wisp builder for ftc safeguards rule

Interview-driven Written Information Security Program for tax preparers and GLBA firms, mapped to 16 CFR 314.4 with an annual checklist.

Build a Written Information Security Program (WISP) and annual review checklist for tax preparers, accountants and other GLBA financial institutions, mapped section-by-section to the FTC Safeguards Rule 16 CFR 314.4 (a)–(j) and the 314.6 small-institution exemptions. Interview-driven JSON answers in, Markdown WISP out. Use when someone asks "do I need a WISP?", "FTC Safeguards Rule template" or "IRS pub 4557 security program".

What it does

• Runs entirely offline in standard-library Python (no network, no credentials, writes only inside the working folder).
• Ships with examples, unit tests (run on Python 3.8 / 3.9 / 3.13) and a references/sources.md citing the official specs used.
• Exit codes: 0 = clean / aligned, 1 = findings, 2 = bad input — ready for CI and agent loops.

Who it's for

Security-minded developers, MSPs, small-business IT, compliance leads and IR analysts who want a repeatable offline check their agent can run.

Not legal advice / limits

See the skill's references/sources.md and Known Limitations below. Compliance-flavored output is a draft for counsel, not a certification.