Guidance: the IRS sample WISP for tax professionals (Pub 5708)
IRS Publication 5708 walks tax professionals through creating a written information security plan, with a sample template. IRS Publication 4557 covers safeguarding taxpayer data more broadly.
Why it matters
This is guidance, not an incident. These publications are a good base, but you still need to decide how your own office uses AI tools.
What to do
- Start from the IRS sample plan if you don't have a WISP yet.
- Add a section on AI use: approved tools, settings and a 'never paste' list.
- Review your plan at least once a year.