Klevr WISP

Choose a Template

v—

Risk assessments

Annual documented reviews of risks.

Security training

Onboarding + annual; phishing & data handling.

Vendor due diligence

Contracts require safeguards & breach notice.

Least privilege

Quarterly access reviews; immediate offboarding.

Access logging

Quarterly review of logins/data access.

MFA

Tax software, portals, cloud.

Strong passwords

Unique/complex; manager encouraged.

Encryption

At rest & in transit, incl. backups.

Secure networks

Firewalls/EDR/patching; guest Wi‑Fi segmented.

Physical security

Locks, device security, clean‑desk.

Backups & BCDR

Tested backups; continuity plan.

Retention (years)

Notify ≤ days