Accounting & Tax CyberSecure
Starter Kit$149
Professional$249
Accounting and tax firm cybersecurity
WISP and cybersecurity policies for CPA and tax firms
A Written Information Security Plan built on the IRS Publication 5708 outline, with the policies, forms and evidence workbook a tax practice needs to meet the FTC Safeguards Rule.
- Editable Word & Excel
- Instant download
- One-time purchase
Why it matters
What the IRS and FTC expect
Tax and accounting professionals are treated as financial institutions under the FTC Safeguards Rule, which requires a written information security program, a designated Qualified Individual, a written risk assessment, multi-factor authentication and encryption of customer information.
The IRS expects every paid preparer to have a written data security plan and points firms to Publication 4557 and the Publication 5708 WISP template. Since 2024, the Safeguards Rule also requires notifying the FTC within 30 days of discovering a breach involving 500 or more customers.
This kit gives you a WISP in the IRS outline, the supporting policies and the evidence to show you have put them in place.
What's inside
Every file in each edition
Policy numbers carry over from the Starter Kit to the Professional Edition, so you can start small and upgrade without renumbering.
Starter Kit
$14924 editable files
Policies 15
- ACT-CYB-001Information Security Program & Qualified Individual Policy
- ACT-CYB-002Risk Assessment & Data Inventory Policy
- ACT-CYB-003Access Control & Least Privilege Policy
- ACT-CYB-004Multi-Factor Authentication Password Policy
- ACT-CYB-005Encryption & Secure Client File Exchange Policy
- ACT-CYB-006Acceptable Use & Workstation Security Policy
- ACT-CYB-007Email Security, Phishing & Impersonation Policy
- ACT-CYB-008Personnel Security & Confidentiality Policy
- ACT-CYB-009Security Awareness & Training Policy
- ACT-CYB-010Physical Security & Clean Desk Policy
- ACT-CYB-011Backup & Recovery Policy
- ACT-CYB-012Records Retention & Secure Disposal Policy
- ACT-CYB-013Service Provider & Tax Software Oversight Policy
- ACT-CYB-014Incident Response, IRS & State Reporting Policy
- ACT-CYB-015Remote Work, Mobile & Seasonal Staff Policy
Plans, guides & assessments 8
- WordImplementation Guide
- WordStaff Cybersecurity Quick Guide
- WordIncident Response Plan
- WordWritten Information Security Plan (WISP)
- WordClient Data Security Notice
- Word30-60-90 Day Action Plan
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
Workbook 1
- ExcelAccounting & Tax CyberSecure Toolkit
Professional Edition
$24942 editable files
Policies 21
- ACT-CYB-001Information Security Program & Qualified Individual Policy
- ACT-CYB-002Risk Assessment & Data Inventory Policy
- ACT-CYB-003Access Control & Least Privilege Policy
- ACT-CYB-004Multi-Factor Authentication Password Policy
- ACT-CYB-005Encryption & Secure Client File Exchange Policy
- ACT-CYB-006Acceptable Use & Workstation Security Policy
- ACT-CYB-007Email Security, Phishing & Impersonation Policy
- ACT-CYB-008Personnel Security & Confidentiality Policy
- ACT-CYB-009Security Awareness & Training Policy
- ACT-CYB-010Physical Security & Clean Desk Policy
- ACT-CYB-011Backup & Recovery Policy
- ACT-CYB-012Records Retention & Secure Disposal Policy
- ACT-CYB-013Service Provider & Tax Software Oversight Policy
- ACT-CYB-014Incident Response, IRS & State Reporting Policy
- ACT-CYB-015Remote Work, Mobile & Seasonal Staff Policy
- ACT-CYB-016Taxpayer Information Use & Disclosure (§7216) Policy
- ACT-CYB-017E-File, EFIN & IRS e-Services Security Policy
- ACT-CYB-018Vulnerability, Patch & Security Testing Policy
- ACT-CYB-019Generative AI & Cloud Application Use Policy
- ACT-CYB-020Payment, Payroll & Refund Change Verification Policy
- ACT-CYB-021AI Governance Policy
Plans, guides & assessments 10
- WordProfessional Edition Implementation Guide
- WordIncident Response Plan & Playbooks
- WordTabletop Exercise Kit
- Word30-60-90 Day Action Plan
- WordStaff Cybersecurity Quick Guide
- WordWritten Information Security Plan (WISP)
- WordClient Data Security Notice
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
- Word50-Question Accounting & Tax Cybersecurity Self-Assessment
Forms & templates 10
- FORM-01Bank Account, Refund & Payment Change Verification Form
- FORM-02Access Request Form
- FORM-03Staff & Seasonal Offboarding Checklist
- FORM-04Software & SaaS Request Form
- FORM-05Security Exception Request
- FORM-06Incident Intake Form
- FORM-07Vendor Security Questionnaire
- FORM-08Confidentiality Policy Acknowledgment Form
- FORM-09Data Theft & Breach Notification Worksheet
- FORM-10Qualified Individual Annual Report & Management Review
Workbook 1
- ExcelAccounting & Tax CyberSecure Professional Toolkit
Free download
Free Accounting & Tax cybersecurity self-assessment
Answer 50 yes / no / not sure questions across 10 areas. Score your results and get clear next steps for your industry.
- Small Business, Law Office, Real Estate, Healthcare, Accounting & Tax, Insurance Agency, Financial Advisor, Auto Dealer, Mortgage & Title, and Cyber Insurance Readiness editions
- Starred priority questions and a scoring table
- Printable PDF
Your assessment is ready
Thanks. Your download should start automatically. If it doesn't, use the button below.
Download the PDFQuestions about your results? Email info@cybriva.ai.
Questions
Accounting & Tax kit FAQ
Is the WISP based on IRS Publication 5708?
Yes. The WISP follows the outline in IRS Publication 5708 and is supported by policies mapped to the FTC Safeguards Rule.
Does it address §7216 consent?
Yes. The Professional Edition includes a Taxpayer Information Use & Disclosure (§7216) Policy. Have counsel review consent language for your practice.
What format are the files in?
Editable Microsoft Word policies, plans and forms plus an Excel workbook. You download everything right after checkout and customize it for your organization.
Can I start with the Starter Kit and upgrade later?
Yes. The Professional Edition keeps every Starter Kit policy under the same ID number, so nothing you have already customized gets renumbered.
Is this legal advice or a certification?
No. Cybriva provides templates and education. It is not legal advice, an audit, a certification or a guarantee of compliance or security. Have your attorney review documents that carry legal obligations.