The 15-Minute Safeguards Self-Check
A free WISP checklist for tax preparers and accounting firms. How close is your firm to meeting the FTC Safeguards Rule? Answer each question for your firm today. Choose Yes only if it's true now, not planned.
Your answers stay in this browser. Nothing is sent anywhere.
Your gaps
Every No maps to a section of the Practice Safeguards WISP Kit. Answer the questions above to build your list.
No gaps yet. Questions you answer No will appear here with the rule they come from.
Smaller firms: if your firm holds information on fewer than 5,000 consumers, the rule excuses you from four written requirements: a scored written risk assessment, penetration testing and vulnerability scans, a formal written incident response plan, and an annual report to a board (16 CFR 314.6). Every question in this checklist still applies to you.
These bands are a rough guide to prioritize your work, not a legal compliance rating. A single No on a required item is still a gap. Sources: FTC Safeguards Rule, 16 CFR Part 314; IRS Publication 5708 (Rev. 8-2024).