
The 2026 WISP Playbook for Tax Pros and Bookkeepers: Building an FTC Safeguards Rule-Compliant Data Security Program Without a CISO
A 2026 guide for solo tax preparers and small bookkeeping firms to build a Written Information Security Plan that satisfies the FTC Safeguards Rule's nine elements, the IRS PTIN attestation, and the 30-day breach notification requirement — using IRS Publication 5708 as the scaffold and a 90-day rollout.










