Improved Secure Document Safeguarding and Destruction Procedures Are Needed

The Chief, Facilities Management and Security Services, should develop standard operating procedures for sensitive document safeguarding and destruction to ensure uniformity and consistency across all IRS facilities.

The Chief, Facilities Management and Security Services, should ensure that all COD documents have similar information, including fill rates and number of bins serviced across all IRS facilities covered by the national contract.

The Chief, Facilities Management and Security Services, should immediately evaluate the 110 facilities not covered under the national or local contracts to ensure that the IRS has sensitive document safeguarding and destruction procedures in place that comply with NIST guidelines.

The Chief, Facilities Management and Security Services, should ensure that all bins that do not meet requirements are replaced at the Kansas City, Missouri, IRS facility.

The Chief, Facilities Management and Security Services, should develop processes and procedures to periodically inspect bins to identify damaged and altered bins and work with local subcontractors to replace the bins at all IRS facilities.