Cybersecurity for tax preparers and accounting firms
The IRS and the FTC both expect you to protect your clients’ tax and financial data, and to have a written plan that proves it. I set up the protection with you, write the plan, train your staff, and serve as your Security Officer, so you can focus on the season.
The rules you face
FTC Safeguards Rule: tax preparers of any size need a written information security plan (WISP), a named person in charge of it, a risk assessment, and staff training.
Your PTIN renewal: the IRS asks you to confirm that you have a data security plan in place.
Your EFIN and e-Services: as an Authorized e-file Provider, you’re expected to safeguard taxpayer data and report data theft to the IRS.
IRS Publication 4557: the IRS’s own checklist for safeguarding taxpayer data.
Learn more: IRS Publication 4557 · FTC Safeguards Rule (GLBA)
What you get
A WISP written for your office: built from your inventory and the IRS Pub 4557 and FTC Safeguards requirements, ready for your PTIN renewal and an IRS or FTC review.
A named Security Officer: I take that role by contract, track what's due, and keep the paperwork current. You keep every decision.
Monitored protection: 24/7 protection on your devices and email, set up with you.
Staff training: everyone who touches client data completes it, with records kept.
An incident response plan: who to call, how to report to the IRS, and how to notify clients if something happens.
A yearly review: we update your plan, devices, vendors and access together.
Want to see the full process? See How It Works.
What clients say
-
“Todd is an exceptional cybersecurity professional with a clear passion for protecting small businesses from digital threats. His ability to break down complex tech concepts into understandable, actionable steps makes him a true asset for any business owner. What stands out most is his genuine commitment to educating and empowering others—not just selling a service. If you’re looking for someone trustworthy, knowledgeable, and dedicated to your business’s digital safety, I highly recommend connecting with Todd.”
Dorothea Martin, CPA, BDEM Services LLC
-
“I highly recommend Todd when it comes to cyber security. He is so easy to talk to and he is very knowledgeable. He truly cares about people and small businesses. He is always eager to help and solve your security issues. If you are looking for a top notch security expert Todd is your man!”
Stephen W. Ward, CPA, Apex Advisors
Common questions
Is the IRS WISP template enough?
It's a starting point. Your plan has to match how your office actually works, and someone has to keep it current.
I'm a one-person office. Does this apply to me?
Yes. The Safeguards Rule has no size cutoff for tax preparers.
What happens if I have a data breach?
You report it to the IRS and notify affected clients under your state's law. Your Incident Response plan spells out each step.