ApexTech4TaxPros

IT_SECURITY_ASSESSMENT & WISP_COMPLETION

Your IRS-Compliant WISP.

Under 5 Minutes.
Zero Headaches.

Stop wrestling with blank templates and legal jargon. Answer fewer than 23 simple questions about your practice and receive a fully written, professionally formatted, IRS and FTC-compliant WISP — customized to your specific firm. In English or Spanish.

⚡Fewer than 23 questions. Under 5 minutes. A complete WISP.
Most tax preparers spend hours — or weeks trying to figure out how to write their WISP. Our system does the writing for you. You answer simple questions about your practice. We generate a professional, fully customized compliance document. Done.
🇺🇸 Available in English
🇲🇽 Disponible en Español
📋 IRS Pub 4557 Compliant
⚖️ FTC Safeguards Rule Compliant
🆓 Free template also available
📋 Your Custom WISP Generator
✓ Under 5 Minutes
What is your firm's name?
✓ ABC Tax Solutions
What tax software do you use?
✓ TaxSlayer ProWeb
How many preparers work at your office?
✓ 3 preparers
Do you use cloud storage for client files?
✓ Yes — secure cloud drive
8
Who is your designated security coordinator?
Type your name here...
9
Do you use MFA on your tax software?
Pending...
...
Up to 23 total questions • Most answered in seconds
Your complete WISP generates instantly when done
The Stakes

Why Your WISP Is the Most Important Document in Your Tax Practice

Every year, thousands of tax professionals lose their PTIN, face federal fines, or suffer data breaches that destroy their practice — all because they did not have a compliant, customized WISP in place. Here is what is at stake.

🚫

No WISP = No PTIN = No Practice

IRS Form W-12, Line 11 requires every PTIN holder to certify they have a WISP — under penalty of perjury. Without one, you cannot renew your PTIN. Without a PTIN, you cannot legally prepare federal tax returns for compensation. Your entire practice stops.

4,000+ PTINs revoked annually
 

💸

FTC Fines Up to $100,000 Per Violation

The FTC enforces the Gramm-Leach-Bliley Safeguards Rule against tax preparers. Civil penalties reach $50,685 per violation in 2026, with up to $43,792 per day for ongoing violations. A single data breach with no WISP on file can be financially catastrophic.

$50,685 / violation
 

🎣

Tax Offices Are Prime Cyberattack Targets

Your office holds Social Security numbers, income records, bank account details, and employer identification numbers for every client you serve. Cybercriminals specifically target tax preparers because one successful attack can yield thousands of complete identity theft packages.

#1 target: EFIN + PTIN theft
 

📄

Generic Templates Fail Audits

The IRS and FTC both state clearly: a WISP must reflect your actual systems, your actual staff, and your actual procedures. An uncustomized template with placeholder text does not satisfy compliance requirements. It must describe what YOUR practice actually does.

Generic ≠ Compliant
 

Breach Response: 24-Hour IRS Window

The IRS requires tax preparers to report data theft within 24 hours of discovery. Without a documented incident response plan in your WISP — with specific contacts and URLs pre-filled — you will miss this window during the chaos of a breach, triggering additional federal exposure on top of the breach itself.

24 hours to report a breach

A Custom WISP Solves All of This

A properly customized WISP protects your PTIN, satisfies FTC requirements, documents your security controls, includes your incident response plan, and gives you the audit trail that insurers and regulators require. It is the single most important compliance document your practice needs — and we create it for you in under 5 minutes.

Complete protection in 5 min
Choose Your Path

Free Template vs. Custom WISP — What's the Real Difference?

Both options are available. Here is an honest comparison so you can make the right choice for your practice and your risk tolerance.

