Recommendation: The Commissioner of Internal Revenue should identify agency-wide and division performance goals that align with IRS's strategic service goals and objectives for an improved taxpayer experience. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should identify performance measures with targets for improving the taxpayer experience that link with the related performance goals. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should ensure that the taxpayer experience measures cover all of the factors for customer service identified in OMB guidance as well as service channels across the tax process phases. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should ensure that taxpayer experience measures reflect the highest-impact taxpayer journeys and key transactions, as consistent with OMB guidance. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should regularly analyze and use the results of the performance measures and surveys on the taxpayer experience to help improve performance. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should develop processes for using performance results on the taxpayer experience as part of resource allocation decisions intended to improve performance. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should publicly report available information on taxpayer experience performance, including the measures and related targets, for example by providing it on IRS.gov and in IRS publications. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of FinCEN should develop and implement written policies and procedures to help promote the greater use of BSA reports by law enforcement agencies that do not have direct access to the BSA database. Such policies and procedures could include outreach strategies and educational or training materials. (Recommendation 1)

Agency: Department of the Treasury: Financial Crimes Enforcement Network
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury, in coordination with the Commissioner of Internal Revenue, should update and refine the estimate of eligible recipients who have yet to file for an economic impact payment to help target outreach and communications efforts. (Recommendation 9)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury, in coordination with the Commissioner of Internal Revenue, should make estimates of eligible recipients who have yet to file for an economic impact payment, and other relevant information, available to outreach partners to raise awareness about how and when to file for economic impact payments. (Recommendation 10)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Regarding financial sector cyber risk mitigation efforts, we recommend that the Secretary of the Treasury, in coordination with the Department of Homeland Security and other federal and nonfederal sector partners, track the content and progress of sectorwide cyber risk mitigation efforts, and prioritize their completion according to sector goals and priorities in the sector-specific plan. (Recommendation 1)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Regarding the financial sector-specific plan, we recommend that the Secretary of the Treasury, in coordination with the Department of Homeland Security and other federal and nonfederal sector partners, update the financial services sector-specific plan to include specific metrics for measuring the progress of risk mitigation efforts and information on how the sector's ongoing and planned risk mitigation efforts will meet sector goals and requirements, such as requirements for the financial services sector in the National Cyber Strategy Implementation Plan. (Recommendation 2)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should update Form 990, including Schedule H and instructions where appropriate to ensure that the information demonstrating the community benefits a hospital is providing is clear and can be easily identified by Congress and the public, including the community benefit factors. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should assess the benefits and costs, including the tax law implications, of requiring tax-exempt hospital organizations to report community benefit expenses on Schedule H by individual facility rather than by collective organization and take action, as appropriate. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should establish a well-documented process to identify hospitals at risk for noncompliance with the community benefit standard that would ensure hospitals' community benefit activities are being consistently reviewed. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should establish specific audit codes for identifying potential noncompliance with the community benefit standard. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should require ETAAC and IRSAC to make decisions on proposed recommendations to IRS during open meetings. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should require ETAAC and IRSAC to compile meeting minutes and make them publicly available. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should require FACA committees under Treasury's purview to provide access to meeting agendas and supporting documents on the committees' websites. (Recommendation 5)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: We recommend that the Secretary of the Treasury ensure that the Fiscal Assistant Secretary enhances Treasury's procedures for the aggregate analysis to consider the impact of all amounts not obtained from significant entity audited financial statements on the reliability of the CFS and use the results to determine if audit coverage is needed for any information. (Recommendation 1)

Agency: Department of the Treasury
Status: Open

Comments: In commenting on our draft report, Treasury stated that it has already taken steps to address this recommendation by updating guidance to federal entities for the preparation of the fiscal year 2020 Agency Financial Reports or Performance and Accountability Reports. In addition, Treasury stated that it has drafted a memo to the Federal Accounting Standards Advisory Board to seek clarification of existing guidance related to reporting differences for federal entities that prepare financial reports according to FASB standards.

Recommendation: We recommend that the Secretary of the Treasury ensure that the Fiscal Assistant Secretary enhances Treasury's process for revising accounting and reporting policies to reasonably assure that financial information—including the SOCNP, Funds from Dedicated Collections note, and Other Liabilities note—is prepared in accordance with U.S. GAAP and sufficiently documented to allow effective management review. (Recommendation 2)

Agency: Department of the Treasury
Status: Open

Comments: In commenting on our draft report, Treasury stated that it has already taken steps to address this recommendation by updating guidance to federal entities for the preparation of the fiscal year 2020 Agency Financial Reports or Performance and Accountability Reports.

Recommendation: We recommend that the Secretary of the Treasury ensure that the Fiscal Assistant Secretary enhances existing procedures to reasonably assure that disclosures for financial information incorporated using accounting standards issued by FASB are prepared in accordance with U.S. GAAP, such as improving (1) the quantitative analysis to consider all FASB information included in the CFS, (2) the FASB questionnaire to consider all relevant disclosures and obtain responses from all significant component entities, and (3) procedures for sufficiently documenting analyses and conclusions related to FASB information in the CFS. (Recommendation 3)

Agency: Department of the Treasury
Status: Open

Comments: In commenting on our draft report, Treasury stated that it drafted a memo to the Federal Accounting Standards Advisory Board to seek clarification of existing guidance related to reporting differences for federal entities that prepare financial reports according to FASB standards.

Recommendation: The Associate Director of FinCEN's Global Investigations Division should provide additional direction for self-initiated GTOs, including how the agency will plan to (1) oversee covered businesses, (2) inform and obtain feedback from appropriate law enforcement agencies, and (3) evaluate the GTOs to determine the appropriate course of action. (Recommendation 1)

Agency: Department of the Treasury: Financial Crimes Enforcement Network
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should consider cost-effective options for notifying ineligible recipients on how to return payments. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document measurable objectives for using data in selecting exempt organization returns for examination. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document and consistently use clear criteria and decision rules on assigning point values to queries, using categories and sliding scales. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should require a regular review of query descriptions and programming to ensure their accuracy and minimize queries that flag the same or similar compliance issue. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should develop procedures and criteria to test new queries prior to implementation in the models. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should more fully document how TE/GE processes data and uses data to make examination selection decisions for sources outside of the model such as research projects and other projects that use queries. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should conduct an analysis to identify the optimal interval between model runs. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should establish a process for regularly evaluating selection decisions and related outcomes for the models and other processes that use data to select returns for examinations. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document consideration or action on recommendations from its 2018 and 2020 contractor assessments. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document how score and query data for all returns in the models will continue to be saved over the long term. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should ensure that historical data on examination outcomes are consistently defined and used when doing analysis of examination outcomes. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should routinely analyze the reasons for not examining selected returns and identify any necessary actions to address the reasons. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should annually review and update procedures as needed in relevant IRM sections on examination selection and issue interim guidance until the affected IRM sections are updated. (Recommendation 12)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document why TE/GE has not identified any risks in its risk register for using data to select exempt organization returns for examination. If risks are subsequently identified, TE/GE should document how it plans to analyze and address them. (Recommendation 13)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should align the agency's contingency plan with OMB guidance by including (1) plans for a potential prolonged shutdown; (2) flexibilities available to supervisors if furloughed employees were unable to return to work after the end of the shutdown; and (3) procedures for resuming program activities, including steps to ensure appropriate oversight and disbursement of funds upon the end of a shutdown. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service (IRS) partially agreed with the recommendation. IRS agreed with one element of our recommendation to include additional detail in its agency contingency plan and stated that it is in the process of adding procedures for resuming program activities following a government shutdown into its contingency plan. IRS did not agree with the other elements of the recommendation because it believes it has already addressed plans for a potential prolonged shutdown and flexibilities for supervisors if employees are unable to return to work at the end of a shutdown in its contingency plans. We agree that while IRS has included some details on these elements in its plans, we continue to believe that it should provide more detail, such as points in time when the furlough status of an employee may change, how many employees would be affected, and the legal basis for the changes, within its publically available contingency plan to fully address these elements. We will continue to monitor IRS's efforts in this area.

Recommendation: The Commissioner of Internal Revenue should develop internal controls to limit access to physical workspaces to appropriate employees during a government shutdown. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service disagreed with this recommendation. IRS stated that it believes that it has effective controls in place to manage physical workspace access during a shutdown. In addition, IRS said that it believes that implementing additional access controls do not justify the corresponding resource investments. We continue to believe that IRS should improve its access controls, which currently rely on managers and furlough letters to communicate limits on workspace access. While we recognize the costs of increased access controls, government shutdowns are unique events that require additional access controls in order to prevent potential misuse of government resources and will monitor IRS's efforts to address it.

Recommendation: The Commissioner of Internal Revenue should develop internal controls to limit access to virtual workspaces to appropriate employees during a government shutdown. (Recommendation 12)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service disagreed with this recommendation. IRS stated that it believes that it has effective controls in place to manage virtual workspace access during a shutdown. In addition, IRS said that it believes that implementing additional access controls do not justify the corresponding resource investments. We continue to believe that IRS should improve its access controls, which currently rely on managers and furlough letters to communicate limits on workspace access. While we recognize the costs of increased access controls, government shutdowns are unique events that require additional access controls in order to prevent potential misuse of government resources and will monitor IRS's efforts to address it.

