Tax professionals are federally obligated to prepare a Written Information Security Plan (WISP) for their business, the IRS said in a July 29 statement.
The WISP document details an organization’s security controls and is aimed at ensuring that clients’ personally identifiable information is protected from unauthorized access. It lays out actions that must be taken in case of a security incident such as a data breach.