Its about way more than just your tax program.

A WISP, or Written Information Security Program, is the document by which an entity spells out the administrative, technical and physical safeguards by which it protects the privacy of the personally identifiable information it stores.

You may want to ask your cyber insurance carrier if they have a template for,you to follow.