Recommendation: The Commissioner of IRS should change Schedule C or Form 1099-NEC so that taxpayers can identify if they received payment for platform work. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of IRS should develop a process for monitoring feedback on its communications efforts and products tailored for platform workers, which should include documenting and evaluating feedback. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of IRS should clarify the instructions and publications for Forms 1040 and 1099-K by adding plain language to clearly indicate to platform workers that the forms apply to them. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of IRS should work with the Secretary of the Treasury to amend the 6050W "tie-breaker rule" that applies to duplicative reporting requirements so that payments made through a TPSO's third party payment network are reportable under Section 6041, rather than under Section 6050W. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of IRS should work with Treasury to determine what thresholds would be the most appropriate for payment information reporting and, if warranted, recommend that Congress adjust the thresholds. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of IRS should work with the Secretary of the Treasury to implement withholding that is voluntary for companies making payments for services to platform workers and other independent contractors who choose to participate. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of IRS should assess the impact of withholding that is voluntary for companies, once implemented, and if warranted, work with the Secretary of the Treasury on a proposal to Congress that would require TPSOs to offer tax withholding to platform workers and other independent contractors who choose to participate. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The IRS Commissioner should, in collaboration with OMB, solicit input from CMS, FBI, SSA, and state agency stakeholders on revisions to its security policy to ensure that cybersecurity requirements for state agencies are consistent with other federal agencies and NIST guidance to the greatest extent possible. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The IRS Commissioner should revise its assessment policies to maximize coordination with other federal agencies to the greatest extent practicable. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should modify the title of IRS's employment-related identity theft action code 525 to reflect the type of employment-related identity fraud encompassed by this action code. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should assess and document the feasibility of incorporating additional checks into its automated checks of employment-related identity fraud for populations at risk of employment-related identity fraud, such as children, elderly, deceased persons, and individuals associated with multiple wage records. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should assess and document the costs and benefits of using the Withholding Compliance Program (WHC) to address compliance risks posed by potential employment-related identity fraudsters who owe taxes and take appropriate action, as needed. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should modify Automated Underreporter (AUR) to include wage discrepancy checks for victims of employment-related identity fraud once IRS has updated AUR's legacy programming code. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should, in collaboration with the Commissioner of Social Security, develop and document a plan for updating future Combined Annual Wage Reporting (CAWR) MOUs. The plan should identify actions, time frames, and responsible parties, including executive leadership. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should, in collaboration with the Commissioner of Social Security, develop and implement goals and performance measures for the CAWR MOU. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should, in collaboration with the Commissioner of Social Security, develop and document a strategy for assuring that the reviews required by the updated MOU are completed within the specified time frames. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should, in collaboration with the Commissioner of Social Security, clearly define data elements they exchange with SSA. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: We recommend that the Commissioner of Internal Revenue update and implement policies and procedures for developing a courier contingency plan to prohibit managers responsible for overseeing the preparation of taxpayer receipts for deposits from also transporting them to financial institutions. (Recommendation 20-01)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The IRS agreed with this recommendation and stated that the Wage and Investment organization will update the Courier Contingency Plan polices and procedures to provide for appropriate segregation of duties or other curative measures.

Recommendation: We recommend that the Commissioner of Internal Revenue establish and implement manual refund procedures to direct (1) initiators to document (e.g., record on the taxpayers' accounts or annotate on the related manual refund forms) the justification for bypassing the IAT tool warning related to potential duplicate tax refunds on taxpayers' accounts and (2) managers to monitor whether such warnings were bypassed and review the justifications for reasonableness prior to approving manual refund forms. (Recommendation 20-02)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The IRS agreed with this recommendation and stated that the Wage and Investment organization agrees that actions need to occur to address duplicate tax refund conditions through improved manual refund procedures to require (1) initiator to document the justification for bypassing the Integrated Automated Technologies (IAT) tool warning related to potential duplicate tax refunds on taxpayers' accounts and (2) managers to review the justification documented for bypassing the IAT tool warning for reasonableness prior to approving manual refund forms. However, IRS also stated that it was unable to commit to implementing a corrective action plan at this time due to budgetary constraints on system enhancements.

Recommendation: We recommend that the Commissioner of Internal Revenue establish and implement actions to provide reasonable assurance that business units record the acceptance of goods and services in a timely manner in accordance with IRS policies and procedures. (Recommendation 20-03)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The IRS agreed with this recommendation and stated that the CFO organization will determine the reasons for business unit(s) non-compliance with established policies and procedures related to timely recording of receipts and acceptance of goods and services and, based on this evaluation, develop an action plan that once completed will provide additional tools to aid the business units in reasonably ensuring compliance with established requirements.

Recommendation: We recommend that the Commissioner of Internal Revenue establish and implement actions to provide reasonable assurance that the future lease payment amounts for non-cancellable operating leases are calculated correctly. (Recommendation 20-04)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The IRS agreed with this recommendation and stated that the CFO organization will update policies and procedures to include additional instructions needed to calculate the future lease payments due on the non-cancelable leases with terms greater than one year and will also create an automated calculation to determine the number of remaining months of lease payments.

Recommendation: The Director of the Federal Insurance Office should publicly communicate information about when it is considering certifying an event as an act of terrorism under TRIA. (Recommendation 1)

Agency: Department of the Treasury: Office of the Under Secretary for Domestic Finance: Office of the Assistant Secretary for Financial Institutions: Office of Financial Institutions Policy: Federal Insurance Office
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Federal Insurance Office should document an agreement with DHS about DHS's role, and how the agencies share information, during the process of certifying an event as an act of terrorism under TRIA. (Recommendation 2)

Agency: Department of the Treasury: Office of the Under Secretary for Domestic Finance: Office of the Assistant Secretary for Financial Institutions: Office of Financial Institutions Policy: Federal Insurance Office
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Federal Insurance Office should document an agreement with DOJ about DOJ's role, and how the agencies share information, during the process of certifying an event as an act of terrorism under TRIA. (Recommendation 3)

Agency: Department of the Treasury: Office of the Under Secretary for Domestic Finance: Office of the Assistant Secretary for Financial Institutions: Office of Financial Institutions Policy: Federal Insurance Office
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Federal Insurance Office should communicate to insurers in writing how it would utilize policyholder retention amounts in calculating "insurance losses" and "insured losses" in determining the program certification threshold, trigger, and cap, as applicable. (Recommendation 1)

Agency: Department of the Treasury: Office of the Under Secretary for Domestic Finance: Office of the Assistant Secretary for Financial Institutions: Office of Financial Institutions Policy: Federal Insurance Office
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should determine whether Treasury's current improper payment root cause analysis provides sufficiently relevant information that can be used as a basis for proposed corrective actions in reducing EITC improper payments and, if not, update the analysis using more timely data to ensure their reliability for identifying root causes of EITC improper payments. (Recommendation 5)

Agency: Department of the Treasury: Office of the Secretary
Status: Open

Comments: In commenting on our draft report, Treasury stated that each year it indicates in its corrective action plan that IRS will continue to work with Treasury to develop legislative proposals that will improve refundable credit compliance and reduce erroneous payments.

Recommendation: The Secretary of the Treasury should update Treasury's strategy for addressing the root causes of EITC improper payments to include (1) coordinating with other agencies to identify potential strategies and data sources that may help in determining EITC eligibility and (2) determining whether legislative changes are needed, and developing proposals as appropriate, to help reduce EITC improper payments, such as those related to the inability to authenticate taxpayer eligibility. (Recommendation 6)

Agency: Department of the Treasury: Office of the Secretary
Status: Open

Comments: In commenting on our draft report, Treasury stated that each year it indicates in its corrective action plan that IRS will continue to work with Treasury to develop legislative proposals that will improve refundable credit compliance and reduce erroneous payments. Although Treasury has made certain legislative proposals, it has not made proposals to specifically help address EITC eligibility criteria issues. Additionally, Treasury's strategy does not include identifying and proposing additional legislative changes needed to help reduce EITC improper payments.

Recommendation: The Secretary of the Treasury should take steps to consult with respective sector partner(s), such as the SCC, DHS, and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 10)

Agency: Department of the Treasury: Office of the Secretary
Status: Open

Comments: In written comments provided in January 2020, the Department of the Treasury (Treasury) stated that it agreed with our recommendation. The department noted that it will assess using the identified initiatives and their viability for collecting and reporting sector-wide improvements from the use of the NIST Framework. The department did not provide a timeframe for completing these actions.

Recommendation: The Chief Counsel of the Internal Revenue Service, in coordination with appropriate offices, should identify and document parameters and procedures for applying enhanced collaborative approaches to regulation and other guidance development with IRS Business Operating Divisions. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of August 2020, IRS disagrees with this recommendation and does not plan to take action on it. IRS officials said their Chief Counsel Directives Manual provides sufficient guidance and flexibility to allow for enhanced collaboration when appropriate. However, officials acknowledged that this collaboration was particularly helpful in implementing TCJA provisions and greatly contributed to IRS's successful implementation. By implementing this recommendation, IRS can help ensure that institutional knowledge and beneficial practices from TCJA implementation will be documented and effectively leveraged to support implementation of future time-sensitive or complex tax law changes without restricting IRS's flexibility. Documenting procedures would ensure IRS can retain organizational knowledge and mitigate the risk of having that knowledge limited to a few personnel.

Recommendation: The Commissioner of Internal Revenue should develop a process to accurately and thoroughly capture implementation status of ongoing projects in accordance with Standards for Internal Control in the Federal Government. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of August 2020, IRS disagrees with this recommendation and does not plan to take action on it. IRS officials acknowledged inconsistencies in reports but said these inconsistencies were not detrimental to overall implementation. We maintain that accurately and thoroughly capturing implementation status on ongoing projects would provide accurate information to decision makers and could prevent potential misreporting, mismanagement, or inefficient resource investment in the future.

Recommendation: The Commissioner of Small Business/Self Employed should coordinate with appropriate IRS divisions or offices to identify the costs and benefits of retroactively transcribing taxpayer data resulting from TCJA. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of August 2020, IRS disagrees with this recommendation and does not plan to take action on it. IRS officials said the retroactive transcription of TCJA returns would be a time intensive activity with significant opportunity costs, and that the benefits of retroactive transcription are currently not quantifiable. A high-level analysis of costs and benefits could help IRS management determine what, if any, data would benefit compliance and enforcement efforts. IRS could use readily available existing information (such as the number of returns affected by a certain provision, LB&I and IT cost data on conversion efforts already implemented, or the usefulness of past compliance analytics in similar areas) to inform the analysis. For example, IRS staff are manually reviewing certain forms associated with one TCJA provision for compliance purposes and IRS could use information from this effort (e.g., amount of time and any compliance results) to inform a high-level estimate of costs and benefits.

Recommendation: Based on the costs and benefits identified in recommendation 3, the Commissioner of Small Business/Self Employed should determine which TCJA provisions' data should be converted into a more useful electronic format for compliance and enforcement purposes and work with the appropriate offices to obtain the transcribed data, as appropriate. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of August 2020, IRS disagrees with this recommendation and does not plan to take action on it. IRS officials said that implementing this recommendation would require identifying the costs and benefits, which they do not plan to take action on. However, IRS officials acknowledged that IRS operating divisions and offices make strategic decisions regarding how best to use TCJA-related return data for compliance and enforcement purposes. We believe that converting data in instances where the benefits outweigh the costs would better position IRS to more effectively and efficiently pursue its mission of ensuring taxpayer compliance. For example, in the case of one TJCA provision, because IRS is not collecting information in an easily accessible format, IRS staff are manually reviewing forms to help with compliance efforts.

