Security Vulnerability Management and Configuration Compliance of a General Support System and Major Application Need Improvement
Report Information
Date Issued
September 26, 2024
Report Number
2024-200-057
Report Type
Audit
Joint Report
Yes
Participating OIG
Treasury Inspector General for Tax Administration
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
Recommendations
The Chief Information Officer should timely remediate or mitigate all vulnerabilities in accordance with IRS policies.
The Chief Information Officer should ensure that systems are in place to reconcile the temporary and unknown repositories to verify that assets are assigned to an established group.
The Chief Information Officer should ensure that systems are in place to reconcile duplicate accounting of assets in the repository.
The Chief Information Officer should reconcile assets to reflect the operating environment.
The Chief Information Officer should evaluate the temporary and unknown repositories to establish ownership of assets.