https://www.irs.gov/newsroom/heres-what-tax-professionals-should-know-about-creating-a-data-security...

I see Drake is offering somthing for their customers to meet this requirement, is this something Intuit will be doing as well?

Reading the requirements, I still dont fully understand what I need to have for a one person office, and who is the service provider than IRS references here?

I have an anti-virus, I keep logins and strong unique passwords secure, I use two factor authorizations on anything that gives me the option, I password protect anything I send clients in email, maintain backups securely offsite, destroy or wipe all devices with client data that are no longer being used, Im in the process of securing cyber insurance...maybe the cyber insurance company will provide this?

Tax pros must create a written security plan to protect their clients’ data. In fact, the law requires them to make this plan.

Creating a data security plan is one part of the new Taxes-Security-Together Checklist. The IRS and its Security Summit partners created this checklist. It helps tax professionals protect sensitive data in their offices and on their computers.

Many tax preparers may not realize they are required under federal law to have a data security plan. Each plan should be tailored for each specific office. When creating it, the tax professional should take several factors into consideration. This includes things like the company’s size, the nature of its activities, and the sensitivity of its customer information.

Creating a plan
Tax professionals should make sure to do these things when writing and following their data security plans:

Include the name of all information security program managers.
Identify all risks to customer information.
Evaluate risks and current safety measures.
Design a program to protect data.
Put the data protection program in place.
Regularly monitor and test the program.

Selecting a service provider
Companies should have a written contract with their service provider. The provider must:

Maintain appropriate safety measures.
Oversee the handling of customer information review.
Revise the security program as needed.