Recommendation: The Assistant Secretary of Tax Policy should update Treasury's internal guidance to ensure that Treasury's regulatory impact analyses include examination of the distributional effects of revenue changes when regulations influence tax liability. (Recommendation 5)

Agency: Department of the Treasury: Office of the Assistant Secretary of the Treasury (Tax Policy)
Status: Open

Comments: As of August 2020, Treasury disagrees with this recommendation and does not plan to take action on it. Treasury officials said the analyses underlying Treasury's tax regulations have fully complied with the Memorandum of Agreement established with the U.S. Office of Management and Budget (OMB), which focuses on non-revenue effects. We maintain that decisions Treasury and IRS made when developing regulations to implement TCJA could potentially impact tax liability by billions of dollars per year; however, Treasury's internal guidance dictates that these revenue effects should not be included in its economic analyses of the regulations. In some regulations, Treasury has addressed revenue effects in its analyses, but this has not been done consistently. By adjusting its internal guidance to ensure that distributional effects of revenue changes are consistently reflected in its analyses, it would better inform the regulatory decision-making process, while also providing the public with greater transparency.

Recommendation: The Commissioner of Internal Revenue should update the FAQs issued in 2019 to include a statement that the FAQs may serve as a source of general information but cannot be relied upon by taxpayers as authoritative since they are not binding on IRS. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with this recommendation. In an August 2020 letter, IRS stated that the 2019 currency FAQs are illustrative of how longstanding tax principles apply to property transaction and IRS does not take positions contrary to public FAQs. However, if IRS intends the public FAQs on virtual currency to be binding on IRS it could address our recommendation by publishing the FAQs in the Internal Revenue Bulletin. Doing so would render a disclaimer statement unnecessary and would satisfy the intent of the recommendation. We will continue to follow up with IRS on this recommendation and will provide an update if IRS takes action.

Recommendation: The Commissioner of Internal Revenue should take steps to increase third-party reporting on taxable transactions involving virtual currency, which could include clarifying IRS's interpretation of existing third-party reporting requirements under the Internal Revenue Code and Treasury Regulations, or pursuing statutory or regulatory changes. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In August 2020, IRS informed us that IRS's Office of Chief Counsel and the Department of the Treasury are developing guidance that will address third-party reporting on certain taxable transactions involving virtual currency. IRS expects that this guidance will also propose rules to avoid duplicate reporting under other information reporting regimes that may apply to transactions involving virtual currency. We will continue to monitor IRS's efforts to increase third-party reporting on taxable transactions involving virtual currency.

Recommendation: The Commissioner of Internal Revenue should clarify the application of reporting requirements under FATCA to virtual currency. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with this recommendation. In an August 2020 letter, IRS said it intends to focus on developing guidance regarding information reporting on certain virtual currency transactions involving U.S. businesses instead of clarifying the application of reporting requirements under FATCA to virtual currency. IRS stated that additional guidance on FATCA requirements may be appropriate in the future as the workings of foreign virtual currency exchanges become more transparent over time. We found that many virtual currency stakeholders were uncertain about how, if at all, FATCA requirements apply to virtual currency and would benefit from clarifications to the guidance. We will continue to follow up with IRS on this recommendation and will provide an update if IRS takes action.

Recommendation: The Director of FinCEN, in coordination with IRS as appropriate, should make a statement about the application of foreign account reporting requirements under the Bank Secrecy Act to virtual currency readily available to the public. (Recommendation 4)

Agency: Department of the Treasury: Financial Crimes Enforcement Network
Status: Open

Comments: FinCEN agreed with this recommendation. When we can confirm that FinCEN has taken action we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should designate a dedicated entity to provide oversight of agency-wide efforts to detect, prevent, and resolve business IDT, consistent with leading practices. This may involve designating one business unit as a lead entity or leveraging cooperative relationships between business units to establish a business IDT leadership team. This entity should have defined responsibilities and authority for managing fraud risk. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: In January 2020, IRS agreed to designate a dedicated entity to provide oversight of agency-wide business IDT efforts and stated that it will determine the appropriate oversight structure and scope of authority.

Recommendation: The Commissioner of Internal Revenue should develop a fraud risk profile for business IDT that aligns with leading practices. This should include (1) identifying inherent fraud risks of business IDT, (2) assessing the likelihood and impact of inherent fraud risks, (3) determining fraud risk tolerance, and (4) examining the suitability of existing fraud controls. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: In January 2020, IRS agreed but did not provide details on the actions it plans to take to address the recommendation.

Recommendation: The Commissioner of Internal Revenue should develop, document, and implement a strategy for addressing fraud risks that will be identified in its fraud risk profile. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In January 2020, IRS agreed but did not provide details on the actions it plans to take to address the recommendation.

Recommendation: The Commissioner of Internal Revenue should ensure that IRS collects additional data on business IDT by identifying and implementing new fraud filters consistent with its fraud risk profile. This should include prioritizing IDT filters for tax forms determined to be most at risk based on an analysis of risk tolerances. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In January 2020, IRS agreed but did not provide details on the actions it plans to take to address the recommendation.

Recommendation: The Commissioner of Internal Revenue should identify and implement methods to address delays in resolving business IDT cases due to correspondence-based authentication. This could involve using different methods for taxpayer authentication based on the risk level of the return. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. In January 2020, IRS stated that it will complete an analysis of other authentication methods.

Recommendation: The Commissioner of Internal Revenue should establish customer service-oriented performance goals for resolving business IDT cases. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS neither agreed nor disagreed with our recommendation to establish customer service-oriented performance goals for resolving business identity theft cases. In January 2020, IRS stated that it will review its customer service-oriented performance goals and modify them, as warranted, to address the resolution of business identity theft cases. Doing so would meet the intent of our recommendation.

Recommendation: The IRS Commissioner should develop specific instructions within the Internal Revenue Manual, the Nonqualified Deferred Compensation Audit Techniques Guide, or other IRS training material to aid examiners in obtaining and evaluating information they can use to determine whether there exists a restricted period with respect to a company with a single-employer defined benefit plan and if a company with a single-employer defined benefit plan has, during a restricted period, set aside assets for the purpose of paying deferred compensation under an executive retirement plan. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS stated that they would review and consider developing further specific instructions within the Internal Revenue Manual, the Nonqualified Deferred Compensation Audit Techniques Guide or other IRS training material to aid examiners. We believe that implementing this recommendation will help ensure that IRS is aware of when companies with at-risk single-employer defined benefit plans are reporting assets set aside to pay deferred compensation to key executives while in a restricted period as income for those employees

Recommendation: The Commissioner of Internal Revenue should assess options for updating Publications 590-A and 590-B to either include more information or direct taxpayers to other resources for IRA owners with investments in unconventional assets. Such information could include: storage requirements for IRA investments in certain precious metals; valuation methods for hard-to-value IRA assets; the Department of Labor's process for granting exemptions to IRA prohibited transactions rules; and IRA investments with the potential to create unrelated business income tax liabilities. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue, building on forthcoming compliance research using new IRA asset data, should evaluate the feasibility of requiring disclosure for high-risk IRA asset types associated with abusive schemes as transactions of interest. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should develop resources (such as training materials or job aids) for Small Business/Self-Employed examiners conducting IRA owner audits that explain how IRAs with unconventional assets can generate unrelated business income tax liability, and how examiners can refer cases to unrelated business income experts in IRS for assistance. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should make publicly available, such as on its website, a list of tax topics considered out of scope for CSRs to answer on the telephone, as well as include references for how and where to find information about these topics. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and said it would make out-of-scope topics more readily available for taxpayers.

Recommendation: The Commissioner of Internal Revenue should reconcile authority and implement procedures for routinely reviewing the English versions of IRS's most commonly used vital tax products and web pages to ensure that information is included in commonly encountered languages about where taxpayers with LEP can obtain the translated content. If such content is not translated, the products and web pages should include information about where taxpayers with LEP can obtain language assistance from IRS. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS neither agreed nor disagreed with this recommendation. In commenting on the draft report, IRS said the recommendation affects multiple stakeholders and IRS is evaluating the recommendation and actions for implementation. IRS said it would provide additional details at a later time.

Recommendation: The Commissioner of Internal Revenue should reconcile authority and implement procedures for routinely reviewing its multilingual web pages to effectively prevent, or detect and correct, errors such as incorrect or outdated information. For example, these procedures could call for the divisions to work with the Linguistics, Policy, Tools, & Services (LPTS) section whenever the English version of translated content is updated. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation, saying each business unit would be required to work with the Linguistic Policy, Tools and Services Section whenever the English version of translated content is updated. IRS also said interpreting the Form 1040 into different languages would be a major accomplishment that it wishes to achieve in the near future.

Recommendation: The Commissioner of Internal Revenue should conduct the four-factor assessment of its language services to persons with LEP for its most commonly used vital tax products to determine (1) which products should be translated and into what languages, and (2) what interpretation assistance will be provided to arrive at the appropriate mix of translation and interpretation services. IRS should document these assessments, including the determinations it made, and take action as appropriate based on these assessments. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS neither agreed nor disagreed with this recommendation. In commenting on the draft report, IRS said the recommendation affects multiple stakeholders and IRS is evaluating the recommendation and actions for implementation. IRS said it would provide additional details at a later time.

Recommendation: The Commissioner of Internal Revenue should collect and use employee input on the strengths and weaknesses of its customer service training, including on whether training is effective in improving CSRs' performance, to inform changes to its training program and strategy under the Taxpayer First Act. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and said it would review the employee training evaluation process to determine what steps can be taken to improve training, such as making certain evaluations mandatory for employees and updating the surveys with more focused questions in order to get more substantial feedback.

Recommendation: The Commissioner of Internal Revenue should direct the Wage and Investment division to develop and implement a strategy, in collaboration with its strategic workforce planning initiative, for the efficient use of overtime. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation.

Recommendation: The Commissioner of Internal Revenue should further assess the increase in "system downtime" and identify possible solutions to mitigate any problems and reduce system downtime. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In commenting on the draft report, IRS said it completed a further assessment after our audit and identified potential contributing factors. IRS said it implemented changes to the call center environment and was updating the Customer Service Representative technology platform to further improve system availability.

