CPA Firms
WISP readiness checklist
Use this as a planning prompt, then tailor a written information security plan to the firm.
12 minute guide · Published and last reviewed September 3, 2026 · ProTax Editorial TeamUse this step-by-step checklist
- 1
Identify covered data, systems, people, vendors, and foreseeable risks.
- 2
Document access, authentication, training, backups, incident response, and vendor oversight.
- 3
Assign an owner and schedule testing, updates, and staff acknowledgements.
- 4
Use IRS Publications 5708 and 5709 and obtain appropriate professional review.
When professional review mattersTax rules depend on facts, entity type, jurisdiction, dates, and current guidance. Use this resource to organize the conversation—not to decide a tax position by itself.