Please follow https://www.irs.gov/newsroom/heres-what-tax-professionals-should-know-about-creating-a-data-security-plan.