it talk to this website.
What does the check look for?
The 20 sections and attachments of the IRS Publication 5708 sample WISP, the 18 elements of the FTC Safeguards Rule at 16 CFR 314.4 (a) to (j), and for Texas offices the two breach notice items in Texas Business and Commerce Code 521.053, plus one good practice item from 521.052.
If every element is found, is my plan compliant?
Not by itself. The check only reads the wording of your plan. It tells you which elements it found in the text. Compliance depends on what your office actually does. This is a readiness tool, not legal advice.
What does Unclear mean?
We found related words, but not clear wording for that element. Read the quoted line from your plan and decide whether it covers the element.
Which files can I check?
Word files (.docx), PDF files that contain text, and plain text files. You can also paste the text. A scanned PDF is a picture with no text, so paste the text instead. For an old .doc file, save it as .docx first.
We are a small office. Do all of these apply?
Under 16 CFR 314.6, four parts of the rule (the written risk assessment, penetration testing and scans, the written incident response plan and the yearly report) do not apply if you keep customer information on fewer than 5,000 consumers. The checklist marks those items. They are still good practice.