For CPA, EA, tax and bookkeeping firms
We build, run and prove your WISP.
Cybersecurity and compliance for tax and accounting practices across Washington, Idaho, Montana and Oregon. Ready for an examiner, ready for your insurer, and built to work with the IT you already have.
The obligation
You checked Line 11. Could you show the plan?
Every PTIN renewal now asks you to confirm you are aware that paid preparers are required by law to create and maintain a written information security plan. Under the FTC Safeguards Rule, tax and accounting firms of every size count as financial institutions.
The rule expects more than a document in a drawer: a named Qualified Individual, a written risk assessment, MFA, encryption, monitoring, staff training, vendor oversight and an incident response plan, reviewed every year.
tax firms hit by data breaches in 2026, up from 277 in 2025, according to IRS data reported by CPA Practice Advisor.
How we help
Three ways to work with us
WISP and Security Six Diagnostic
A fixed-price review of where your firm stands, with a written gap report and a prioritized fix list.
See the diagnosticManaged Compliance Security
We run the security tools, keep your WISP current, serve as your Qualified Individual and hand you a yearly evidence pack. It works alongside your current IT person or provider.
Talk with usFractional CIO
Technology strategy, budgets and vendor decisions from a leader with a finance background, for firms that have outgrown ad hoc IT.
About BryanThe Sunesis method
Assess, build, run, prove
Measure your firm against the FTC Safeguards Rule and the IRS Security Six.
Write or repair your WISP so it describes how your firm actually works.
Put the controls in place and keep them running: MFA, backups, monitoring, training.
Keep the evidence an examiner, client or insurer will ask to see.
Why Sunesis
An advisor who speaks accounting
Finance and IT in one person
Bryan D. Wall brings a strategic finance background to security work, so the conversation starts with your practice, not with gadgets.
Local to the Inland Northwest
Based in the Coeur d'Alene area and working with firms across Washington, Idaho, Montana and Oregon.
Works with your current IT
No rip and replace. We add the security and compliance layer your IT person or provider was never asked to own.
Who we serve
Firms that hold taxpayer and financial data
CPA firms
Tax, audit and advisory practices of 2 to 25 people.
Enrolled agents and tax preparers
Every PTIN holder carries the same WISP duty.
Bookkeeping firms
Client books, bank feeds and payroll data need the same care.
Other financial firms
Advisors, mortgage, title and insurance firms under the Safeguards Rule or SEC Regulation S-P.
Next step
Start with a fixed-price diagnostic.
A written gap assessment against the FTC Safeguards Rule and the IRS Security Six, with a prioritized plan to close each gap. $1,200 to $3,500, quoted before we start.