Free Download

Free WISP Template

A starting framework — you complete it yourself
⭐ Recommended — Most Popular

Custom WISP Template

Estimated time: Under 5 minutes — fewer than 23 questions
⚡ Answer questions. We write your complete WISP
  • ⏱️ Estimated time: 4–12 hours to complete correctly
  • ✔ Free to download immediatel
  • ⚠ Blank — you must fill in all sections yourself
  • ⚠ Requires understanding of IRS Pub 4557 and FTC Safeguards Rule to complete correctly
  • ⚠ Incident response section typically left incomplete — most common audit failure point
  • ⚠ Generic language risks failing an FTC audit or regulatory review if not properly customized
  • ✗ No guidance on what to write for each section
  • ✗ No verification that your completed version is compliant
  • ✗ Not available in Spanish — must translate yourself
  • ⚠ Reminder: an uncompleted or generic template does not satisfy IRS or FTC requirements
  • Answer fewer than 23 simple questions about your practice
  • Receive a fully written, professionally formatted WISP — customized to your firm
  • No legal knowledge, IT background, or compliance experience required
  • All required sections written and pre-filled: Qualified Individual, risk assessment, technical and physical safeguards, employee training, vendor oversight, incident response plan
  • Incident response plan included with IRS 24-hour reporting contacts pre-filled
  • Available in English and Spanish — select your language
  • IRS Publication 4557 and FTC Safeguards Rule compliant
  • Ready for PTIN renewal certification on Form W-12, Line 11
Perfect for: every tax preparer who wants a compliant WISP without the time and stress
Was $1000
Choose Your Path

Free Template vs. Custom WISP — What's the Real Difference?

Both options are available. Here is an honest comparison so you can make the right choice for your practice and your risk tolerance.

Free Download

Free WISP Template

A starting framework — you complete it yourself
  • ⏱️ Estimated time: 4–12 hours to complete correctly
  • ✔ Free to download immediatel
  • ⚠ Blank — you must fill in all sections yourself
  • ⚠ Requires understanding of IRS Pub 4557 and FTC Safeguards Rule to complete correctly
  • ⚠ Incident response section typically left incomplete — most common audit failure point
  • ⚠ Generic language risks failing an FTC audit or regulatory review if not properly customized
  • ✗ No guidance on what to write for each section
  • ✗ No verification that your completed version is compliant
  • ✗ Not available in Spanish — must translate yourself
  • ⚠ Reminder: an uncompleted or generic template does not satisfy IRS or FTC requirements
⭐ Recommended — Most Popular

Custom WISP Template

Estimated time: Under 5 minutes — fewer than 23 questions
⚡ Answer questions. We write your complete WISP
  • Answer fewer than 23 simple questions about your practice
  • Receive a fully written, professionally formatted WISP — customized to your firm
  • No legal knowledge, IT background, or compliance experience required
  • All required sections written and pre-filled: Qualified Individual, risk assessment, technical and physical safeguards, employee training, vendor oversight, incident response plan
  • Incident response plan included with IRS 24-hour reporting contacts pre-filled
  • Available in English and Spanish — select your language
  • IRS Publication 4557 and FTC Safeguards Rule compliant
  • Ready for PTIN renewal certification on Form W-12, Line 11
Perfect for: every tax preparer who wants a compliant WISP without the time and stress
Was $1000
Process

How You Get Your Complete WISP in Under 5 Minutes

No IT knowledge. No legal background. No wasted afternoon. Just simple questions and a professional result

1

Click "Get My Custom WISP"

Select English or Spanish. You are taken directly to our secure WISP generator — no account creation, no complicated forms, no software to install.

⚡ Starts Immediately
2

Answer Fewer Than 23 Simple Questions

Questions are written in plain language — not legal jargon. They cover your basic firm information, software and devices you use, how many staff members you have, and a few security practices you likely already follow.

⏱ Under 5 Minutes Total
3

We Write Your Entire WISP

Your answers are used to generate a complete, professionally written WISP document — with all required sections filled in using your specific firm's details.

✍️ Fully Written For You
4

Download Your Complete WISP Document

Your finished WISP is ready to download immediately. Save it, store it on your AVD desktop, and use it to answer YES with confidence on IRS Form W-12.

✅ IRS & FTC Compliant · PTIN Ready
5

Review Annually — Update When Things Change

The FTC requires your WISP to be reviewed and updated at least once per year and whenever significant changes occur.

📄 Annual Update Required By Law

📄 What Your Completed Custom WISP Includes

👤
Designated Qualified Individual
Your name, title, and security responsibilities
🔍
Risk Assessment
Specific data types, risks and mitigation procedures
🔐
Technical Safeguards
MFA, encryption, antivirus, firewall and controls
🏢
Physical Safeguards
Office security, device policies and clean desk procedures
🎓
Employee Training Section
Training requirements and acknowledgment records
🤝
Vendor Oversight Procedures
Service provider inventory and review schedule
🚨
Incident Response Plan
IRS reporting contacts and breach procedures
📅
Annual Review Schedule
Required update triggers and review documentation
The Questions

Fewer Than 23 Questions. Every WISP Section Covered.

