U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Breadcrumb

Systems Hosting Sensitive Data Lack Consistent Inventory Standards

Report Information

Date Issued
Report Number
2025-200-009
Report Type
Audit
Joint Report
No
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0

Recommendations

The Chief Information Officer should require that ABA team approval be obtained to ensure that new system names meet naming standards and authoritative records are formally created in the ABA and used throughout the other IRS inventory systems.

The Chief Information Officer should require a unique system identifier for each new and legacy system in the authoritative inventory be implemented and applied to system records in the other inventory systems.

The Chief Information Officer should conduct an annual reconciliation of the multiple inventory systems to ensure that all systems are using unique system identifiers.

The Chief Information Officer should improve its annual validation process to ensure that all systems with PII and FTI inventory data are consistently designated across the multiple inventory systems, and that system owners are communicating changes to impacted groups.