WISP Health Check
Paste your current Written Information Security Plan. It is scanned against the elements the FTC Safeguards Rule requires a plan to address, in your browser, with nothing transmitted or stored. A plan you have not opened since it was written usually fails its own table of contents.
Each one lights as the scan finds wording for it.
This scan checks whether the plan talks about what the Rule requires; it cannot check whether any of it is true in your office. That verification, and a plan written from evidence, is the fixed-fee compliance engagement. Starting from nothing? The free builder produces an honest draft in twenty minutes.
WISP BuilderThe EngagementTalk to UsKeyword-level scan for education only; wording varies and a passing scan is not a compliance determination. The scan matches wording, not meaning: a plan that says the firm does not encrypt, or has no incident response plan, still counts as covering that element, because the words are there. A tick means the subject is mentioned somewhere, nothing more. Read the sections it marks before relying on any of them.