Blue Heron Digital Services, LLC · IT, cloud, and security

FTC Safeguards Rule readiness check

A free readiness check for tax preparers, CPAs, auto dealers, and other covered firms. Tax professionals confirm a security plan when they renew a PTIN. This is readiness help, not legal advice, and not a guarantee.

Is a Qualified Individual named for the information security program?
Is there a written risk assessment?
Is there a written information security plan (WISP)?
Is multifactor authentication on for systems that hold customer information?
Is customer information encrypted in transit and at rest?
Do you monitor and test the safeguards?
Do staff get security training?
Do you oversee vendors that touch customer information?
Is there a written incident response plan?
Do you give the owner or board a security update at least once a year?
If 500 or more customers were affected, could you notify the FTC within 30 days?
If you prepare taxes, do you confirm a security plan when you renew your PTIN?