Recommendation: The Commissioner of Internal Revenue should perform regular monitoring of fluctuations in system downtime charges, such as increases overall or by specific units, to determine what, if any, factors are interrupting CSRs' work. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS said it agreed with this recommendation and would monitor the system downtime reported by the Customer Service Representatives (CSR) in Customer Account Services. In commenting on the draft report, IRS said it had implemented changes to the call center environment and was updating the CSR technology platform to further improve system availability.

Recommendation: The Commissioner of the IRS should ensure that information is collected on taxpayers' experiences with all online services and the extent to which the services are meeting taxpayers' needs. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In June 2020, IRS reported that it intends to "implement new surveys to better capture customer experience data" with its online services. To this end, IRS in March 2020 published a notice in the Federal Register stating that it intends to seek approval from the Office of Management and Budget (OMB) on collecting information in a manner consistent with section 280 of OMB's Circular A-11 intended to improve the customer experience with federal services. Among other requirements, section 280 of Circular A-11 directs agencies to collect feedback from customers. IRS states that it intends to complete this process and fully address the recommendation by the end of calendar year 2021. We will continue to monitor IRS's efforts to address this recommendation.

Recommendation: The Commissioner of the IRS should ensure that information collected on taxpayers' experiences with online services is summarized in the document serving as IRS's performance plan and report. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In June 2020, IRS reported that it is working to "implement new surveys to better capture customer experience data" and intends to publish this information on Performance.gov. Further, IRS states that it "will evaluate and identify the most appropriate medium each year for publication of data based on statutory and other requirements" and expects to fully address this recommendation by November 15, 2022. Section 280 of the Office of Management and Budget's Circular A-11 states that in addition to publishing this information on Performance.gov, agencies should also summarize this information in performance plans and reports. We will continue to monitor IRS's efforts to address this recommendation.

Recommendation: The Commissioner of the IRS should direct the Director of OLS and the Chief Research and Analytics Officer to work together to analyze the potential effects of online services on taxpayer burden. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In June 2020, IRS reported two planned actions to address this: 1) IRS will conduct comparative analyses of the current Individual Taxpayer Burden and Taxpayer Compliance Burden surveys and expects to complete this by September 30, 2020; and 2) IRS will implement new customer experience surveys to better capture comparative data relating to user perceptions of the ease and effectiveness of both online and traditional interactions and expects to complete this by the end of calendar year 2021. We will continue to monitor IRS's efforts to address this recommendation.

Recommendation: The Commissioner of the IRS should ensure that taxpayer input is included as an element of IRS's identification and prioritization process for new online services. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. In June 2020, IRS reported that it plans to introduce new survey methods to obtain taxpayer input regarding potential new online services. One specific example IRS provided was testing a new version of the irs.gov satisfaction survey. This new version, which was launched in January 2020, asks respondents what additional online services taxpayers would like and solicits suggestions from taxpayers for improving IRS's online services. IRS stated that it is currently evaluating this new survey method. IRS expects to fully address the recommendation by the end of calendar year 2021. We will continue to monitor IRS's efforts to address this recommendation.

Recommendation: The Commissioner of the IRS should work with relevant officials to set a target to reduce taxpayer burden through the development of new online services. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS did not agree with this recommendation. In June 2020, IRS stated that it will analyze the effect of online services on taxpayer burden in response to recommendation number 3 of this report. However in regards to setting a target, IRS reiterated its view that its "taxpayer burden measurement methodology is not designed to evaluate the effect of specific online services or web site enhancements." Further, IRS states that changes in tax policy (e.g., the Tax Cuts and Jobs Act of 2017) can affect taxpayer burden and it believes other factors, such as ease of use of online services, are more important to the taxpayer experience. Our report recognized that it may take time for the relevant IRS offices to review how online services may be affecting taxpayer burden. However, we continue to believe that this recommendation has merit because IRS has previously stated that it expects online services to reduce taxpayer burden, thereby contributing to one of IRS's strategic goals. Since IRS has already stated it plans to analyze the effect of online services on taxpayer burden in response to recommendation number 3, we believe it would be relatively easy for IRS to use the results of that analysis to set a more specific goal. For example, IRS in its June 2020 update refers to the time taxpayers spend using online services. A potential research question could be the extent to which taxpayers are more efficiently completing tasks using IRS's online services as IRS makes improvements to these services. We will continue to monitor IRS's efforts to address this recommendation.

Recommendation: The Commissioner of the IRS should direct the Chief Information Officer and the Director of OLS to ensure that planned future capabilities of digital communication platforms are tested or piloted before deployment with a particular focus on mitigating the risks that were identified in prior pilots of digital communication services, such as challenges in establishing common objectives and enrolling taxpayers. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In June 2020, IRS reported that it will apply multiple user preference and usability testing methods to the design of Taxpayer Digital Communications. For example, IRS said it surveyed visitors to IRS.gov about their views towards digital communications in the winter of 2019-2020 and in March 2020 conducted remote testing sessions with taxpayers to obtain feedback on two possible design options. IRS says additional testing may be done and expects to fully address this recommendation by November 30, 2020. We will continue to monitor IRS's efforts to address this recommendation.

Recommendation: The Commissioner of the IRS should direct the Commissioner of W&I to work with the Director of OLS to ensure that future decisions regarding whether to renew the Free File agreement incorporate findings from a comprehensive examination of the benefits and costs of the agreement as it relates to long term plans for IRS's online services, including plans to file amended returns electronically. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: Our report identified IRS's pledge to "not enter the tax preparation software and e-filing services marketplace" as a potential cost of IRS's agreement with Free File, Inc. to provide services to eligible taxpayers. Shortly after our report was issued, the Commissioner of the Wage and Investment Division signed on December 23, 2019 an addendum to the most recent agreement between IRS and Free File, Inc. which among other provisions struck the language prohibiting IRS from offering its own online filing services. Under the terms of the addendum, companies participating in Free File, Inc. will continue to provide services to eligible taxpayers subject to some new requirements, such as a prohibition on companies excluding their services from internet search engines and surveying a sample of taxpayers about their experiences. The agreement between IRS and Free File, Inc. remains scheduled to expire in October 2021. While the deletion of the language prohibiting IRS from offering its own online filing services removes a cost for IRS, our recommendation was for any future renewal of the agreement to be based on a comprehensive examination of the benefits and costs of the agreement as it relates to IRS's plans to expand online services. IRS agreed with our recommendation. In June 2020, IRS said that it "would continue to coordinate with appropriate stakeholders to assess the costs and benefits derived from the Free File agreement and incorporate findings in future agreements". In addition, several new developments have occurred related to Free File: 1) IRS used Free File, Inc. in the spring of 2020 to develop a website to identify Americans who were not required to file a 2019 tax return and may be eligible for economic impact payments pursuant to the Coronavirus Aid, Relief, and Economic Security Act; 2) IRS announced in May 2020 that taxpayers will soon be able to electronically file an amended return using tax software and IRS's announcement of this planned capability refers to its agreement with Free File, Inc.; and 3) one of the ten companies which had been participating in Free File, Inc. announced it plans to leave in October 2020. We will continue to monitor IRS's efforts to address the recommendation.

Recommendation: The Secretary of the Treasury should ensure that the Office of Foreign Assets Control provides its partner agencies more specific guidance regarding Kingpin Act–related expenditure data to improve the consistency of data submitted by these agencies. This could include, for example, how agencies account for expenditures that support Kingpin Act investigations when they are not the lead and for what types of activities resource expenditure data are required. (Recommendation 1)

Agency: Department of the Treasury: Office of the Secretary
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that the Office of Foreign Assets Control discloses information about limitations in the consistency and reliability of the agency expenditure data in its annual reports to Congress. (Recommendation 2)

Agency: Department of the Treasury: Office of the Secretary
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Comptroller of the Currency should, in coordination with the other federal banking regulators, and with input from BSA/AML examiners and other relevant stakeholders, take steps to improve examiners' ability to evaluate the effectiveness of banks' BSA/AML compliance controls with respect to money transmitter accounts. Steps may include providing updates to examination procedures, examiner training, or a combination of methods. (Recommendation 2)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that information about the 90-day delay for displaying DOD procurement data on USAspending.gov is transparently communicated to users of the site. Approaches for doing this could include prominently displaying this information on the DOD agency profile page, in the unreported data section, and in search results that include DOD data. (Recommendation 1)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that information regarding how the Primary Place of Performance Address for Medicare payment data are reported is transparently communicated to the users of USAspending.gov. (Recommendation 2)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should undertake a risk assessment of tax-exempt entity Form 8886-T filings. Based on the findings of the risk assessment, IRS should then determine whether steps are needed to increase compliance, such as, for example, through increased outreach to tax-exempt entities or assessment of nonfiling penalties. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. In a July 2020 letter to GAO, IRS said the Tax Exempt/Government Entities division is documenting the process for reviewing Form 8886-T filings and analyzing whether all tax-exempt entities that should file Form 8886-T are filing it as required. As of August 2020, IRS officials expected to complete their analysis in November 2020. GAO continues to monitor IRS's progress.

Recommendation: The Commissioner of Internal Revenue should link audit data on abusive tax schemes involving tax-exempt entities across operating divisions and use the linked data to assess emerging issues and develop policy responses. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In July 2020, IRS officials said they were working to determine if database coding on abusive schemes involving tax-exempt entities can be added across the agency's audit divisions. As of August 2020, IRS officials said this work will be done by June 2021. GAO continues to monitor IRS's progress.

Recommendation: The Commissioner of Internal Revenue should test the ability of the Return Inventory Classification System to facilitate analysis and monitoring of audit data across the operating divisions and to support the IRS's enforcement objectives. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In a July 2020 letter 2020, IRS officials said they agreed with this recommendation and have begun to analyze its feasibility. IRS's plans include determining if the Return Inventory Classification System (RICS) could support analysis and monitoring of audit data across IRS's operating divisions. To that end, IRS plans to host cross-divisions meetings to determine what data can be shared and how the data can be monitored with RICS. As of August 2020, IRS expected to complete its analysis by March 2022. GAO continues to monitor IRS's progress.

