The Infrastructure Supporting the Big Data Analytics Platform Has Overdue and Unresolved System Vulnerabilities

Date Issued

Tuesday, September 2, 2025

Submitting OIG

Treasury Inspector General for Tax Administration

Agencies Reviewed/Investigated

Internal Revenue Service

Report Number

2025-200-038

Report Type

Audit

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

Open Recommendations

This report has 3 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
The Chief Information Officer should timely remediate GSS BDA vulnerabilities in accordance with IRS policies.
2	No	$0	$0
The Chief Information Officer should ensure that all configurations for GSS BDA assets adhere to federal and IRS policies.
3	No	$0	$0
The Chief Information Officer should ensure the asset discovery tool is properly configured to the source data to accurately account for all GSS BDA assets.