A written security plan, built with you
We meet, go through how your practice actually handles client data, and I write the plan from that conversation. You get a plan that names your devices, software, people and vendors, and that you can explain if anyone asks.
Solo preparers and small firms that need a written plan before PTIN renewal.
What you get
- A finished plan built on the IRS Publication 5708 outline
- A one-page summary
- A staff sign-off sheet
- A breach response card
- Email security setup for your domain (SPF, DKIM and DMARC), so mail faked in your firm's name is easier to block
How it works
- Book a planning call. We meet by video for about 45 minutes and go through your devices, software, staff access and vendors.
- I write your plan from what we covered and send follow-up questions if anything is unclear.
- You get the plan, a one-page summary, a staff sign-off sheet and a breach response card within 2 days of our call. We go over it together so you know what is in it.
What's in your plan
- Objective
- Purpose
- Scope
- Responsible officials
- Risk assessment
- Inside-the-firm safeguards
- Outside-the-firm safeguards (network, access, encryption, Wi-Fi, remote access, devices, training, vendors)
- Implementation and review log
Attachments A–F:
- A. Retention and disposal
- B. Rules of behavior
- C. Breach procedures
- D. Staff acknowledgement
- E. Hardware inventory
- F. Authorized people
Price
$495. Yearly review and update: $295.
One flat price for a small firm. It does not go up with the number of users.
Guarantees
- Delivered within 2 days of our planning call, or you pay nothing.
- Full refund within 30 days for any reason, and you keep the plan.
I prepare a security document for your practice. I do not provide legal advice or certify compliance.