WISP Template for Small Offices and Tax Preparers

IT and security operations template. Not legal advice. Have your attorney or compliance adviser review before relying on it.

Most small offices know they should have a written information security plan. The hard part is the blank page. This template starts you with example text that describes how a small office runs its IT: who owns the plan, which devices and cloud systems hold client data, how logins, MFA, encryption and backups are set up, what happens when someone leaves, and who to call when something goes wrong. You edit it to match your office.

It is built for tax preparers, bookkeepers and small accounting and law offices with 1 to 20 people.

What you get

• The plan, editable in Word or Google Docs (.docx), plus a PDF of the finished layout. Its 13 sections cover scope and Qualified Individual, asset and data inventory, risk assessment table, access control, MFA, encryption, backups and restore tests, vendor oversight, training, incident response with a contacts table, monitoring, and an annual review log with sign-off. A staff acknowledgment form is included.
• An IT controls checklist (.xlsx) with 41 controls on one printable page. Each row points to a section of the plan and says how to check it and how often. Status has a dropdown (Done, Partial, Not yet, N/A) and a running count.
• Logs for restore tests, training, incidents and annual reviews.
• Every item you need to fill in is shaded and in [brackets]. No client names in the examples.

Where the rules come in

The template names the FTC Safeguards Rule (16 CFR Part 314) and IRS Publications 4557 and 5708 as background and links to them. The IRS publishes a free sample plan in Publication 5708, and we point you to it. What this template adds is pre-filled example controls, the checklist and the logs.

What it doesn't do

• It does not make your office compliant with any law or rule, and it doesn't tell you whether a rule applies to you. Ask your attorney.
• It is not legal advice, a security assessment, an audit or a certification.
• It includes no software, monitoring, scanning or IT support.
• The example text is a starting point. Remove anything your office doesn't actually do.

How it was made

Written with AI help (Claude) and reviewed by AmagiLabs before release. AmagiLabs sets up and supports IT for small law and tax offices.

Refunds

All sales are final. You get this digital download right away, so we don't give cash refunds. If a file won't open or the product doesn't match this page, email us within 7 days of purchase. We'll fix it or send a replacement. If we can't, you'll get store credit for the full price.

EU and UK buyers: you'd normally have 14 days to withdraw from this purchase. You lose that right once your download or access starts, because you ask for immediate access at checkout. If the product is faulty or not as described, the 7-day limit doesn't apply to you. If we can't fix it, you can choose a refund instead of store credit.

Nothing in this policy limits your rights under the law where you live. You can ask us for a written copy of this policy at any time.