WISP Diagnostic
WISP and Security Six Diagnostic
A fixed-price review that tells you where your firm stands against the FTC Safeguards Rule and the IRS Security Six, and exactly what to fix first.
What is included
- Intake questionnaire and an interview with the owner or managing partner
- Review of your current WISP, or confirmation that you need one
- Gap assessment against the nine required elements of the FTC Safeguards Rule
- IRS Security Six readiness check
- Review of MFA, email security, backups and remote access
- Review of tax software, portal and vendor access
- How your team uses AI tools with client data
What you receive
- A written gap report in plain language
- A prioritized remediation plan with cost ranges
- A list of the WISP updates your firm needs
- A readout meeting to walk through every finding
Fixed price
$1,200 to $3,500
Set by firm size and quoted before we start. No long-term contract.
Book a DiagnosticRight for you if
- You have 2 to 25 people
- Your WISP is a template, out of date, or missing
- An insurer, client or examiner has asked about your security
Not the right fit if
- You need emergency breach response today. Contact your IRS Stakeholder Liaison and your insurer first.
How it works
01 · Book
A short call to confirm fit and quote a fixed price.
02 · Intake
You complete a questionnaire and we meet with the owner.
03 · Review
We review your plan, settings and vendors with minimal disruption.
04 · Readout
You get the report and a clear plan, and decide who fixes what.
Questions
- Does a small firm really need a WISP?
- Yes. The IRS states that tax and accounting professionals are required by law to have a Written Information Security Plan, and the FTC Safeguards Rule has no exemption for small tax practices.
- Will this disrupt busy season?
- We schedule reviews outside January to April unless you ask otherwise.
- Do I have to switch IT providers?
- No. Many firms keep their current IT person or provider and use us for the security and compliance layer.
- What happens after the diagnostic?
- You can fix the gaps yourself, hand the plan to your current IT provider, or have Sunesis run it through Managed Compliance Security.
- Is this legal advice?
- No. Sunesis Services is not a law firm. We work alongside your attorney when legal questions come up.
Next step
Start with a fixed-price diagnostic.
A written gap assessment against the FTC Safeguards Rule and the IRS Security Six, with a prioritized plan to close each gap. $1,200 to $3,500, quoted before we start.