The IRS requires tax preparers, payroll processors, and eFilers (if you have a PTIN then you qualify) to implement a cyber security plan and supporting policies that contain key requirements. These are outlined in IRS Publication 4557 – Safeguarding Taxpayer Data, and Small Business Information Security – The Fundamentals, by the National Institute of Standards and Technology.