Your WISP, written and ready.

WISP & Safeguards Pack

A complete written information security program tailored to your firm, not a fill-in template. We review how you collect, store, and share client data, then document the safeguards you have and the ones you need.

Fixed fee: $2,500 for firms up to 25 staff. Typically 2 to 3 weeks from kickoff.

What you receive

• Written Information Security Program (WISP)
• Documented risk assessment
• Qualified Individual designation and responsibilities
• Core policies: access, MFA, encryption, vendors, retention
• Incident response plan and breach-notification steps
• Annual owner report template

Why it matters now

Tax preparers are covered by the FTC Safeguards Rule. The rule calls for a written program, a named Qualified Individual, a risk assessment, MFA, encryption, an incident response plan, and an annual report to the firm owner. Breaches involving 500 or more people must be reported to the FTC.

The IRS points tax professionals to these same requirements in Publication 4557 and its WISP guidance (Publication 5708).

Who it is for

• CPA, tax preparation, and bookkeeping firms
• Firms with no in-house IT security staff
• Firms renewing cyber insurance or answering client security questions

How it works

A short intake call, a review of your current tools and practices, two working sessions with the owner or office manager, and a final walkthrough of your finished program.

Veymont is advisory only. We document and advise; your IT provider makes technical changes. This is not legal advice.

Add-ons

• Annual WISP review and update
• Staff security-awareness briefing
• Combine with a full Security Review