DO YOU HAVE A WRITTEN DATA SECURITY PLAN FOR YOUR BUSINESS? DO YOU KNOW IT'S THE LAW THAT YOU MUST HAVE ONE? THE FEDERAL TRADE COMMISSION REQUIRES TAX PROFESSIONALS TO CREATE AND MAINTAIN AN INFORMATION SECURITY PLAN. IT DOESN'T MATTER IF YOU'RE A ONE-PERSON SHOP… OR PART OF A MAJOR FIRM. THE F-T-C WANTS YOUR PLAN TO FOCUS ON THREE AREAS. EMPLOYEE MANAGEMENT AND TRAINING… INFORMATION SYSTEMS… AND DETECTING AND MANAGING SYSTEM FAILURES. TO HELP YOU COMPLY… THE F-T-C CREATED GUIDELINES THAT APPEAR IN THE I-R-S PUBLICATION CALLED "SAFEGUARDING TAXPAYER DATA." THEY INCLUDE THE FOLLOWING. CHOOSE SOMEONE TO COORDINATE YOUR INFORMATION SECURITY PROGRAM. IDENTIFY AND ASSESS THE RISKS TO CUSTOMER INFORMATION… AND EVALUATE IF YOUR CURRENT SAFEGUARDS ARE EFFECTIVE FOR CONTROLLING RISKS. DESIGN AND IMPLEMENT A SAFEGUARDS PROGRAM… AND REGULARLY MONITOR AND TEST IT. SELECT SERVICE PROVIDERS THAT CAN MAINTAIN APPROPRIATE SAFEGUARDS. MAKE SURE YOUR CONTRACT REQUIRES THEM TO DO SO. AND BE SURE TO OVERSEE THEIR HANDLING OF CUSTOMER INFORMATION. FINALLY… EVALUATE AND ADJUST THE PROGRAM AS NEEDED… SUCH AS WHEN THERE ARE CHANGES IN YOUR BUSINESS OR OPERATIONS. TO GET STARTED WITH YOUR PLAN… GO TO I-R-S-DOT-GOV-SLASH-DATA-SECURITY-GUIDE. ###
