Does Your Firm Actually Have the Security Plan the IRS Requires You to Have?
Since 2023, every paid tax preparer — solo practitioner or fifty-person firm, regardless of who handles your IT — is required to maintain a written information security plan. Most firms don't have one, or haven't looked at theirs since it was written. In a free 25-minute call, Graham checks yours against what's actually required and tells you exactly what's missing — in plain English, yours to keep either way.
"Graham set us up before tax season and we haven't had a single system issue during filing crunch in two years. That alone paid for itself."
— Paul, Accounting Firm Owner, Goshen IN
Graham Pearson, MBA
Owner & Technology Advisor
Serving Accounting Firms Across Michiana
Three Questions Most Firm Owners Can't Actually Answer
You don't need to be an IT person to know the answer. You just need to know if there is one.
If someone asked to see your firm's written information security plan today, could you actually produce one?
If you have one, has anything about your systems, software, or staff changed since it was written?
If your firm had a breach next month, would your cyber insurance actually pay the claim — or would the fine print get you denied?
Most firm owners can't answer all three with certainty. That's not unusual — it's the norm.
A Real Answer. Not a Vague Score.
This isn't an audit of your IT provider. It's a check of one specific, required document — and whether it would actually hold up.
A plain-English review of your current plan — or a straight answer that you don't have one yet. Most firms don't.
A specific list of what's missing, ranked by what actually matters most — not a generic checklist dump.
A read on whether your plan holds up against what your cyber insurance policy assumes you already have in place.
Something you can hand to your current IT provider, or to us. Your call, no pressure either way.
Nothing to sign, nothing to buy. The write-up is yours regardless of what you decide next.
One person handles it, start to finish — Graham, not a ticket queue or a rotating technician.
Three Steps. No Pressure. No Forms to Chase.
- 1
Book the free call. Bring whatever security plan you have — even if it's nothing. Most firms bring nothing.
- 2
Graham checks it against what the FTC Safeguards Rule and IRS Publication 4557 actually require — live on the call, or within 24 hours if you need to track something down.
- 3
You walk away with a specific list of what's missing and why it matters — yours to use with your current IT provider, or with us. No pressure either way.
Want to look before you call? Download the free FTC Safeguards Rule Checklist — the same one Graham uses on the call.
Here's What Clients Just Like You Have Said
"Graham set us up before tax season and we haven't had a single system issue during filing crunch in two years. That alone paid for itself."
"I never have to think about IT anymore. When something does come up, Graham answers and it's handled in minutes — not days."
"Flat rate, no surprises, and someone who actually explains what's going on instead of talking over my head. Exactly what we needed."
Questions Accounting Firm Owners Ask Before Booking
A written information security plan, sometimes called a WISP. Since 2023, the FTC Safeguards Rule requires every paid tax preparer to have one — the same framework IRS Publication 4557 points preparers toward. It's a real, written document, not a general best-practice suggestion, and almost no small firm has an accurate one.
This isn't a check of your IT setup or your provider's work. A written security plan is a compliance and documentation responsibility that sits with the firm owner, not something most MSPs manage by default unless you specifically ask them to. This check doesn't touch your existing IT relationship at all — it just tells you if the required paperwork exists and is accurate.
That's the most common answer, not an unusual one. Most firms we talk to don't have one. We'll walk you through exactly what one needs to include and what it would take to put one in place.
It's 25 minutes, one on one with Graham. Bring whatever plan you have — or nothing. He checks it against what the FTC Safeguards Rule actually requires and tells you, in plain English, what's missing and why it matters. No slideshow, no sales pitch.
The call and the write-up are free, with no obligation. If it turns out Tech Shield™ is a fit for closing the gaps, pricing is flat-rate and there's no long-term contract — cancel anytime. If it's not a fit, you keep the report either way.
Yes — the free FTC Safeguards Rule Checklist covers the same requirements in plain English. It's the same list Graham uses on the call, so you can see roughly where you stand before you ever pick up the phone.
Ready to Find Out What Your Security Plan Actually Says?
Book a free 25-minute Security Plan Check with Graham. Bring what you have — or nothing at all. No pitch, no obligation.
Mon–Fri 8AM–6PM | Sat 8AM–2PM | info@ma3sp.com