The cyber risk checklist for CPAs:WISP & FTC Safeguards

Twelve controls in plain English, written for accounting practices that hold client SSNs, EINs and prior-year returns. Use it to self-assess before the IRS, your carrier or an attacker does it for you.

What's inside

• The 12 controls IRS Pub 4557 and Pub 5708 expect in your WISP
• What the FTC Safeguards Rule requires of tax preparers
• The Security Six, explained without jargon
• MFA, backup and vendor-oversight checkpoints insurers verify
• The documentation an IRS Stakeholder Liaison will ask to see
• A prioritized 90-day remediation order for small firms