0
/ 100
Not attestation-ready
Not attestation-ready. 9 of 9 required elements have gaps.
FTC civil penalties reach $53,088 per violation, and you attest to having a WISP each time you renew your PTIN.
The 9 required elements
Qualified individual0%
Risk assessment0%
Safeguards0%
Monitoring and testing0%
Staff training0%
Vendor oversight0%
Keeping it current0%
Incident response0%
Annual report0%
Fix these first
- Is one named person in charge of your security program. Name a qualified individual in writing and give them authority over the program.
- Do you have a written risk assessment from the last 12 months. Write a risk assessment covering where client data lives, the threats to it, and how each is controlled.
- Is multi-factor login on for email, tax software and remote access. Turn on multi-factor login for every system that touches client data, starting with email.
- Is client data encrypted on laptops and phones and when it's sent. Encrypt every device that holds client data and stop emailing returns as plain attachments.
Close all 12 gaps this week
Your answers carry straight into PrepShield. In your first week:
- Name a qualified individual in writing and give them authority over the program
- Write a risk assessment covering where client data lives, the threats to it, and how each is controlled
- Turn on multi-factor login for every system that touches client data, starting with email
- Get a WISP written for your firm, with no placeholders
- Get your breach plan with the 30-day FTC notice
Solo1 preparer
$199/moMost firms pick thisTeam2–10 people
$299/moFirm11–25 people
$399/mo$0 today. 7-day free trial, cancel in two clicks. No calls.3 of your gaps need an IT providerMulti-factor login setup, Device and email encryption, Penetration test and vulnerability scans. Get quotes from vetted providers who work with tax firms. It's free.
Get free IT quotesQuestions follow 16 CFR 314.4 and IRS Publication 5708. This score is a self-check, not legal advice or a certification.