Risk Assessment
Identify where sensitive information exists and the risks associated with the systems and processes that handle it.
WISP Readiness
Turn security requirements into a plan your business can actually follow.
ACC Inc. helps businesses develop and maintain Written Information Security Plans that connect policies, technical safeguards, employee responsibilities, and day-to-day operations.
Who needs a WISP?
Businesses that collect, store, transmit, or otherwise handle sensitive personal or financial information may be required to maintain a written information security program.
This is especially relevant to organizations handling tax records, financial information, customer data, employee information, and other sensitive records.
A WISP should reflect how the organization actually operates. The policies on paper and the safeguards in the technology environment need to support each other.
What a practical WISP program covers.
A WISP is more than a document. It should define how sensitive information is protected throughout the organization.
Access & Authentication
Establish appropriate access controls, account management, and authentication safeguards.
System & Network Security
Protect workstations, networks, remote access, endpoints, and other systems that handle sensitive information.
Data Protection
Address storage, transmission, backup, recovery, retention, and secure handling of sensitive information.
People & Vendors
Define employee responsibilities, training expectations, and appropriate oversight of service providers.
Policies & Response
Document security responsibilities, incident procedures, reviews, and the process used to maintain the program.
A structured path to WISP readiness.
1
Discover & Scope
Identify sensitive information, systems, users, vendors, and applicable requirements.
2
Assess & Identify Gaps
Review current safeguards, policies, practices, and documentation.
3
Implement & Document
Address technical gaps and develop the written policies and procedures that support the security program.
4
Review & Maintain
Keep the WISP, safeguards, and supporting documentation current as the business and technology environment change.
Businesses that commonly need WISP readiness.
WISP requirements are especially relevant to organizations that collect, store, or transmit sensitive customer or financial information.
Tax Preparation Firms
Businesses handling tax records, Social Security numbers, financial documents, and other sensitive client information.
CPA & Accounting Firms
Firms responsible for protecting financial records and confidential client information.
Financial Services
Organizations handling customer financial information and other regulated data.
What ACC Inc. helps with.
WISP Readiness Reviews
Evaluate the current security program and identify missing elements.
Risk Assessment
Document systems, sensitive information, risks, and existing safeguards.
Technical Safeguards
Implement practical security improvements where gaps are identified.
Policies & Procedures
Create and organize the written documentation supporting the program.
Website & File Handling
Review how sensitive information is collected, uploaded, transmitted, and protected.
Ongoing WISP Support
Help maintain the program as systems, vendors, staff, and requirements change.
Need help figuring out what your WISP should cover?
ACC Inc. can review your current environment, identify gaps, and help turn your security requirements into a practical working program.