U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Improvements Are Needed to Strengthen Electronic Authentication Process Controls

Report Information

Date Issued
Report Number
2016-20-082
Report Type
Audit
Joint Report
Yes
Participating OIG
Treasury Inspector General for Tax Administration
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
View Report

Recommendations

The Chief Information Officer should compile periodic summary data of eAuthentication volume and unusual activity trigger event transactions, so that data can be compared over time to identify trends or outliers.

The Chief Information Officer should ensure that the eAuthentication audit trail includes an EventID that indicates which target application the user intended to access after authenticating.