The Direct File Pilot Deployed Successfully; However, Security and Testing Improvements Are Needed

The Chief Information Officer should ensure that OneSDLC guidance provides specific policies and procedures to review and analyze artifacts during the independent verification and validation process.

The Chief Information Officer and the Chief, Direct File, should ensure that Direct File OneSDLC artifacts are completed and signed prior to future deployments.

The Chief Information Officer and the Chief, Direct File, should update existing MOUs to include security and technical details for managing the exchange of taxpayer data, and ensure the security and technical details are included in future agreements with participating States.

The Chief Information Officer and the Chief, Direct File, should ensure that the Direct File requirements repository contains traceability and automatic reporting capabilities.

The Chief Information Officer and the Chief, Direct File, should ensure that Direct File developers document their test plan with traceability to test types, test cases, and test results.