We Scan Your Laptop or PC.
You Get a
WISP & a Report.
Your existing laptop or desktop PC may already be your biggest compliance vulnerability — and you would not know it without a professional review. AT4TP assesses your actual device against every IRS and FTC WISP requirement, delivers a written findings report, and hands you a fully completed custom WISP that reflects your real machine.
Outdated antivirus. No encryption on the drive. Old unpatched software. Browser-saved passwords. Client tax files stored in personal folders with no access controls. These are not hypothetical risks — they are the exact vulnerabilities that lead to EFIN theft and client data breaches. Our assessment finds them before attackers do.
Preparer_01
Your Laptop or PC Is the Front Line — Most Are Not Compliance-Ready
When the IRS or FTC examines your WISP after a breach, they do not just read your document — they look at the actual security state of the devices that held client data. Here is what is typically found on tax office machines that have never been professionally assessed.
🔓
A laptop without BitLocker or FileVault enabled means every client’s Social Security number, tax return, and bank account detail is readable by anyone who boots the machine — no password needed. This directly violates FTC encryption requirements and the IRS Publication 4557 safeguard for data at rest.
🎣
Most preparers save their TaxSlayer, Drake, or other tax software login in the browser. One malware infection harvests every saved credential instantly — handing attackers direct access to your EFIN, your clients’ returns, and bank product accounts. No MFA required once the credential is stolen.
📁
Client tax files saved in Downloads, Desktop, or personal Documents folders have no access controls, no audit trail, and no encryption. The FTC Safeguards Rule requires documented access controls for every location where client data is stored — and a personal folder does not qualify.
🕳️
Old versions of Windows, Adobe, browsers, and installed software contain known security vulnerabilities that attackers exploit. Many tax offices run on outdated software well into filing season — creating open doors that patching would have closed months earlier.
🚫
The FTC Safeguards Rule mandates multi-factor authentication for any system storing client financial information. Most solo preparers have never enabled it on their tax software, email, or cloud storage — leaving a single stolen password as the only barrier between an attacker and your entire client base.
✅
AT4TP reviews every one of these risk areas on your actual laptop or PC, documents exactly what is found, provides remediation guidance, and writes your WISP to accurately reflect your real security posture — not a hypothetical one. You get the truth about your machine, and the document that proves you addressed it.
Every WISP Control Checked on Your Actual Device
Our assessment reviews your laptop or PC against every technical control in IRS Publication 4557 and the FTC Safeguards Rule. Nothing generic — everything measured against your specific machine.
From Booking to WISP — How the Assessment Works
A simple, professional process. No tech jargon. No disruption to your practice. Just a thorough review and a completed WISP in your hands.
Two Documents That Protect Your Practice
Every assessment — single device or bundle — delivers the same two core documents. These are the only two documents you need to demonstrate full WISP compliance for your actual computing environment.
- Executive summary of overall compliance posture
- Pass / Fail / Warning status for every control checked
- Specific findings for each failed or at-risk item
- Remediation recommendations in plain language
- Device details and assessment date for your records
- Suitable for WISP audits, FTC reviews, and insurance documentation
- Delivered as a professional PDF within 48 hours of assessment
- Designated Qualified Individual named and documented
- Risk assessment written from your actual device findings
- Technical safeguards documented as found on your machine
- Physical safeguards and access control policies
- Employee training requirements section
- Vendor oversight with your specific software providers
- Incident response plan with IRS 24-hour reporting contacts
- Available in English or Spanish • Annual review schedule included
One Price. No Surprises. Your WISP Included.
Choose the plan that covers your devices. Both include the full assessment, written report, and completed custom WISP document — everything you need for PTIN renewal compliance.
Laptop or PC Assessment
$599
Laptop & PC Bundle
$899
- Full WISP compliance assessment on one device (laptop OR desktop PC — your choice)
- 12+ IRS Pub 4557 and FTC Safeguards Rule controls checked
- Written assessment report — pass/fail status, findings, remediation guidance
- Fully completed custom WISP document based on your actual machine
- Incident response plan included in your WISP
- Delivered within 48 hours of assessment
- Available in English or Spanish
- Secure remote session — encrypted connection, no travel required
- Secure email · Secure cloud drive · Password manager
- Full WISP compliance assessment on both your laptop AND desktop PC
- Combined assessment report covering both devices with unified findings
- Single WISP document covering your complete device environment — both machines
- Cross-device risk analysis — identifies when one device creates risk for the other
- Incident response plan covering both devices
- Delivered within 48–72 hours of assessment
- Available in English or Spanish
- Secure remote session — encrypted connection · Priority scheduling
One Price. No Surprises. Your WISP Included.
Choose the plan that covers your devices. Both include the full assessment, written report, and completed custom WISP document — everything you need for PTIN renewal compliance.
Laptop or PC Assessment
$599
- Full WISP compliance assessment on one device (laptop OR desktop PC — your choice)
- 12+ IRS Pub 4557 and FTC Safeguards Rule controls checked
- Written assessment report — pass/fail status, findings, remediation guidance
- Fully completed custom WISP document based on your actual machine
- Incident response plan included in your WISP
- Delivered within 48 hours of assessment
- Available in English or Spanish
- Secure remote session — encrypted connection, no travel required
- Secure email · Secure cloud drive · Password manager
Laptop & PC Bundle
$999
- Full WISP compliance assessment on both your laptop AND desktop PC
- Combined assessment report covering both devices with unified findings
- Single WISP document covering your complete device environment — both machines
- Cross-device risk analysis — identifies when one device creates risk for the other
- Incident response plan covering both devices
- Delivered within 48–72 hours of assessment
- Available in English or Spanish
- Secure remote session — encrypted connection · Priority scheduling
🔗 Why Assessment + WISP Together Is the Only Way to Do It Right
A WISP written without a device assessment is a guess. It documents what you think your security looks like — not what it actually is. And if the IRS or FTC ever reviews your WISP following a breach, the mismatch between your documented controls and your actual device state will be immediately apparent.
AT4TP’s IT Assessment solves this by building your WISP from the ground up using real findings from your real machine. Every section of your WISP reflects what we actually found — what is working, what was remediated, and what safeguards are actively in place. That is the difference between a WISP that passes a review and one that creates additional liability.
Your assessment and WISP are both delivered together — one engagement, two documents, complete compliance.
- The IRS expects your WISP to reflect your actual security practices — not theoretical ones
- The FTC Safeguards Rule requires documented risk assessments based on your real environment
- A WISP claiming BitLocker is enabled when it is not constitutes a false certification
- An assessment provides the documented evidence that your controls were evaluated in good faith
- Insurers reviewing claims after a breach check whether your WISP matched your actual security posture
- An assessment gives you accurate remediation steps — not guesses — so you can actually fix what is wrong
- Your WISP annual review is simpler when you know what your baseline actually was
🌐 Evaluation available in English and Spanish
AT4TP conducts assessments and delivers reports in English and Spanish. Contact us at info@at4tp.com.
🇺🇸 🤝 🇲🇽
IT Assessment FAQs
Everything tax professionals ask before booking their device assessment.
Know Exactly What's on Your Machine.
Have the WISP to Prove It.
One professional assessment. A written report on your actual device. A completed custom WISP ready for PTIN renewal. Starting at $599 for a single laptop or PC — or $999 for the Laptop & PC Bundle.