The Internal Revenue Service (IRS) Is Making Progress On Securing Its Systems And Data

The Treasury Inspector General for Tax Administration released a 92-page report outlining that while the Internal Revenue Service (IRS) is making progress on securing its systems and data, risks to taxpayer-related data remain. Of the five functional areas for the cybersecurity framework leveraged by the IRS to implement security controls, two of them were rated “not effective”. Those two functions included the ability to identify cybersecurity risks and detect cybersecurity incidents.

Some of the specific problems identified included lack of oversight over IT acquisitions, asset management, human capital, project management, risk management, implementation of corrective actions, modernizing operations, and the Coronavirus Disease 2019 response. The report states that “Weaknesses within the IRS’s computer operations could begin to adversely affect its ability to meet its mission of helping taxpayers comply with their tax responsibilities and enforcing the tax laws with integrity and fairness to all.”

For access to the report: https://www.treasury.gov/tigta/auditreports/2022reports/202220005fr.pdf