Written Information Security Plan (WISP) Services
Federal law requires all professional tax preparers to create and implement a data security plan. The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to protect customer data. Under this law, tax and accounting professionals are considered financial institutions, regardless of size. In its implementation of this law, the FTC issued measures required to keep customer data safe.
Equa provides the services you need to comply with IRS Publications 4557, 5293, 5708 and 5709 to help make life easier. We use all the IRS guidelines in conjunction with NIST SP 800-53 and when applicable NIST SP 800-18.
What needs to happen at a high-level:
- An audit of all your systems that have data
- An interview of how you currently manage data
- An evaluation of what is currently happening versus what should be happening
- A plan to fill any gaps
- A written plan of how you manage data (WISP)
- A training plan so everyone knows the plan
- A continual review of your environment to ensure compliance and update the WISP
