The Problem
All tax preparers MUST have a Written Information Security Plan or WISP
Know your level better than hackers do
There are 4 levels of cyber maturity:
Nothing - No written plan and no security controls
Level 1 - Some security controls (anti-virus/patching) , but no written plan
Level 2 - Written plan, some security controls, but not "doing what you say you do"
Level 3 - Written plan and working toward implementing all controls in plan
Level 4 - Written plan, controls are operational and verifiable