Efforts to Oversee State Agency Access to Federal Tax Information Were Generally Successful; However, Some Improvements Are Needed

Subsequently remind agencies with late-filed SSRs or CAPs of best practices at least 60 days prior to their next scheduled filing due date, and that they may request a filing extension at least 30 days before their scheduled due date if extenuating circumstances exist.

Offer standardized training to any new HOA on the safeguard review process and best practices for submitting agency documentation.

Update policies to require follow-up with State agencies concerning any unsubmitted mitigation plans after their mitigation plan due dates have passed.

Develop procedures to ensure that finding information is accurately documented in the PFR, the SRR, and eCase as well as that case updates, case notes, relevant correspondence, and mitigation plan receipt dates are accurately documented in eCase.

Send an annual reminder to all State agencies to notify staff of their responsibility to report data incidents within 24 hours of identification.