Please follow https://www.irs.gov/uac/safeguarding-taxpayer-data-make-a-security-plan.