Recommendation: The Commissioner of Internal Revenue should use existing data analytic tools to further mine Form 8886 and Form 8918 data, which could be used to find audit leads on tax-exempt entity involvement in potentially abusive tax schemes. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In a July 2020 letter, IRS said it will explore the use of existing data analytic tools to mine data and to identify undiscovered exempt-entity involvement in abusive tax schemes. As part of that effort, IRS plans to continue to evolve its text processing. IRS also plans to determine if optical character recognition can be used to identify keywords in disclosure reports that could help determine whether a tax-exempt entity was a party to a reportable transaction that warrants further investigation and whether that would be productive. As of August 2020, IRS expected to complete its analysis by March 2022. GAO continues to monitor IRS's progress.

Recommendation: The Commissioner of Internal Revenue should develop guidance to help managers ensure referrals about abusive schemes involving tax-exempt entities are made across operating divisions. This could be accomplished by, for example, adopting specific guidance for audit managers to look for referral accuracy in their reviews of case closings. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In a July 2020 letter, IRS said it agreed with the recommendation and will develop guidance to assist mangers across the agency's divisions to ensure referrals involving tax-exempt entities are directed to the Tax Exempt/Government Entities (TE/GE) division. The letter also said IRS plans to provide training across examination units to instruct staff to make referrals appropriately and correctly. IRS expects to complete the TE/GE guidance and training material by June 2021. As of August 2020, TE/GE officials said the other examination divisions are expected to incorporate the forthcoming procedural guidance in their work processes by 2022. GAO continues to monitor IRS's progress.

Recommendation: The Secretary of the Treasury should ensure that the Fiscal Assistant Secretary enhances existing procedures for Treasury management to perform additional reviews for restatements, reclassifications, and adjustments to beginning net position to reasonably assure that they are properly supported and accurately reported. (Recommendation 2)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), we determined that this recommendation remains open. Treasury enhanced its procedures to include additional management reviews, particularly the Financial Reports and Advisory Division Director, for restatements, reclassifications, and adjustments to beginning net position. Although FRAD took steps to enhance its review procedures, the additional review did not prevent FRAD from including descriptions in the draft CFS that were not supported by entity financial statements or from excluding some information from the CFS notes. Further steps are needed to define procedures to ensure consistent and accurate treatment of restatements, reclassifications, and adjustments to beginning net position in the CFS. We will follow-up on progress made by Treasury as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should ensure that the Fiscal Assistant Secretary, working in coordination with the Controller of OMB, establishes effective processes and procedures to reasonably assure that appropriate information regarding legal contingency losses is reported in the CFS. (Recommendation 4)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), we determined that this recommendation remains open. Treasury and OMB (1) increased guidance to federal entities in the Treasury Financial Manual section 2-4700; (2) included an illustrative Contingent Loss Table in OMB Circular No. A-136 for agencies to use as guidance when reporting probable and reasonably possible losses; (3) provided guidance to agencies through monthly Central Reporting Team (CRT) meetings with the agencies' financial reporting staff and at the Government Financial Management Conference; (4) communicated regularly with Department of Justice officials regarding the preparation of the government-wide legal representation letter; and (5) increased the number of Treasury staff performing the legal letter analysis. However, we noted inconsistencies among the significant component entities' financial statement note disclosures, management schedules, and legal representation letters, and the legal contingency loss information reported in the CFS, as well as inconsistencies between entities' year-end management schedules/legal representation letters and the final government-wide legal representation letter. We will follow-up on progress made by Treasury as part of our fiscal year 2020 CFS audit.

Recommendation: The Director of FinCEN, after consulting with the Commodity Futures Trading Commission (CFTC), should consider prioritizing the inclusion of the primary SRO conducting BSA examinations in the futures industry in the Bank Secrecy Act Advisory Group (BSAAG) on a more consistent basis and also making the primary futures industry association a concurrent member. (Recommendation 1)

Agency: Department of the Treasury: Financial Crimes Enforcement Network
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of FinCEN, after consulting with CFTC, should take steps to explore providing direct BSA data access to the National Futures Association. (Recommendation 2)

Agency: Department of the Treasury: Financial Crimes Enforcement Network
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of FinCEN should review options for FinCEN to more consistently and publicly provide summary data on the usefulness of BSA reporting. This review could either be concurrent with FinCEN's BSA value study or through another method. (Recommendation 3)

Agency: Department of the Treasury: Financial Crimes Enforcement Network
Status: Open

Comments: As of August 2020, FinCEN officials told us that they began to implement a strategy to communicate the results of its BSA Value Study (completed in April 2020) and more generally publicize statistics on the value that BSA reporting provides to industry and the public. According to FinCEN officials, they have made some progress in implementing the communication strategy, including briefing key public and private sector stakeholders and developing fact sheets, videos and other materials for eventual public release, and expect to complete the initial phase of the communication plan by the end of 2020.

Recommendation: The Director of FinCEN should review options for establishing a mechanism through which law enforcement agencies may provide regular and institution-specific feedback on BSA reporting. Options should take into consideration providing such feedback to cover different types of financial institutions and those with significant financial activity. This review could either be part of FinCEN's BSA value study or through another method. (Recommendation 4)

Agency: Department of the Treasury: Financial Crimes Enforcement Network
Status: Open

Comments: According to FinCEN officials, it will use measures outlined in response to Recommendation 3 and information gathered from the BSA Value Study to develop a specific action plan to better collect data for FinCEN and its law enforcement and other partners in a way that allows them to communicate more consistent feedback to reporting entities, and address the gaps and recommendations from the study. FinCEN anticipates the development and approval of the action plan by the end of 2020.

Recommendation: The Secretary of the Treasury, as Chairperson of the Boards of Trustees, should work with the other trustees to take steps—in consultation with the chief actuaries of SSA and CMS—to improve the management of the report development schedule in order to provide the Trustees reports to Congress by the statutory deadline. These steps could include regularly updating the schedule using actual progress and archiving the final iteration of the schedules. (Recommendation 1)

Agency: Department of the Treasury
Status: Open

Comments: Treasury agreed with the recommendation and said they would work with the other trustees to take steps to improve the management of the report development schedule.

Recommendation: The Secretary of the Treasury, as Chairperson of the Boards of Trustees, should work with the other trustees to establish a policy to inform Congressional committees of jurisdiction when the trustees determine that the reports are expected to miss the issuance deadline. This outreach should include 1) the factors that are contributing to delays, and 2) the reports' expected issuance dates. (Recommendation 2)

Agency: Department of the Treasury
Status: Open

Comments: Treasury agreed with this recommendation. The agency said it would explore the potential for a policy to inform Congressional committees of jurisdiction when the trustees determine that the reports are expected to miss the April 1 deadline.

Recommendation: The Secretary of the Treasury should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 29)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: The Department of the Treasury did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the department has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of the Treasury should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 30)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: The Department of the Treasury did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the department has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of the Treasury should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 31)

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the department has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Commissioner of Internal Revenue, in consultation with the Secretary of Labor, should establish a formal means, such as a memorandum of understanding or other mechanism, to support and guide DOL's and IRS's collaborative efforts to oversee IRA prohibited transaction exemptions. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and said it has met with DOL to formalize collaboration on exemptions from prohibited transaction treatment in IRAs. DOL agreed to contact IRS within 25 days of DOL receiving an IRA prohibited transaction exemption application to determine if there are any Internal Revenue Code issues. To avoid any disclosure concerns, DOL will not identify the applicant at that time. This new process will be reflected in DOL's forthcoming internal procedure manual for the prohibited transaction exemption process.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism to reasonably assure that all the journal entries recorded in the Schedules of the General Fund general ledgers can be readily identified and traced, such as through a unique identifier, to determine the effect of a transaction on all applicable general ledger accounts and line items of the Schedules of the General Fund, including the budget deficit. (Recommendation 1)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism to reasonably assure that payment transactions recorded in the Schedules of the General Fund general ledgers capture all of the key information needed, including payment schedules if applicable, to readily trace transactions to the information certified by the federal agency. (Recommendation 2)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement additional reporting requirements with related guidance for federal agencies that better align with the General Fund financial reporting objectives and enable Fiscal Service to capture the effect of a transaction on all applicable general ledger accounts and line items of the Schedules of the General Fund, including the budget deficit. (Recommendation 3)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: We recommend that the Commissioner of Fiscal Service develop and implement a process that would enable Fiscal Service to obtain the information necessary to effectively assess the effect of the Statement of Difference on the Schedules of the General Fund for those federal agencies that have not implemented the Central Accounting and Reporting System. (Recommendation 4)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: We recommend that the Commissioner of Fiscal Service design and implement procedures to evaluate risks and monitor internal controls over financial reporting relevant to the Schedules of the General Fund. (Recommendation 5)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism for evaluating agencies' use of BETCs based on the enhanced guidance. (Recommendation 7)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should design and implement procedures to (1) obtain and review supporting documentation for reported activity included on Agency Submission Forms and (2) assess the overall completeness of federal agency activity reported on Agency Submission Forms. (Recommendation 8)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should design and implement procedures to periodically review all active Treasury accounts to determine whether they are valid and the related General Fund account balances are consistent with federal agency records. (Recommendation 10)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should enhance current procedures for reviewing negative balances to include Treasury accounts with indefinite periods of availability. (Recommendation 11)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: We recommend that the Commissioner of Internal Revenue ensure that the appropriate IRS officials implement the necessary actions to effectively address the two primary causes of the significant deficiency in IRS's internal control over unpaid assessments. These actions should (1) resolve the system limitations affecting the recording and maintenance of reliable and appropriately classified unpaid assessments and related taxpayer data to support timely and informed management decisions, and enable appropriate financial reporting of unpaid assessment balances throughout the year, and (2) identify the control deficiencies that result in significant errors in taxpayer accounts and implement control procedures to routinely and effectively prevent, or detect and correct, such errors. (Recommendation 19-01)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. During fiscal year 2019, IRS documented the key management decisions in the design and use of the estimation process. This step should reduce the risk that IRS may perform sampling procedures inconsistent with management intent or plans. Continued management commitment and sustained efforts are necessary to build on the progress made to date and to fully address IRS's remaining unresolved issues concerning the management and reporting of unpaid assessments. We will assess IRS's progress in addressing these issues during our audit of IRS's fiscal year 2020 financial statements.

