A Written Information Security Program (WISP) is documentation that describes the security controls, processes, and policies of an organization. In addition, a WISP is a roadmap for an organization's IT security that is required by law in several states.

A Written Information Security Program is intended to provide your organization with solid security procedures that not only reduce the likelihood of a breach but also limit your liability if one occurs.