Systems Hosting Sensitive Data Lack Consistent Inventory Standards

Date Issued

Wednesday, March 26, 2025

Submitting OIG

Treasury Inspector General for Tax Administration

Agencies Reviewed/Investigated

Internal Revenue Service

Report Number

2025-200-009

Report Type

Audit

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

Open Recommendations

This report has 4 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
The Chief Information Officer should require that ABA team approval be obtained to ensure that new system names meet naming standards and authoritative records are formally created in the ABA and used throughout the other IRS inventory systems.
2	No	$0	$0
The Chief Information Officer should require a unique system identifier for each new and legacy system in the authoritative inventory be implemented and applied to system records in the other inventory systems.
3	No	$0	$0
The Chief Information Officer should conduct an annual reconciliation of the multiple inventory systems to ensure that all systems are using unique system identifiers.
4	No	$0	$0
The Chief Information Officer should improve its annual validation process to ensure that all systems with PII and FTI inventory data are consistently designated across the multiple inventory systems, and that system owners are communicating changes to impacted groups.