IRS and FTC Compliance cybersecurity solution
Safeguard taxpayer data and protect your tax practice with our cybersecurity solutions to fit your tax practice
Everything you need to comply with the FTC Safeguard Rule
Managed detection & response
Managed Detection and Response (MDR) is a fully managed service delivered by experts who detect and respond to cyberattacks targeting your computers, servers, networks, cloud workloads, email accounts, backups, and more. Our highly skilled security analysts stop advanced human-led attacks and take immediate action to neutralize threats before they can disrupt your business operations or compromise your sensitive data.
incident planning
A cybersecurity incident response plan (CSIRP) is a set of procedures and guidelines that help organizations prepare for, detect, and respond to cybersecurity incidents. A cybersecurity incident response plan defines the roles and responsibilities of personnel, communication channels, and mitigation steps in the event of a cyber attack.
Written Information security plan (WISP)
The development and implementation of a comprehensive Written Information Security Plan (WISP), is to create effective administrative, technical, and physical safeguards for the protection of the Personally Identifiable Information (PII) of tax
backup Solutions
Backup & Disaster Recovery provides real-time automated disk backup, disk imaging, and file-level backup/restore for Apple computers and Windows servers and workstations. Backup & Disaster Recovery enables:
- Fully automated real-time backup
- Fully automated off-site replication
- Fast and easy recoveries
Multi-factor authentication
A security mechanism that requires users to provide two or more verification methods to gain access to a system, application, or account. This approach enhances security by adding multiple layers of protection, making it significantly harder for unauthorized individuals to access sensitive information.
Drive encryption
Drive encryption is a security process that converts all data on your storage device into unreadable code. Only authorized users with the correct password or key can unlock and access the information.
firewall
A company firewall is a digital security barrier that monitors and controls internet traffic to and from your business network, blocking suspicious activity while allowing legitimate communications to pass through.
cyber-security training
Cybersecurity training teaches employees how to recognize and prevent digital threats like scams and hacking attempts, creating a human shield that protects company information from attackers who target careless behavior.
Need help managing data security?
Eliminate the stress of worrying about compliance.
6-Point IRS Security Checklist for Tax Professionals
- Deploy the “Security Six” – Implement essential protections including anti-virus, firewall, two-factor authentication, backup services, drive encryption, and
secure VPNs to establish your foundation of security. - Create a Required Data Security Plan – Federal law mandates all professional tax preparers maintain an information security plan that fits practices of any size and addresses employee training, information systems, and system failure management.
- Stay Alert to Cyber Threats – Educate yourself on evolving phishing scams, especially targeted spear phishing emails and ransomware attacks that specifically target tax professionals.
- Recognize Data Theft Warning Signs – Monitor for suspicious client IRS letters, unexpected tax transcripts, or more returns filed with your EFIN than you submitted.
- Establish a Data Theft Recovery Plan – Be prepared with steps to immediately contact IRS liaisons, assist in protecting clients, and engage cybersecurity experts to stop ongoing breaches.
- Choose a Comprehensive Solution – Our all-in-one solution helps satisfy IRS and FTC compliance requirements when you don’t have dedicated IT staff or security expertise.
We provide service for all levels
Essentials
Get up and running quickly!
- Dark Web Scan
- Managed Detection and Response (MDR)
- Email Protection
- Encryption
- Security Training
- WISP plan
$45 per endpoint per month
Plus
Growing business, growing needs.
- Dark Web Scan
- Managed Detection and Response (MDR)
- Email Protection
- Encryption
- MDR w/ Network Detection and Response
- Cloud Security
- Endpoint and Extended Protection (EDR/XDR)
- Security Training
- WISP plan
- Incident Response *
- Professional Services* *Inquire about pricing
$65 per endpoint per month
Elite
Need more? Don’t worry, we’re here.
- Dark Web Scan
- Managed Detection and Response (MDR)
- Email Protection
- Encryption
- MDR w/ Network Detection and Response
- Cloud Security
- Endpoint and Extended Protection (EDR/XDR)
- Security Training
- WISP Plan
- Incident Response
- Zero Trust Network Access
- Incident Response *
- Professional Services* *Inquire about pricing
$85 per endpoint per month
Questions you may have
I’m a sole proprietor. Do the cybersecurity laws apply to me?
Yes. The FTC and IRS cybersecurity regulations apply to all tax professionals regardless of office size. As a financial institution under FTC rules, even solo practitioners must comply with all safeguarding requirements to protect customer information.
What are the consequences for failing to create a WISP?
Failing to create and maintain a WISP puts clients at risk for identity theft and fraud. You may face discipline under Circular 230, FTC civil penalties up to $50,120 per violation, and violation of the Safeguards Rule.
Do I need a WISP to renew my PTIN?Yes. A Written Information Security Plan (WISP) is required to renew your Preparer Tax Identification Number (PTIN).
What is included with a subscription?
We offer multiple protection plans from Essentials to Elite levels. All plans include Dark Web Scan, Managed Detection and Response, Email protection, and Encryption. Higher tiers add Network Detection, Cloud Security, Extended Protection, and Zero Trust Network Access.
Do you offer monthly or annual subscription services?
We offer both monthly and annual subscription services. Annual subscriptions are recommended to ensure continuous protection of your customers’ data throughout the year.
How do I move forward?
You can use the “connect with us” link on our website to schedule a meeting to discuss which protection plan best fits your needs and how to implement your Written Information Security Plan.
