Guides › PTIN renewal and your WISP: what the security plan question means

PTIN renewal and your WISP: what the security plan question means

The PTIN renewal form asks if you know preparers must keep a written information security plan. What that question means, what happens if you don't have one, and how to fix it before December 31.

PTINs expire on December 31 each year, and the renewal form (Form W-12, or the online renewal) includes a question about data security. It asks you to confirm that you know paid tax return preparers must create and maintain a Written Information Security Plan (WISP) to protect taxpayer information.

Here is what that question means and what to do if you don't have a plan yet.

Is it a certification?

No. The question confirms you are aware of the requirement. It does not ask you to attach your plan or certify that it is complete.

The requirement itself is real, though. It comes from the FTC Safeguards Rule, which covers professional tax preparers, and the IRS explains it in Publication 5708. The form also warns that false or misleading information can lead to penalties or to denial or termination of a PTIN.

What happens if I don't have a WISP?

A missing plan doesn't automatically cancel your PTIN. The bigger risks are elsewhere:

• After a breach: the IRS, FTC, your state, and your clients will ask what safeguards you had. "None written down" is the worst answer.
• Cyber insurance: insurers ask whether you have written security policies. A "yes" without a document can complicate a claim.
• The FTC: the Safeguards Rule is enforceable, and tax preparers are explicitly covered.
• Your clients: more of them now ask how you protect their data.

How to have a plan before December 31

You have three choices: fill in the 28-page IRS sample in Publication 5708, hire a consultant, or use a tool that writes it for you.

WispMint takes about 10 minutes. You answer plain questions about your office (people, software, devices, storage) or describe your practice in a sentence and let AI fill in the answers. You get a free readiness score, then a plan tailored to your office, built from Publication 5708 and the Safeguards Rule, as PDF and Word. It starts at $49.

Start your free readiness score

Checklist before you renew

• [ ] You have a written plan with your office's real details in it
• [ ] Multi-factor authentication is on for email, tax software, and cloud storage
• [ ] Staff (including seasonal help) know the plan and have signed it
• [ ] You know who to call at the IRS if there's a breach (your Stakeholder Liaison)
• [ ] The plan has a review date on it

Frequently asked questions