Here is a preview of the categories our questions cover and why each one matters. None require legal knowledge — just basic information about how you run your practice.

🏢
Your Firm Basics
~4 Questions
  • Business name, address, and type of practice
  • Name of your designated security coordinator
  • How many preparers and staff members you have
  • Do you operate from one or multiple locations?
💻
Technology & Software
~5 Questions
  • What tax software do you use?
  • Do you use cloud storage or a virtual desktop?
  • What devices access client data?
  • Do you use business email or personal email?
🔐
Security Practices
~6 Questions
  • Do you use multi-factor authentication?
  • Is antivirus software installed on your devices?
  • Do you use a password manager or lock screen?
  • How do you back up client files?
👥
Staff & Access
~4 Questions
  • Who has access to client data in your office?
  • Do you have a process for removing staff access when they leave?
  • Do you conduct any security training for staff?
  • Do you have remote preparers or work-from-home staff?
🤝
Vendors & Partners
~2 Questions
  • What third-party services do you use that handle client data?
  • Do your vendors have their own security policies?
🚨
Incident Preparedness
~2 Questions
  • Who would you contact first if you discovered a data breach?
  • Do you have a process for notifying affected clients?
  • IRS reporting contacts and 24-hour procedures are pre-filled for you

Fewer Than 23 Questions. Every WISP Section Covered.

Here is a preview of the categories our questions cover and why each one matters. None require legal knowledge — just basic information about how you run your practice.

Generic vs. Custom — The Real Stakes

Why a Generic Template Can Still Leave You Exposed

The IRS and FTC are explicit: a WISP must reflect your actual practices. An uncustomized or incomplete template is better than nothing — but it will not protect you in an audit.

⚠️ Generic / Incomplete Template Risk
  • "Insert your firm name here" language left in document — signals to auditors it was never customized
  • Incident response section says "respond promptly" — does not satisfy IRS or FTC requirements for specific contacts and timelines
  • No designated Qualified Individual named — FTC §314.4(a) explicitly requires a specific person by name
  • Risk assessment section left blank or generic — regulators expect documented, firm-specific analysis
  • Vendor section incomplete — FTC §314.4(g) requires documented oversight of every vendor handling client data
  • Employee training section skipped — the most commonly missing WISP element in audit reviews
  • Pre-2020 template with no remote work, cloud, or virtual desktop coverage — major compliance gap flagged by IRS ERO reviews
✅ AT4TP Custom WISP — What You Get
  • Every section written using your specific firm name, staff, software, and procedures — zero placeholders
  • Incident response plan with your designated coordinator named, IRS e-Services reporting URL pre-filled, and 24-hour notification procedure documented
  • Qualified Individual named with full contact information and documented responsibilities — satisfies FTC §314.4(a)
  • Risk assessment written for your specific technology environment, data types, and staff structure
  • Vendor section populated with your specific software providers and annual review schedule
  • Employee training requirements documented with your specific schedule and acknowledgment process
  • Covers remote work, cloud services, virtual desktop, and mobile device access — current compliance standards

🌐 Complete bilingual support — English & Spanish

Questions about your WISP? Our team speaks both languages. Email info@at4tp.com or visit apextech4taxpros.com.

🇺🇸 🤝 🇲🇽

Two Languages · One Standard

Available in English and Spanish — The Same Complete WISP

Your compliance should never be a language barrier. Both versions cover every required IRS and FTC element — written professionally in the language you work in.

🇺🇸

Custom WISP — English

Written Information Security Plan · IRS Pub 4557 & FTC Compliant
🇲🇽

WISP Personalizado — Español

Plan de Seguridad de la Información · Ley GLBA y Norma FTC
  • Complete WISP written in professional English
  • All 8 required WISP sections included and filled
  • Incident response plan with IRS reporting contacts
  • Ready for PTIN renewal Form W-12, Line 11
  • Under 23 questions · Under 5 minutes
  • IRS Publication 4557 + FTC Safeguards Rule compliant
  • WISP completo escrito en español profesional
  • Las 8 secciones requeridas incluidas y completadas
  • Plan de respuesta a incidentes con contactos del IRS
  • Listo para la renovación de PTIN, Formulario W-12
  • Menos de 23 preguntas · Menos de 5 minutos
Was $1000
Two Languages · One Standard

Available in English and Spanish — The Same Complete WISP

Your compliance should never be a language barrier. Both versions cover every required IRS and FTC element — written professionally in the language you work in.

