U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

The External Network Perimeter Was Generally Secure, Though the Security of Supporting Components Could Be Improved

Report Information

Date Issued
Report Number
2017-20-061
Report Type
Audit
Joint Report
Yes
Participating OIG
Treasury Inspector General for Tax Administration
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
View Report

Recommendations

The Chief Information Officer should ensure that comprehensive and accurate inventories of information system components are maintained, including the GSS-1 inventory, that include the level of granularity necessary for tracking and reporting, and should implement improved procedures for ensuring that the inventory remains accurate and up-to-date.

The Chief Information Officer should improve processes to ensure that all vulnerability findings are reviewed, analyzed, and appropriately addressed within the required time frames.

The Chief Information Officer should ensure that the SRCO group improves its remediation tracking processes to include tracking the age of the vulnerability, creating monthly metrics to be used by management to assess the IRS's progress in vulnerability remediation, and implementing an escalation process that provides management visibility.