Modern Problems: IRS Computers Show Flaws

By Ken Berry

According to the Treasury Inspector General for Tax Administration (TIGTA), the IRS' computer systems have more than a few glitches.
In a new report released on December 4, 2012, the government watchdog said that the IRS has made strides in developing and implementing significant information technology (IT) capabilities during the past year, but still needs to make improvements. The report reflects TIGTA's annual evaluation of the IT systems required by the IRS Restructuring and Reform Act of 1998.
"The IRS made significant progress in modernizing its system, but it must continue its efforts to ensure that its computer systems are effectively secured to protect sensitive financial and taxpayer data," said J. Russell George, TIGTA's head honcho. "Until the IRS addresses security weaknesses, it will continue to put the confidentiality, integrity, and availability of financial and taxpayer information and employee safety at risk," he continued.
In particular, TIGTA focused on two key systems in its latest report, the Modernized eFile and the Customer Account Data Engine 2 (CADE 2), calling for stronger controls for CADE 2. Auditors also say that IRS data integrity testing hasn't provided proper assurance that CADE 2 data is consistently accurate and complete. This presents problems for a database intended to become the authoritative repository of taxpayer information.
TIGTA believes that the IRS' Modernization Program remains a major risk and that better controls could ensure long-term success for both of these key systems. Furthermore, the IRS must develop and implement new systems to accommodate provisions in the new health care legislation (the Affordable Care Act), posing significant risk management challenges.
Another area of concern relates to the IRS's patch management. The IRS has "not yet discovered all the IT assets residing on its network and, therefore, cannot ensure all assets are appropriately patched," reports TIGTA. In a March 2012 audit, TIGTA noted that the IRS has a 12 percent noncompliance rate of known assets, meaning that twenty-three critical patches were not applied to servers and resulted in 7,329 vulnerabilities on average on those servers.
TIGTA seems frustrated by the lack of progress because it's convinced that the IRS has the necessary technological capabilities at its fingertips and isn't using them fully. Although virtualization technology has improved operational efficiency, additional improvements are needed through better application of the technology. Server virtualization saved the IRS $10.2 million as of the end of fiscal 2011 and should provide $1.3 million savings through reduced power consumption in fiscal 2013. TIGTA says that further virtualization would save another $7.73 million over five years.
Normally, TIGTA offers recommendations to the IRS, but didn't do so in this assessment because it was based mainly on previous TIGTA reports and information from other oversight organizations. But that doesn't mean it won't be watching the IRS' next move closely.
Related articles:

You may like these other stories...

For bitcoin users, the taxman cometh. And you best know how to calculate taxes owed on what the IRS calls convertible virtual currency.In March 2014, the IRS issued Notice 2014-21, which declares virtual currency will be...
Majority of House of Representatives urges leadership to preserve cash method of accounting for tax purposesA bipartisan majority of the House of Representatives – 233 members – has signed a letter urging House...
More than 1 million tax payments have been processed so far in 2014 through IRS Direct Pay, a free web-based payment system that debuted earlier this year, the tax agency announced on Wednesday.Available through the Pay Your...

Already a member? log in here.

Upcoming CPE Webinars

Sep 18
In this course, Amber Setter will shine the light on different types of leadership behavior- an integral part of everyone's career.
Sep 24
In this jam-packed presentation Excel expert David Ringstrom, CPA will give you a crash-course in creating spreadsheet-based dashboards. A dashboard condenses large amounts of data into a compact space, yet enables the end user to easily drill down into details when warranted.
Sep 30
This webcast will include discussions of important issues in SSARS No. 19 and the current status of proposed changes by the Accounting and Review Services Committee in these statements.
Oct 23
Amber Setter will show the value of leadership assessments as tools for individual and organizational leadership development initiatives.