Recommendation: We recommend that the Commissioner of Internal Revenue ensure that the appropriate IRS officials document and implement a formal comprehensive strategy to provide reasonable assurance concerning its nationwide coordination, consistency, and accountability for internal control over key areas of physical security. This strategy should include nationwide improvements for (1) coordinating among the functional areas involved in physical security; (2) implementing and monitoring the effectiveness of physical security policies, procedures, and internal controls; and (3) ongoing communication in identifying, documenting, and taking corrective action to resolve underlying control issues that affect IRS's facilities. (Recommendation 19-02)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that Facilities Management and Security Services is in the process of developing and documenting a formal, comprehensive strategy. According to IRS officials, this strategy will include different overarching goals, such as improving workforce effectiveness, ensuring appropriate monitoring functions and employee accountability, and improving coordination and communication of policies and procedures. IRS plans to complete the formal, comprehensive strategy during fiscal year 2020 and finalize the implementation of this strategy by March 2021.

Recommendation: The Commissioner of Internal Revenue should ensure that appropriate IRS officials determine the reasons staff did not consistently comply with IRS's existing requirement for maintaining an emergency contact list at all of its facilities and, based on this determination, establish a process to enforce compliance with the requirement. (Recommendation 19-03)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. During fiscal year 2019, IRS used a questionnaire survey and obtained feedback from security section chiefs and physical security specialists to determine the reasons staff did not consistently comply with IRS's existing requirement to maintain an emergency contact list at all IRS facilities. IRS officials stated that during fiscal year 2020, the Facilities Management and Security Services will establish a process to better enforce compliance with the requirement based on the results of the feedback obtained.

Recommendation: The Commissioner of Internal Revenue should ensure that appropriate IRS officials establish and implement policies and procedures requiring that corrective actions be documented in the Alarm Maintenance and Testing Certification Report for malfunctioning alarms identified in the annual alarm tests. (Recommendation 19-04)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that during fiscal year 2020, the Facilities Management and Security Services will (1) update the Internal Revenue Manual to reflect the requirement to use the Alarm Maintenance and Testing Certification Report to document alarm testing results, including any malfunctioning alarms and related corrective actions taken, as appropriate;, and (2) review the Alarm Maintenance and Testing Certification Report Form and incorporate any additional instructions and fields to document the specific alarms tested, the testing results, and related corrective actions taken, as appropriate.

Recommendation: The Commissioner of Internal Revenue should ensure that the appropriate IRS officials establish and implement policies or procedures, or both, to provide reasonable assurance that the video surveillance systems at all IRS facilities record activity at the correct time and are properly secured. The policies or procedures should include periodic checks and adjustments, as needed, as part of the annual service and maintenance of security equipment and systems. (Recommendation 19-05)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that during fiscal year 2020, the Facilities Management and Security Services will develop, document, and implement policies or procedures, or both, to provide reasonable assurance of the accuracy and physical security of the video surveillance systems at all IRS facilities by including periodic checks and adjustments, as needed, as part of the annual service and maintenance of security equipment.

Recommendation: We recommend that the Commissioner of Internal Revenue ensure that the appropriate IRS officials update and implement policies or procedures, or both, to clarify (1) who is responsible for conducting the annual review of the visitor access logs, (2) the date by which the review is to be conducted, and (3) how the review should be documented. (Recommendation 19-06)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that during fiscal year 2020, the Information Technology and the Criminal Investigation organizations will update and implement their policies or procedures, or both, to clarify (1) who is responsible for conducting the annual review of the visitor access logs, (2) the date by which the review is to be conducted, and (3) how the review should be documented.

Recommendation: We recommend that the Commissioner of Internal Revenue ensure that the appropriate IRS officials (1) identify the reason IRS's policies and procedures related to the transmittal forms were not always followed and (2) design and implement actions to provide reasonable assurance that SB/SE units comply with these policies and procedures. (Recommendation 19-07)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that the Small Business/Self-Employed (SB/SE) Field Collection organization determined that the reasons the policies and procedures were not always followed were either a lack of understanding of the requirements or a lack of consistency in adhering to them. In order to address this, in October 2019, Field Collection distributed a memorandum to its area directors, territory managers, and group managers, reminding them of the required remittance processing procedures, emphasizing the importance of following the procedures, and requesting that they distribute the information in the memorandum within their organization. IRS officials stated that the memorandum will help assure that SB/SE Field Collection units comply with the applicable policies and procedures. Since this memorandum was issued after the end of our fiscal year 2019 audit, we will review the implementation of this action during our fiscal year 2020 audit. Further, IRS officials stated that during fiscal year 2020, the SB/SE Examination organization will identify the reason that IRS's policies and procedures for transmittal forms were not followed, and based on this, it will add guidance to the applicable Internal Revenue Manual sections to clarify and supplement the service-wide guidance for the appropriate control, monitoring, and review of the forms used to transmit packages containing personally identifiable information.

Recommendation: We recommend that the Commissioner of Internal Revenue ensure that the appropriate IRS officials update and implement policies or procedures, or both, to clearly define the roles and responsibilities of second-level managers and IDRS security account administrators for validating the information on USR designation forms, including specifying how the information should be validated. (Recommendation 19-08)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. During fiscal year 2019, the Information Technology (IT) organization updated IRS's Integrated Data Retrieval System (IDRS) security policy contained in the Internal Revenue Manual to ensure that the IDRS account administration process complies with IRS's personnel security policy regarding background investigation completion dates. In addition, IRS officials stated that by November 2020, the IT organization will update the Unit Security Representative (USR) designation form, as well as policies and procedures, to clearly define the roles and responsibilities of second-level managers and IDRS security account administrators for validating the information on USR designation forms, including how the information should be validated.

Recommendation: We recommend that the Commissioner of Internal Revenue ensure that the appropriate IRS officials update and implement procedures to clearly specify the tax refund data elements that PVS COs are required to verify before certifying the tax refunds in SPS. (Recommendation 19-09)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2019, the Information Technology organization updated its standard operating procedures to clearly specify the tax refund data elements that the Processing Validation Section Certifying Officers are required to verify before certifying the tax refunds in the Secure Payment System. Since IRS completed this action after we had already performed our fiscal year 2019 testing related to the certification of tax refunds, we will evaluate IRS's actions to address this recommendation during our fiscal year 2020 audit.

Recommendation: The Commissioner of Internal Revenue should ensure that the appropriate IRS officials establish and implement a review process to provide reasonable assurance that the RSNs that Data Conversion key entry operators enter into the ISRP system and post to the master files are correct. (Recommendation 19-10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS actions to address this recommendation are ongoing. IRS officials stated that during fiscal year 2020, the Wage & Investment organization will establish and implement a review process to provide reasonable assurance that the Refund Schedule Numbers on manual refund forms are transcribed accurately into the Integrated Submission and Remittance Processing system.

Recommendation: The Commissioner of Internal Revenue should ensure that the appropriate IRS officials implement a validity check in the ISRP system to confirm that RSNs that Data Conversion key entry operators enter into the system have the required 14 digits. (Recommendation 19-11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS officials stated that the Wage and Investment organization agrees that developing and implementing a Unified Work Request for programming changes is needed to systemically validate the refund schedule numbers input into the Integrated Submission and Remittance Processing system; however, IRS officials indicated that the organization is unable to commit to implementing a corrective action because of budgetary constraints. As a result, IRS will place this recommendation on hold until funds are available.

Recommendation: We recommend that the Commissioner of Internal Revenue ensure that the appropriate IRS officials update and implement policies or procedures, or both, to require that reviewers follow up with tax examiners to verify the errors that tax examiners made in working on cases related to suspicious or questionable tax returns are corrected. (Recommendation 19-12)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that by April 2020, IRS will update and implement policies or procedures, or both, requiring that reviewers follow up with tax examiners to verify that the errors tax examiners made in working a case related to suspicious or questionable tax returns are corrected.

Recommendation: The Commissioner of Internal Revenue should develop a governance structure or other form of centralized leadership, such as a steering committee, to coordinate all aspects of IRS's efforts to protect taxpayer information while at third-party providers. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: In its initial response to our draft report, IRS disagreed with this recommendation. In November 2019, IRS said that it agreed with the intent of the recommendation, but did not agree to implement it, citing the need for additional explicit authority to establish security requirements for the information systems of paid preparers and others who electronically file. IRS reported that to effectively establish data safeguarding policies and implement strategies enforcing compliance with those policies, a centralized leadership structure requires the statutory authority that clearly communicates the authority of the IRS to do so. Without such authority, implementing the recommendation would be an inefficient, ineffective, and costly use of resources, according to IRS. We disagree that convening a governance structure or other centralized form of leadership would require additional statutory authority or be inefficient, ineffective, and costly. As discussed in the report, IRS has seven different offices across the agency working on information security-related activities that could benefit from centralized oversight and coordination, such as updating existing standards, monitoring Authorized e-file Provider program compliance, and tracking security incident reports.

Recommendation: The Commissioner of Internal Revenue should modify the Authorized e-file Provider program's requirements to explicitly state the required elements of an information security program as provided by the FTC Safeguards Rule. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In its initial response to our draft report, IRS disagreed with this recommendation. In November 2019, IRS said it agreed with this recommendation and would update IRS Publication 1345, Handbook for Authorized IRS e-File Providers of Individual Income Tax Returns, to include security elements that are consistent with the FTC Safeguards Rule. IRS plans to update the publication by November 2020.

Recommendation: The Commissioner of Internal Revenue should require that all tax software providers that participate in the Authorized e-file Provider program follow the subset of NIST Special Publication 800-53 controls that were agreed upon by the Security Summit participants. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In its initial response to our draft report, IRS disagreed with this recommendation. In November 2019, IRS stated it was in agreement with the intent of this recommendation; however, IRS does not plan to implement it without additional statutory authority to require Authorized e-file Provider Program participants to comply with the NIST Special Publication 800-53. We continue to believe that under IRS's existing authority, IRS has already established some information security requirements for a portion of tax software providers, those that are online providers. IRS has the opportunity to further establish standards for all tax software providers by incorporating the subset of NIST controls into its Authorized e-file Provider program, which would capitalize on the work it has completed with the Security Summit members.

Recommendation: The Commissioner of Internal Revenue should regularly review and update the security requirements that apply to tax software providers and other Authorized e-file Providers. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and in November 2019 said that it will update IRS Publication 1345, Handbook for Authorized IRS e-File Providers of Individual Income Tax Returns, with a formal memorandum to all internal stakeholders during the annual review process. IRS plans to take this action by November 2020.

