Busy Season Ready Check

Thanks. Here is what your score means.

Your answers are with our security team. Below: what your band means, the gaps to close first, and how to get a second set of eyes before January.

How the score works

One point for each honest "yes, and we could show you." The score is out of 13.

11 to 13: You're in good shape.Most of the plan is in place and you could show proof. Keep it current: review the WISP every year, refresh training and signed acknowledgments, and test a restore before January.

8 to 10: A few gaps to close before January.The basics are there, but a few items would be hard to prove if a client, your cyber insurer, or the IRS asked. Most firms close these in a few weeks if they start now.

7 or less: Get the plan written and running before busy season.Several core pieces are missing or informal. Once January hits, partners and staff have no time for this. Start by mid-November and it can be done before January.

Book your review

Pick a time that works for you.

If you want it done for you

WISP Done in 30 Days, fixed fee.

Risk assessment, data and vendor inventory, a WISP tailored from IRS Pub. 5708, an incident response plan with your IRS, FTC, and insurer call tree, an AI use policy, and signed staff training across every office. Done before January.

After that

Keep It Current.

Ongoing security run on the NIST Cybersecurity Framework: yearly WISP review, training and acknowledgments, the yearly report to partners, regular vulnerability scans, and a tabletop exercise before each busy season.