Date Issued
Report Number
2021-20-063
Report Type
Audit
Joint Report
Yes
Participating OIG
Treasury Inspector General for Tax Administration
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
Recommendations
The Chief Information Officer should ensure that the official inventory repository is accurate and complete and implement an inventory reconciliation process to ensure that administrative tools, such as vulnerability, configuration scanning tools, and the ISCP inventory align with the official inventory repository.
The Chief Information Officer should ensure the Platform’s servers are effectively defined to improve the accuracy and completeness of the data reported to the official inventory repository.
The Chief Information Officer should complete a review of group owners to ensure that separated employees are not group owners and group owners are not also listed as users of the same group.
The Chief Information Officer should create an automated process to ensure that all user accounts have logged on within the allotted time frames and disable or remove inactive users.
The Chief Information Officer should retire older ******************** and migrate to more current ****************** in accordance with the documented migration plan.