WISP Done-With-You
$595 one-time
The working session, your customized bilingual plan, and the staff kit — done in 7 days.
- 90-min session (EN or ES)
- Customized WISP
- Qualified Individual memo
- Bilingual staff one-pager
- Incident quick-reference
For tax & bookkeeping firms
Your WISP — done with you, in your language
If you prepare taxes or keep books for clients, federal law already requires your firm to have a written information security plan (a WISP). We build yours with you in one 90-minute working session — in English or Spanish — for a flat $595, delivered within 7 days.
Grow
Walk into tax season with the box checked and the plan real. Clients and partners increasingly ask how you protect their data — a finished WISP is a trust asset, not just paperwork.
Protect
One lost laptop or phished inbox becomes a very expensive week without a plan. Your WISP names who does what, and your staff one-pager keeps everyone out of the common traps.
The rules, in plain terms
The FTC Safeguards Rule (GLBA) treats tax preparation and bookkeeping firms as "financial institutions" — regardless of size. It requires a written information security plan, a designated person responsible for it, and safeguards like access controls, MFA, and vendor oversight. This applies today.
Every year at PTIN renewal, the IRS puts it in front of you: Form W-12, Line 11 requires every paid preparer to confirm awareness of the legal duty to create and maintain a WISP. And this summer, the IRS Security Summit is running a five-week national campaign urging preparers to get their plan in place.
The honest part
The IRS publishes a free WISP template (Publication 5708) — you can absolutely do this yourself. What you pay us for: we customize it to how your practice actually runs, in one working session instead of a lost weekend, we deliver the staff materials in English AND Spanish, and we keep it current every year. Same price range as the national done-for-you services — but local, bilingual, and built with you, not mailed to you.
What is included
- A 90-minute working session — English or Spanish, evenings welcome
- Your customized WISP, aligned with IRS Publication 5708 and the FTC Safeguards Rule
- A "Qualified Individual" designation memo (the responsible person the Rule requires)
- A bilingual staff one-pager + acknowledgment sheet your team will actually read
- An incident quick-reference: the FTC 30-day breach-notification rule and Colorado's own 30-day notice law
- Delivered within 7 business days
Simple, flat pricing
Start with the plan. Keep it current for less than the cost of a tank of gas a month. Go deeper when you are ready.
Safeguards Care
$39 /mo
Your annual WISP review and re-issue, a yearly bilingual staff refresher, and alerts when the rules change. Or $399/yr prepaid.
- Annual review & re-issue
- Yearly staff refresher (EN/ES)
- MFA / backup checklist walkthrough
- Rule-change alerts
Readiness Assessment
$1,500 assessment
The full picture — a scored, plain-language review of how your firm uses AI and handles data, with a prioritized roadmap.
- Bilingual assessment
- Maturity score + heatmap
- AI & data-handling review
- Prioritized fix-it roadmap
Why now
Line 11 of Form W-12: every preparer confirms at PTIN renewal that they know the duty to maintain a WISP. IRS Form W-12 (Rev. 10-2025)
30 days the FTC breach-notification window for incidents affecting 500 or more consumers. FTC Safeguards Rule, effective May 2024
5 weeks of the IRS Security Summit's summer campaign on exactly this topic — running right now. IRS IR-2026-81, July 2026
ClunasCo provides compliance enablement, not legal advice, and is not affiliated with or endorsed by the IRS. For legal questions about your specific situation, consult a Colorado-licensed attorney.
Ready to put AI to work?
Book a free 30-minute discovery call. Plain language, in your language, no obligation.