Recommendation: The Commissioner of Internal Revenue should update IRS's monitoring programs for electronic return originators to include techniques to monitor basic information security and cybersecurity issues. Further, IRS should make the appropriate revisions to internal guidance, job aids, and staff training, as necessary. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In its initial response to our draft report, IRS disagreed with this recommendation. In November 2019, IRS stated it was in agreement with the intent of this recommendation; however, it does not plan to implement it. IRS reported it does not have the statutory authority to establish policy on information security and cybersecurity issues, nor to enforce compliance if noncompliance is observed. Additionally, IRS said that the specialized technical skills required to monitor compliance with information and cybersecurity standards, should statutory authority be granted, would require additional funding to meet those monitoring needs. However, as we reported, IRS already monitors physical aspects of information security, which goes beyond existing Authorized e-file Provider program requirements. Since most individuals now file tax returns electronically, having checks for physical security without comparable checks for cybersecurity does not address current risks, as cyber criminals and fraudsters are increasingly attacking third-party providers, as IRS has noted. We believe that incorporating some basic cybersecurity monitoring into the visits would provide IRS the opportunity to help inform the most vulnerable third-party providers of additional guidance and resources.

Recommendation: The Commissioner of Internal Revenue should conduct a risk assessment to determine whether different monitoring approaches are appropriate for all of the provider types in the IRS's Authorized e-file Provider program. If changes are needed, IRS should make appropriate revisions to the monitoring program, internal guidance, job aids, and staff training, as necessary. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In its initial response to our draft report, IRS disagreed with this recommendation. In November 2019, IRS said it agreed with the intent of this recommendation; however it does not plan to implement it. IRS stated that absent statutory authority and funding, an assessment of the different monitoring approaches is moot. We disagree with this conclusion. As discussed in the report, IRS does not systematically monitor the existing security requirements for online providers, nor does it conduct information security or cybersecurity monitoring for all types of Authorized e-file Providers. We believe that IRS could conduct a risk assessment of its current monitoring program within existing statutory authority and make necessary changes that would provide better assurance that all types of providers are receiving some level of oversight and that IRS is addressing the greatest risk areas appropriately.

Recommendation: The Commissioner of Internal Revenue should standardize the incident reporting requirements for all types Authorized e-file Providers. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and in November 2019 said that it would develop a standardized process for all Authorized e-file Providers to report security incidents to IRS. IRS said it plans to update IRS Publication 1345, Handbook for Authorized IRS e-File Providers of Individual Income Tax Returns, to include this standardized process by November 2020.

Recommendation: The Commissioner of Internal Revenue should document intake, storage, and sharing of the security incident data across IRS offices. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In its initial response to our draft report, IRS agreed with this recommendation. In November 2019, IRS said it agreed with this recommendation with respect to the formal process for tax professionals to report data breaches to the IRS through the Stakeholder Liaison function within the Communications and Liaison organization. According to IRS, procedures are documented in the Data Breach Incident Reporting Instructions that are followed during the intake process. IRS said that upon completion, the breach information is disseminated to other offices within the IRS, depending on the nature of the breach incident reported. According to IRS, all 2018 and 2019 Tax Pro Data Breach incidents remain stored in the Data Breach module of the Return Preparer Database. We will follow up to confirm the information IRS described and determine if these procedures cover all of the IRS offices included in our report.

Recommendation: The Commissioner of the IRS should evaluate options to obtain comprehensive contract payment data above the existing Federal Procurement Data System–Next Generation (FPDS-NG) reporting threshold of $10,000, including assessing the costs and benefits of changing the current threshold for contracts that agencies are required to report to the IRS through Form 8596 information returns to be consistent with the existing reporting threshold for FPDS-NG, determine whether regulatory revisions are necessary, and change the reporting threshold, if appropriate. (Recommendation 12)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS concurred with this recommendation and stated that it is reviewing the potential benefits and costs that would result from implementing this recommendation. We will assess these actions after they have been completed.

Recommendation: The Secretary of Treasury should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 21)

Agency: Department of the Treasury
Status: Open

Comments: The Department of Treasury (Treasury) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its target for server utilization. However, the department had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Secretary of the Treasury should ensure that the CIO of Treasury completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 24)

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury (Treasury) has not yet taken any actions to implement our recommendation. As of May 2020, we have not received any update from the department regarding its implementation of our recommendation. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Secretary of the Treasury should ensure that the CIO of Treasury establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 25)

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury (Treasury) has not yet taken any actions to implement our recommendation. As of May 2020, we have not received any update from the department regarding its implementation of our recommendation. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Commissioner of Internal Revenue should develop a plan to mitigate risks with compliance activities due to the lack of accurate and complete Taxpayer Identification Numbers of U.S. account holders collected from FFIs. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service (IRS) has taken several steps to improve collection of accurate and complete taxpayer identification numbers (TINs) from foreign financial institutions (FFIs). For example, in December 2019, IRS officials said they began identifying 2017 records submitted by FFIs without valid TIN fields or corresponding dates of birth for account holders. IRS also launched a campaign to identify FFIs that did not file a Form 8966 with IRS. While these steps can improve the quality of account data submitted by FFIs, IRS still faces ongoing risks that receiving inaccurate or incomplete TINs pose to efforts to identify and combat taxpayer and FFI noncompliance. Additionally, IRS has not yet developed a plan that elaborates on these risks and identifies steps to mitigate them, as we recommended in April 2019. Without such a strategy, IRS may fail to identify opportunities to adjust compliance programs to better enforce FFI reporting of valid TINs and identify U.S. persons who are not complying with FATCA reporting requirements.

Recommendation: The Commissioner of Internal Revenue should ensure that appropriate business units conducting compliance enforcement and research have access to consistent and complete data collected from individuals' electronic and paper filings of Form 8938 and elements of parent individual tax returns. As part of this effort, the Commissioner should ensure that IRS provides clear guidance to the business units for accessing such data in IRS's Compliance Data Warehouse. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service (IRS) has taken several steps to address this recommendation. According to IRS Information Technology division officials, as of December 2019, they deliver paper and electronically filed Form 8938 data to IRS's Research, Applied Analytics, and Statistics organization on a monthly basis, and makes such data available in the Compliance Data Warehouse (CDW) for use by agency officials. According to Large Business and International (LB&I) Division officials, IRS's enforcement functions also have access to this data. One outcome of this access, according to LB&I officials, is the use of FATCA data in the development of compliance examination leads. However, IRS has not yet developed clear guidance for business units to access relevant data from Forms 8938 and elements of parent individual tax returns in CDW, as we recommended. Without such guidance, CDW users may be less likely to effectively leverage CDW data for examination purposes.

Recommendation: The Commissioner of Internal Revenue should employ a comprehensive plan for managing efforts to leverage FATCA data in agency compliance efforts. The plan should document and track activities over time to
• ensure individuals and FFIs comply with FATCA reporting requirements;
• assess and mitigate data quality risks from FFIs;
• improve the quality, management, and accessibility of FATCA data for compliance, research, and other purposes; and
• establish, monitor, and evaluate compliance efforts involving FATCA data intended to improve voluntary compliance and address noncompliance with FATCA reporting requirements. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2019, IRS's Deputy Commissioner for Services and Enforcement said that IRS disagreed with our April 2019 recommendation. The Deputy Commissioner said that resources that would be dedicated to update a comprehensive plan unique to FATCA-such as the FATCA Compliance Roadmap-are better spent on enforcement activities. The Deputy Commissioner also said that IRS's strategy for FATCA compliance will instead be part of IRS's Large Business & International (LB&I) Division's overall portfolio management strategy. Implementing enforcement activities could increase taxpayers' and foreign financial institutions' (FFIs) compliance with FATCA reporting requirements. While IRS does not have to revise and reemploy its FATCA Compliance Roadmap, it can employ a comprehensive plan as part of LB&I's portfolio management strategy to evaluate FATCA enforcement activities already in place, and determine the extent to which these activities improve voluntary compliance and address noncompliance with FATCA reporting requirements. Without such a plan, IRS risks not maximizing efforts to manage and address the myriad of challenges it faces in effectively ensuring taxpayer compliance.

Recommendation: The Commissioner of Internal Revenue should assess factors contributing to unnecessary Form 8938 reporting and take steps, as appropriate, to address the issue. Depending on the results of the assessment, potential options may include:
• identifying and implementing steps to further clarify IRS Form 8938 instructions and related guidance on IRS's website on determining what foreign financial assets to report, and how to calculate and report asset values subject to reporting thresholds; and
• conducting additional outreach to educate taxpayers on required reporting thresholds, including notifying taxpayers that may have unnecessarily filed an IRS Form 8938 to reduce such filings. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of February 2020, IRS officials said the agency is in the process of obtaining 2017 and 2018 tax data to analyze the number of unnecessary filings of Form 8938. Completing this data analysis and identifying the full range of factors contributing to unnecessary Form 8938 reporting will allow IRS to better address such factors. These efforts, in turn, will reduce the risk that taxpayers file-and IRS processes-forms that taxpayers were not required to submit to IRS.

Recommendation: The Secretary of the Treasury should lead efforts, in coordination with the Secretary of State and Commissioner of Social Security, to establish a formal means to collaboratively address ongoing issues—including issues accessing financial services and employment and obtaining SSNs—that U.S. persons living abroad encounter from implementation of FATCA reporting requirements. (Recommendation 5)

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury (Treasury) has taken some steps to implement GAO's April 2019 recommendation. Specifically, Treasury proposed changes to the Internal Revenue Service (IRS) relief procedures to abate assessments for certain expatriating taxpayers and is working with IRS and the Department of State (State) to publicize the procedures. In addition, Treasury led efforts with IRS, State, and the Social Security Administration (SSA) to develop frequently asked questions that combine relevant guidance for individuals to obtain a Social Security number, renounce U.S. citizenship, and comply with U.S. tax obligations. However, as of December 2019, Treasury lacked a collaborative interagency mechanism to address ongoing issues U.S. persons living abroad continue to encounter from implementation of Foreign Account Tax Compliance Act (FATCA) reporting requirements. In November 2019, Treasury said it was not the appropriate agency to lead these coordination efforts. However, GAO continues to believe that because Treasury is ultimately responsible for effectively administering FATCA, it is in a better position than State or SSA to establish an effective collaborative mechanism. Doing so will help agencies address the ongoing issues Americans living abroad experience from FATCA.

