Information security at the IRS is an area of weakness, according to an audit by the Treasury Inspector General for Tax Administration (TIGTA). All federal agencies must have a corrective plan of action, or Plan of Action and Milestones (POA&M), TIGTA explained in a recent report. To test the effectiveness of the tax agency’s POA&Ms, an audit was conducted. From Jan. 1, 2005 to Aug. 26, 2022, nearly 73% of the POA&Ms weren’t timely reviewed. “Due to staffing shortfalls, IRS employees are not facilitating the timely resolution of information security weaknesses,” said TIGTA, adding that this “puts the IRS at risk for exploitation by threat actors.” To read the report: https://bit.ly/3KTNC1Q

