The rule has nothing to do with the tax software you are using. It is a written plan for your office on your plans for data security. See this link:

https://www.irs.gov/newsroom/heres-what-tax-professionals-should-know-about-creating-a-data-security...

Its about way more than just your tax program.

A WISP, or Written Information Security Program, is the document by which an entity spells out the administrative, technical and physical safeguards by which it protects the privacy of the personally identifiable information it stores.

You may want to ask your cyber insurance carrier if they have a template for,you to follow.

Drake offers a template https://www.drakesoftware.com/content/easy-steps-to-create-your-mandatory-tax-office-security-plan-s...

 

If you belong to a tax preparer or accountant organization they may have material to help you with this...