Home > Quiz > Cybersecurity > Written Information Security Plan

Is Your Business Protected from Potential WISP Penalties?

Without a Written Information Security Plan (WISP), your firm is not compliant with the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule. If your firm is not WISP compliant, it can expose you to serious risks such as PTIN renewal issues, fines up to $100,000, and up to 5 years in prison.

Take this quick quiz to understand why a Written Information Security Plan (WISP) is essential for your business

Step-1

Step-2

Step-3

Step-4

Step-5

Step-6

Step-7

Step-8

Step-9

Step-10

Step-11

Step-12

Step-13

Step-14

Step-15

What is Your Business Type?

Select your business type to help us understand your needs and provide the right services for your industry.

Select an option that apply

Sole Practitioner

Tax & Accounting Services

Financial Advisors & Consultants

Legal Services

Insurance Agencies

Other

What is your Business Employee Strength?

Choose the number of employees working in your organization.

Select an option that apply

1-10

11-50

51-100

101-500

501+

Do you follow any industry-specific compliance regulations for data security (e.g., HIPAA, PCI-DSS, GDPR)?

Industry-specific compliance regulations set standards and guidelines to ensure data security, privacy, and regulatory adherence.

Select an option that apply

Yes

How often is your WISP plan reviewed and updated?

Review and update your IRS WISP plan at least annually, especially before the PTIN renewal deadline. However, it’s also important to update it whenever regulation changes or changes in your business operations affect data security.

Select an option that apply

Never

Only when required by law

Annually

Bi-Annually

Who is responsible for managing and responding to data security incidents in your organization?

A Data Security Coordinator manages data security practices and ensures compliance with WISP IRS requirements. Who handles this in your organization?

Select an option that apply

No one designated

IT Department

A Designated Employee/Team

Data Security Coordinator (DSC)

What types of information does your office handle that require protection under the WISP?

According to the IRS, identifying the information your practice handles is crucial in evaluating risk and preventing data theft and loss of access.

Select all that apply

Taxpayer PII

Employee Records

Private Business financial information

All of the above

How do you handle paper records containing PII when they are no longer needed?

As per WISP IRS guidelines, no paper or electronic records containing PII should be retained for more than 7 years. How does your business ensure the safety of its private information?

Select an option that apply

Discard them in the trash

Store them indefinitely

Recycle them without destroying the data

Securely shred or incinerate them

What authentication do you primarily use to access sensitive client data?

Sensitive client data includes personal, financial, or confidential information that requires protection to prevent unauthorized access, such as Social Security numbers and tax records. How do you secure them?

Select an option that apply

None

Usernames and passwords only

Biometrics

Multi-factor authentication (MFA)

How do you manage passwords for accessing client data?

Sharing passwords or allowing weak passwords increases security risks. How do you manage your client’s data to avoid risky situations?

Select an option that apply

Passwords are shared among employees

Employees create their passwords without specific guidelines

Strong passwords are required and changed periodically

Password management software is used

What measures do you have in place to ensure the physical security of your office and client data?

Physical security measures protect your office and client data from unauthorized access. These may include locks, access controls, alarm systems, and surveillance to reduce the risk of physical breaches.

Select all that apply

None

Basic locks

Restricted access and alarm system

24/7 Surveillance

How often do you conduct security awareness training for your employees?

Security awareness training helps ensure employees stay updated about current threats. Regular annual or quarterly training reduces the risk of security breaches. How often do you provide it?

Select an option that apply

Never

Only when new employees are hired

Annually

Quarterly

What screening processes do you take for employees with access to PII?

Screening employees with access to PII is vital for data protection. Background checks, reference checks, and continuous monitoring help ensure trustworthiness and reduce security risks. How do you screen employees with access to sensitive data?

Select all that apply

None

Reference Checks

Background Checks

Continuous Monitoring

What type of encryption do you use to protect client data?

Encryption is crucial for protecting sensitive data. It converts information into an unreadable format that can only be accessed with a decryption key. What type of encryption does your organization utilize?

Select an option that apply

None

Outdated encryption (e.g., DES, 3DES)

Advanced encryption (e.g., AES-256)

End-to-End encryption

How do you monitor for potential security threats?

Monitoring your systems for unusual activities can help detect and prevent security breaches before they happen. How do you monitor security threats?

Select an option that apply

No monitoring in place

Basic antivirus/firewall software

Continuous system monitoring

Third-party security firm monitoring

Do you have a Vendor Risk Management process in place?

Third-party vendors can be a potential weak link in your data security. Assessing vendor risks is vital to maintaining secure business operations.

Select an option that apply

In Progress

Yes

We require vendors to provide a security assessment report

Your quiz has been submitted successfully.

One More Step...

Thank you for completing the WISP quiz!

Please share your contact details below, and you’ll receive your WISP score on the next screen. Get personalized email recommendations in your inbox regularly to enhance your security policies.

We value your privacy and will use your information only to communicate and share relevant content, products, and services. See Privacy Policy

Hi ,

Your WISP Score: Low Awareness (0-60).

Here's what your score means and what you can do next:

Low Awareness & Implementation (0-60): It looks like there's some work to do! This means you might have minimal or no measures to protect your sensitive information. Review and implement stronger data security practices. Consult with a security expert today.
Moderate Awareness & Implementation (61-80): You're on the right track! Your data security practices are basic or partially implemented, which is a good start, but there’s still room for improvement.
High Awareness & Implementation (81-100: Nice job! You’ve got a solid, comprehensive data security plan, and your organization is taking decisive steps to protect sensitive information. Stay informed and updated to enhance your security policies.

Book a Free Consultation or chat with our security experts.

Book A Free Consultation

Get Started with Ace Cloud Hosting - Your Managed WISP Service Provider

Creating a Written Information Security Plan (WISP) that meets all compliance standards can be time-consuming and distract you from your primary focus—serving your clients and growing your business.

At Ace Cloud Hosting, we make the WISP compliance process easy and quick by offering a customized WISP tailored to your business needs, meeting IRS and FTC guidelines.

15+ Years of Experience

With over 15+ years of experience, we specialize in providing security and cloud hosting services for the accounting and tax industries.

Quick Assessment

Get a detailed assessment/gap analysis report within 48 hours, to identify any security gaps.

Competitive Pricing

No hidden fees! Our competitive pricing package starts at $699 only.

Expert Consultation

Get personalized consultation and ongoing managed support from certified security experts to ensure your WISP stays current.

*Depends on businesses and customer's requirements.

Download Your FREE WISP Template

Get a copy of free and easy-to-use WISP template and save time with a pre-structured format. Take the first step toward safeguarding sensitive client data.