Did you assess security risks yourself?  

Did you design and implement a safeguards program?

Did you select service providers that can maintain appropriate safeguards?

These are areas that (most if not all) tax preparers don't have expertise in.