Claremont Security seal Claremont Security Contact
// Free_Tool / WISP_Builder

WISP Builder

Written Information Security Plan for tax and accounting practices

Every paid tax return preparer is required to maintain a written data security plan. Answer the questions on the left and a starting document assembles on the right: structured, specific to how your firm actually operates, and ready to be reviewed and adopted.

This is a starting draft, not a finished plan. A WISP is only meaningful if it describes what your firm actually does and is reviewed, adopted, and maintained. Sections marked in amber require your input. Have counsel or a qualified security professional review before adoption. This tool does not constitute legal or compliance advice.
Firm Profile0%
Draft Plan

Why tax preparers need a WISP

Paid preparers handle exactly the category of data that security rules exist to protect: names paired with Social Security numbers, financial account details, and income records. A written plan documents who is responsible, what is protected, which safeguards are in place, and what happens when something goes wrong. Having one is the requirement; having one that reflects reality is the point.

What makes a plan hold up

Generic templates fail in the same way: they describe controls the firm does not actually have. A plan claiming annual training that nobody attended is worse than no plan, because it documents a gap rather than closing one. This builder deliberately marks anything you have not confirmed, so the draft shows you the work remaining instead of papering over it.

Next steps

Take the draft, fill in the marked sections, remove anything that does not describe your firm, and have it reviewed before adoption. Claremont Security does this work for accounting practices, start a conversation, and you can find more free tools at claremontsecurity.com/tools.