CPA Firm Cybersecurity & Compliance: IRS, FTC Safeguards, and WISP Mastery

CPA Firm Cybersecurity & Compliance: IRS, FTC Safeguards, and WISP Mastery is a self-paced online intermediate-level course from Petronella Technology Group, Inc. in the Cybersecurity & Compliance catalog. It takes about 4 hours, costs $349 per learner, and ends with a certificate of completion.

4-hour CPA firm cybersecurity course. IRS Pub 4557 / 5708 WISP, FTC Safeguards Rule, breach response, SOC 2 readiness. $349 lifetime, certificate.

⏲ 4 hours★ intermediate➤ Cybersecurity & Compliance

Pricing

From $349

Lifetime access. Certificate of completion. Quizzes and assessments.

Enroll Now

Your Instructor

Craig Petronella

CMMC-RP, CCNA, CWNE, DFE #604180

Founder of Petronella Technology Group (founded 2002, BBB A+ since 2003). Team is fully CMMC-RP certified. CMMC-AB Registered Provider Organization #1449.

What you will learn

  • Author a defensible Written Information Security Plan (WISP) using the IRS Publication 5708 template tailored to your firm size
  • Designate and document the Qualified Individual required under the FTC Safeguards Rule and define their reporting cadence
  • Deploy multi-factor authentication and encryption controls in line with 16 CFR Part 314 expectations
  • Execute the FTC 30-day breach-notification workflow for events affecting 500 or more consumers and coordinate with IRS Stakeholder Liaison
  • Run an incident-response tabletop covering tax-season fraud, EFIN takeover, and client-impersonation wire requests
  • Build a vendor risk register for tax software, e-file providers, document portals, and outsourced bookkeeping
  • Map firm controls to the AICPA SOC 2 Trust Services Criteria as a readiness path for larger engagements
  • Recognize state breach-notification obligations as they layer on top of the federal FTC requirement

Course outline: 6 modules, 17 lessons

Module 1: The Regulatory Landscape for CPA Firms

  • Who Regulates CPA Firm Cyber?
  • The Stakes - Real CPA Firm Breaches and Penalties
  • Scenario: The IRS Examination

Module 2: IRS Publication 4557 - Safeguarding Taxpayer Data

  • IRS Pub 4557 Walkthrough
  • Building the Practical Safeguards Stack

Module 3: The IRS Written Information Security Plan (WISP)

  • WISP Requirements & IRS Pub 5708
  • Drafting Your Firm's WISP - A Practical Walkthrough
  • Scenario: The Late-Night CFO Call

Module 4: FTC Safeguards Rule - GLBA for Tax Preparers

  • FTC Safeguards Rule Overview (16 CFR Part 314)
  • Qualified Individual, MFA, Encryption & Breach Notification
  • Scenario: The Vendor Email

Module 5: Tax-Season Fraud - Phishing, ERO Account Takeovers & Wire Fraud

  • Tax-Season Threat Patterns
  • Wire Fraud, Refund Fraud, and Defenses
  • Scenario: The Refund Redirect

Module 6: Client Data Protection, Breach Response & SOC 2 Readiness

  • Client Data Protection Program (Operationalizing the WISP)
  • Breach Response & SOC 2 Readiness
  • Scenario: The SOC 2 Demand

Buying for a team

Team packs for this course. A block of seats for this one course, redeemable for 12 months: 5 seats $999. Compare team packs.

Frequently Asked Questions

What will I learn in CPA Firm Cybersecurity & Compliance?

You will learn to author a defensible Written Information Security Plan using the IRS Publication 5708 template, designate the Qualified Individual required under the FTC Safeguards Rule, and deploy multi-factor authentication and encryption controls aligned with 16 CFR Part 314. The course also walks through the FTC 30-day breach-notification workflow and maps firm controls to the AICPA SOC 2 Trust Services Criteria.

Who is CPA Firm Cybersecurity & Compliance for?

It is built specifically for tax and accounting firms, including small CPA practices and paid tax preparers who are treated as financial institutions under the FTC Safeguards Rule. The intermediate-level material targets practitioners who must meet IRS and FTC obligations without a full-time security team.

How long is CPA Firm Cybersecurity & Compliance and what level is it?

The course runs about 4 hours (240 minutes) across six modules plus a final exam, at an intermediate level. It is self-paced online with progress tracking.

Is CPA Firm Cybersecurity & Compliance free or paid?

It is a paid course priced at $349 with lifetime access. It is covered by our 30-day money-back guarantee: request a refund within 30 days of purchase if you have completed less than 25% of the course, and we refund the full price.

Will I get a certificate, and does CPA Firm Cybersecurity & Compliance count for CPE?

Learners who pass the final exam receive a certificate of completion. The course is delivered as self-study contact hours and is not currently NASBA-registered, so you should confirm acceptance with your state board before claiming formal CPE credit.

Loading full course details, curriculum, and preview lessons. If this view does not change in a few seconds, please browse all courses or call 919-348-4912.