Tax Office WISP Builder

STEP 1 OF 4

Company details

Complete these fields for each individual tax business. Avoid entering taxpayer SSNs, passwords, or other client information.

STEP 2 OF 4

Systems and safeguards

The IRS Security Six — confirm every one

IRS Publication 4557 calls these the Security Six. Each one has its own field above — antivirus, firewall, multi-factor authentication, backup, drive encryption, and VPN — and the plan stays marked incomplete until all six are filled in.

Hardware & data inventory

IRS Publication 5708, Attachment E. List every device or system that holds taxpayer data.

One row per computer, laptop, tablet, phone, server, or external drive. This table prints as Register G in your WISP.

STEP 3 OF 4

Operational policies

Short on time? Tap “Use sample answer” under any box for a starting point. Replace anything in [brackets] and change the rest so it matches what your office really does. Samples left unedited are flagged in your plan.

A written plan is not proof that security measures exist. Describe what your office actually uses. Unfinished controls are highlighted in the generated document.

STEP 4 OF 4

Review and generate

Generate a printable WISP with 23 policy sections, plus a risk register, vendor register, incident log, access review, employee acknowledgment, annual review record, and the hardware & data inventory (Register G).

Download saves the finished plan as a file on your device — nothing is uploaded. Open that file in any browser to read it, or save it as a PDF from there.