🇺🇸

Custom WISP — English

Written Information Security Plan · IRS Pub 4557 & FTC Compliant
  • Complete WISP written in professional English
  • All 8 required WISP sections included and filled
  • Incident response plan with IRS reporting contacts
  • Ready for PTIN renewal Form W-12, Line 11
  • Under 23 questions · Under 5 minutes
  • IRS Publication 4557 + FTC Safeguards Rule compliant
🇲🇽

WISP Personalizado — Español

Plan de Seguridad de la Información · Ley GLBA y Norma FTC
  • WISP completo escrito en español profesional
  • Las 8 secciones requeridas incluidas y completadas
  • Plan de respuesta a incidentes con contactos del IRS
  • Listo para la renovación de PTIN, Formulario W-12
  • Menos de 23 preguntas · Menos de 5 minutos
Was $1000
Common Questions

IT Assessment FAQs

Everything tax professionals ask before booking their device assessment.

How does the remote connection work. Do I need to install anything?
The assessment is performed 100% remotely using an encrypted professional remote support connection — similar to ConnectWise Control. After you book, AT4TP sends you a simple session link or small connection file. You run it, our technician connects securely to your device, and the assessment begins. There is nothing permanent to install — the session tool closes completely when we are finished and leaves no ongoing access to your machine. You can watch everything that happens on your screen in real time throughout the session. No travel, no shipping your device, no disruption to your office.
Will you access my client's tax file during this assessment?
No. The assessment reviews security settings, configuration, software inventory, and system-level controls — not the content of your client files. We look at where files are stored and how access is controlled, but we do not open, view, or retain any client data. AT4TP treats all information from your device with strict confidentiality.
What is difference between the $599 single device and the $999 bundle?
The $599 single device assessment covers one device — either your laptop or your desktop PC. The $999 Laptop & PC Bundle covers both devices in a single engagement, delivering a combined report and a WISP that documents both machines. The bundle saves $199 versus booking two separate assessments. If you use both a laptop and a PC at any point during the year to access client data, the FTC requires both to be covered in your WISP — making the bundle the more complete compliance solution.
How long does the assessment take?
A single device assessment typically takes 1–2 hours depending on the complexity of your setup. The Laptop & PC Bundle takes 2–3 hours total. Most of this time your device runs scans in the background — you do not need to sit and watch the screen the entire time. Your written report and completed WISP are delivered within 48 hours (single device) or 48–72 hours (bundle) after the assessment is complete.
What if the assessment finds serious issues — is AT4TP going to fix them?
The assessment report includes specific, plain-language remediation recommendations for every issue found. Many fixes — like enabling BitLocker, turning on MFA, or installing updates — can be done by the device owner following the instructions in our report. For more complex remediation (such as network configuration or secure storage setup), AT4TP can discuss additional support services. If you have our Secure Virtual Desktop subscription, most of these issues are already resolved at the platform level — the assessment will reflect that.
Can I book the assessment even if I already have a WISP?
Yes — and if you already have a WISP, this is actually the most important thing you can do. We will check whether your current WISP accurately reflects the security state of your actual devices. If there are discrepancies between what your WISP says and what your machine actually does, an FTC audit or post-breach investigation will find them. Our assessment ensures your WISP is truthful — and we update your document based on actual findings. The FTC Safeguards Rule also requires periodic review and testing of your safeguards, which this assessment satisfies.
Is the assessment report and WISP available in Spanish?
Yes. AT4TP provides both the written assessment report and the completed WISP document in Spanish upon request. We also conduct the assessment session in Spanish if preferred. Contact us at info@at4tp.com and let us know your language preference when booking.
Get Your WISP Today

23 Questions.

Under 5 Minutes.

Your Complete WISP.

Stop putting it off. Your PTIN depends on it. Your clients depend on it. And with our custom generator, getting compliant has never been faster or easier — in English or Spanish.

Questions? Email info@at4tp.com · Bilingual support available

Scroll to Top