Delays in implementing an IRS computer security tool resulted in a lack of continuous monitoring for security issues on employee workstations, the Treasury Inspector General for Tax Administration has said in an audit to determine whether the IRS is effectively and efficiently implementing its continuous monitoring tool to monitor security settings on employee workstations and laptop computers.
It found that the agency’s Treasury Enhanced Security Initiatives project – including the continuous monitoring tool – has experienced several delays and that the project oversight board has not taken required actions to manage the delays or associated costs.
The IRS agreed with recommendations to review total actual life cycle costs for projects at least quarterly and review variances between actual costs and the originally proposed estimated costs, manage costs by considering the postponement of projects with long-term delays, and escalate ongoing project delays to the higher level Security Services and Privacy Executive Steering Committee.
