The WISP requirement
IRS Publication 4557 and the FTC Safeguards Rule make a written security plan mandatory — not optional.

Xpert Technologies provides managed IT and cybersecurity for Michigan CPA firms, including help with the IRS-required written information security plan (WISP) and tax-season readiness.
For most CPA firms, the pressure points are the IRS-required written security plan, systems that slow down or break in the middle of tax season, and the surge of phishing emails that arrives right when staff are busiest.
IRS Publication 4557 and the FTC Safeguards Rule make a written security plan mandatory — not optional.
A slow server or failed tax software update in March can cost you clients for life.
Criminals impersonate the IRS and clients exactly when your staff is busiest.
We write your WISP, put it in place and keep it current. Before tax season, we check that your systems and software can handle the load, set up secure file sharing with clients, and give you priority support when deadlines are closest.
March
is the wrong month to find out your IT can't keep up
Book a free tax-season readiness call. We'll review your WISP status and systems, and give you a punch list before the rush hits.
Frequently asked questions
Short, direct answers to the 5 questions buyers ask us most.
Every price is custom, because it depends on your network, your cybersecurity needs and the level of support your team expects. Most firms pay a predictable monthly fee instead of surprise hourly bills. Answer a few questions on our pricing page and you'll see your estimated range right away.
Yes. The IRS requires tax preparers to have a written information security plan. We help you create one and put the protections it describes in place.
Yes. We review and update your systems well before the busy season, so slow computers and software problems don't cost you billable hours in March and April.
Yes. We support the tax, accounting and document software your firm uses and handle updates and vendor calls for you.
We use layered security: device monitoring, multi-factor sign-in, email filtering, staff training and tested backups. Each layer makes it harder for an attacker to reach client data.
Questions about IT for CPA Firms? Contact Xpert Technologies about IT for CPA Firms.