U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Improvements Are Needed to Ensure That Wireless Networks Are Secure

Report Information

Date Issued
Report Number
2020-20-063
Report Type
Audit
Joint Report
Yes
Participating OIG
Treasury Inspector General for Tax Administration
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
View Report

Recommendations

The Chief Information Officer should ensure that the 25 wireless network security-related weaknesses are resolved and that the evidence supporting the weakness closures is updated in the Treasury Federal Information Security Modernization Act of 2014 (FISMA) Inventory Management System for subsequent testing and closure approval.

The Chief Information Officer should correct the wireless access point inventory issues that TIGTA identified and shared with management.

The Chief Information Officer should update the internal procedures to provide detailed requirements for reviews and updates to the wireless access point inventory, including taking photographs of the devices during the deployment and replacement stages.

The Chief Information Officer should improve the current inventory management system and platform to ensure that all changes to wireless access point components are updated simultaneously.

The Chief Information Officer should ensure that the User and Network Services (UNS) function reviews and minimizes the broadcast range of the wireless access point signals to be within IRS-controlled boundaries. In addition, ensure that the broadcast range for the wireless access points planned for model replacement is minimized.