Written Information Security Plan (WISP)

Definition

A documented security plan required by the IRS under Publication 4557 that outlines how a tax professional or accounting firm safeguards sensitive client data. The WISP must describe the firm's policies, procedures, and technical controls for protecting taxpayer information from unauthorized access or disclosure. All tax preparers who handle federal tax returns are required to maintain and follow a WISP.