1
Define the scope and list all applicable entities
Identify every legal entity covered β parent company, subsidiaries, branches, and joint ventures. Note the jurisdictions each entity operates in and the tax types each is subject to.
π‘ Pull your entity organization chart before starting β a missing subsidiary in the scope section is the single most common gap auditors find.
2
Assign a named owner to every filing obligation
List each tax type and due date, then assign a specific role β not just 'finance team' β as preparer and a separate role as reviewer. Document the escalation path to the CFO.
π‘ Map each filing to a calendar and set recurring reminders in your project management or accounting system at the time you fill out this section.
3
Build the filing calendar with all due dates
Complete the tax registration and filing obligations section with every return type, the governing authority, the due date, and payment method. Include both annual and estimated payment deadlines.
π‘ Cross-check your filing list against your EIN registration, state registrations, and any sales tax permits to catch obligations you may have overlooked.
4
Set record-keeping retention periods by document type
Specify the minimum retention period for each category β tax returns, payroll records, fixed-asset schedules, contracts, and correspondence β and the system or location where each is stored.
π‘ Check the longer of the IRS general 3-year rule, the 6-year rule for omitted income, and any state-specific minimum before setting your retention periods.
5
Document the three-step review and sign-off workflow
Write out the preparer β reviewer β approver chain for each return type and specify how sign-off is recorded β a digital log, email confirmation, or accounting system workflow.
π‘ Preparer and reviewer must be different people β if your team is too small, the external accountant can serve as the independent reviewer for high-risk filings.
6
Define the materiality threshold for uncertain tax positions
Set a dollar amount above which uncertain positions must be escalated to the CFO and external counsel, and specify how they are documented in the tax risk register.
π‘ A threshold of 1β2% of pre-tax income is a common starting point for mid-size businesses; adjust based on your risk appetite and the complexity of your tax profile.
7
Write the audit response protocol
Name the roles to be notified within 48 hours of any tax authority contact, identify your external tax counsel, and specify that no response is sent without CFO and counsel review.
π‘ Store your external counsel's contact information directly in this section so it is immediately accessible when a notice arrives.
8
Set the annual review date and assign ownership
Enter a specific calendar date for the annual policy review, name the owner, and set a trigger for out-of-cycle updates if tax law or business structure changes materially.
π‘ Schedule the review 60β90 days before your fiscal year-end so updates are in place before the next filing season begins.