Free WISP Templates
A Written Information Security Program (WISP) is required by name under the FTC Safeguards Rule, the NAIC Model Law, and IRS Publication 4557. Grab the free, fillable template that matches your industry — plain English, ready to adapt and sign.
Dealership WISP Template
All 9 FTC Safeguards Rule control families with template language and evidence checklists, sized for franchise and independent dealers.
Get the free templateNAIC · InsuranceNAIC Agency WISP Template
The Written Information Security Program independent insurance agencies need under the NAIC Insurance Data Security Model Law.
Get the free templateIRS Pub 4557 · TaxTax Preparer WISP Checklist
The IRS Publication 4557 + FTC Safeguards WISP checklist every paid tax preparer is required to maintain.
Get the free templateWhat every WISP must contain
The wording differs by regulation, but a compliant WISP covers the same core safeguards. Each template below builds these in:
- A designated Qualified Individual to own the program
- A documented risk assessment of where customer data lives
- Access controls, MFA, and encryption requirements
- Vendor / service-provider due-diligence language
- Secure data-disposal and retention procedures
- An incident response plan and staff-training requirement
Frequently Asked Questions
What is a WISP?
A WISP — Written Information Security Program — is the documented set of administrative, technical, and physical safeguards a business uses to protect customer information. Several regulations require one by name, including the FTC Safeguards Rule (auto dealers and other financial institutions), the NAIC Insurance Data Security Model Law (insurance agencies), and IRS Publication 4557 (tax preparers).
Are these WISP templates really free?
Yes. Each template is a free download — you provide a work email and we unlock the fillable document immediately. There's no charge and no obligation.
Which WISP template do I need?
It depends on your industry and the rule that applies to you: auto dealers that arrange financing use the FTC Safeguards (dealership) template; independent insurance agencies use the NAIC template; paid tax preparers use the IRS Pub 4557 checklist. If you're not sure which applies, a free assessment will tell you.
Is a template enough to be compliant?
A template gets you a documented program quickly, but the rules require the program to actually operate — controls in place, the risk assessment done, training delivered, and (for larger firms) periodic reporting. The template is the starting point, not the finish line.
Not sure which WISP applies to you?
Take a free assessment and we'll tell you which rule applies, where your gaps are, and the fastest path to a defensible, documented program.
Get Free Assessment