A Practice Note explaining how to establish a written information security program (WISP) for a private equity fund. This Note provides a method and guidance for adopting a comprehensive WISP to safeguard non-public information of individual investors and other customers.