Recommendation: The Commissioner of Internal Revenue should finalize the PDC program objectives so that they are clearly defined in consistent terms, and assure that the key program risks, measures, and targets are linked with the objectives. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS partially agreed with recommendation. IRS said it would use consistent terms in developing measures that link to its PDC program objectives, but did not agree that program objectives are necessarily framed in terms of program risks. In December 2019, IRS provided new objectives linked with proposed measures to assess collection agencies. In February 2020, IRS said it intends to award new contracts in 2021 that will include performance measures linked to program objectives. To fully address GAO's recommendation, IRS also needs to identify targets for measures linked to program objectives.

Recommendation: The Commissioner of Internal Revenue should include the Department of the Treasury Inspector General for Tax Administration (TIGTA) costs in IRS's reporting of PDC program costs. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with the recommendation. In October 2019 IRS said that including TIGTA costs in reporting program costs would be inconsistent with legislative requirements that define program costs as IRS's costs and with IRS cost-accounting practices. However, we maintain that the FAST Act set minimum reporting requirements to which IRS can add more information. Also, the existing cost accounting standards and practices to which IRS refers govern IRS's accounting for and reporting of costs incurred by IRS, not to fuller reporting of the PDC program's costs to the federal government. We will continue to pursue this recommendation and update its status in response to any changes.

Recommendation: The Commissioner of Internal Revenue should report the amount of collected revenue sent to the general fund of the Treasury and amounts retained by IRS to pay its costs. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with our recommendation and in October 2019 said it plans to report PDC revenue amounts going to the Treasury and to IRS's retained funds by February 2020. As of March 2020, we had not received documentation from IRS to demonstrate it had done so.

Recommendation: The Commissioner of Internal Revenue should analyze PDC program results to identify the types of cases that are not potentially collectible and should not be assigned to collection agencies. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with the recommendation and said such analysis is unnecessary due to a legal requirement to assign all such cases to collection agencies and because there is very little cost in doing so. Our report noted that IRS has the authority and responsibility for efficient program operations to not assign uncollectible debt cases. In February 2020, IRS said that the assignment and recall of cases add nothing to the cost. We disagree, noting that IRS has not supported this assertion. IRS incurred some portion of its PDC costs from assigning and recalling cases that collected no revenue. Even if these costs are minor, they would be greater than the amount collected. We maintain the importance of this recommendation because IRS has incurred tens of millions of dollars in costs with little or no revenue collected for most of the PDC cases that IRS has closed.

Recommendation: The Commissioner of Internal Revenue should analyze PDC program results and the cases not assigned to the PDC program to identify the types of inactive cases IRS will not pursue that could be assigned to collection agencies to improve PDC program results. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed and noted that it already had the recommended analyses built into the PDC case identification process. IRS also provided documentation to GAO in December 2019 and its comments in February 2020 repeated its view that its process already identified other inactive cases that have not been assigned to PDC. IRS's documentation during the review and provided in December did not show how IRS analyzes its debt inventory and PDC results to identify inactive cases that are not being assigned to PDC but may be worth pursuing.

Recommendation: The Commissioner of Internal Revenue should clearly document and distinguish the complete list of identified risks to taxpayers in the PDC program risk register, and align the risks with PDC program objectives. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. We will update the status after completing review of documentation IRS provided in December 2019, on actions taken to implement the recommendation. IRS actions included a risk register with related information on the analyses and response to the listed risks.

Recommendation: The Commissioner of Internal Revenue should clearly document the severity of impacts of the taxpayer risks, as well as the likelihood of each taxpayer risk after responding to it, in the PDC program risk register, and use this information to prioritize risks to address and guide selection of risk responses. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. We will update the status after completing review of documentation IRS provided in December 2019, on actions taken to implement the recommendation. IRS actions included a risk register with related information on the analyses and response to the listed risks.

Recommendation: The Commissioner of Internal Revenue should clearly document how each risk response aligns with specific taxpayer risks in the PDC program risk register. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. We will update the status after completing review of documentation IRS provided in December 2019, on actions taken to implement the recommendation. IRS actions included a risk register with related information on the analyses and response to the listed risks.

Recommendation: The Commissioner of Internal Revenue should document how IRS's monitoring of the PDC program provides information on specific taxpayer risks and how well specific responses are working to address each risk, and should supplement IRS's monitoring of taxpayer complaints with Federal Trade Commission (FTC) complaint data. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. We will update the status after completing review of documentation IRS provided in December 2019 on actions taken to implement the recommendation, such as outreach to FTC on its system to record the complaints.

Recommendation: The Commissioner of Internal Revenue should more fully seek and document feedback from external stakeholders representing vulnerable taxpayers to identify and appropriately respond to possible PDC taxpayer risks. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. We will update the status after completing review of documentation IRS provided in December 2019 on actions taken to implement the recommendation, such as a system to record feedback received.

Recommendation: The Commissioner of Internal Revenue should clearly document an assessment of fraud risks related to the PDC program. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and said that by June 2020, it would conduct a fraud risk assessment based on the Fraud Reduction and Data Analytics Act of 2015 and OMB guidance. We will update the status when we complete review of any documentation IRS provides on actions taken to implement the recommendation.

Recommendation: The Commissioner of Internal Revenue should ensure that its printed guidance to PDC taxpayers includes information about reporting scams to TIGTA. (Recommendation 12)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. We will update the status after completing review of documentation IRS provided in December 2019 on actions taken to implement the recommendation.

Recommendation: The Commissioner of the IRS should fully implement the workforce planning initiative, including taking the following actions: (1) conducting enterprise strategy and planning, (2) conducting workforce analysis, (3) creating a workforce plan, (4) implementing the workforce plan, and (5) monitoring and evaluating the results. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS agreed with this recommendation. As of February 2020, the Internal Revenue Service (IRS) reported it has hired or made final offers to new members of its Workforce Planning branch that will help implement the Workforce Planning initiative. According to IRS, the agency is updating its workforce planning policy, and will establish a workforce plan including an enterprise strategy and initiate related workforce analysis by December 2020. By December 2021, IRS expects to implement the workforce plan and a process to monitor and evaluate the results of the workforce plan. Full implementation of a workforce plan that provides a comprehensive inventory of its current workforce will allow IRS to develop competency and staffing requirements to conduct agency-wide activities associated with identifying and addressing skills gaps.

Recommendation: The Secretary of the Treasury should issue clarifying guidance to IRS about the Integrated Talent Management system, including when the workforce planning and talent management modules will be deployed and available for IRS's use, the functions it will include, and how IRS's existing systems and processes within business divisions and program offices will be affected. (Recommendation 2)

Agency: Department of the Treasury
Status: Open

Comments: Treasury agreed with the recommendation. Treasury stated that it has taken actions to ensure that IRS and all Treasury bureaus have a clear understanding of when the ITM workforce planning module will be available and how it will be used. Treasury stated that they conducted a Workforce Planning offsite in May 2019 to (1) ensure a common understanding of the workforce planning process as it relates to ITM; 2) document the process in preparation of utilizing ITM; and 3) agree on how the agency will accomplish workforce planning in ITM. According to Treasury, goals 1 and 2 were achieved during the offsite and the workforce planning community continues to work on the third goal. Treasury expects to complete the discussion on how to accomplish workforce planning in ITM by the end of calendar year 2019. Treasury's Offices of the Chief Human Capital Officer and the Chief Information Officer are responsible for ensuring effective communication and training are completed as each ITM module is implemented. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Commissioner of IRS should ensure the Human Capital Officer improves reporting for its workforce planning initiative in its bi-monthly HRstat information submissions to Treasury. The submissions should include the original implementation schedule, changes to the original schedule, delays in implementation and each of their causes, and IRS's strategy to address the causes of those delays. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agrees with this recommendation. In its recommendation status letter to us, IRS wrote that they will include workforce planning in their bi-monthly HRstat information submissions to Treasury, and will have an approved implementation schedule for the workforce planning initiative by December 2019. IRS identified the Human Capital Officer as the responsible official for addressing this recommendation. We will continue to monitor IRS's progress in implementing this recommendation.

Recommendation: The Commissioner of IRS should ensure the Human Capital Officer and Deputy Commissioner for Services and Enforcement report the results of efforts to close skills gaps among revenue agents, including lessons learned, that may help inform strategies for conducting skills gap assessment efforts for other mission critical occupations. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agrees with this recommendation. In its recommendation status letter to us, IRS provided a timetable for implementation. By January 2021, IRS will initiate use of Integrated Talent Management's (ITM) capability to enable workforce planning and analytics. They are still working through requirements and the implementation plan for using this system. By December 2021, IRS will report the results of efforts to close skills gaps among revenue agents, including lessons learned on an annual basis over the next three fiscal years. IRS identified the Human Capital Officer and Deputy Commissioner for Services and Enforcement as the officials responsible for addressing this recommendation. In our 2019 Duplication, Overlap, and Fragmentation report, we determined implementing this recommendation is needed to address IRS's fragmented human capital activities to improve its strategic workforce planning so it can better meet challenges to achieving its mission. We will continue to monitor IRS's progress in implementing this recommendation.

Recommendation: The Commissioner of IRS should ensure the Human Capital Officer and Deputy Commissioner for Services and Enforcement collaborate to develop a work plan or other mechanism that prioritizes and schedules skills assessments for mission critical occupations at highest risk of skills gaps, such as those identified by Treasury or where key activities have been scaled back, for the purposes of developing a strategy to close the gaps. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS agreed with the recommendation. As of February 2020, IRS reported that it expects to fully implement this action by June 15, 2020. IRS reported that full implementation of related actions has been delayed due to limited resources. To date, the IRS Human Capital Officer has (1) identified mission critical occupations (MCOs), (2) collaborated with the Employment, Talent and Security (ETS) Division to develop an implementation schedule for the assessments, (3) obtained the Worklife Benefits and Performance Division and ETS Division Directors' approval of the implementation schedule, and (4) published and distributed the schedule. Going forward, the IRS Human Capital Office will coordinate with the Chief Financial Office and the Deputy Commissioner for Services and Enforcement in developing a work plan or other mechanism that prioritizes and schedules skills assessments for mission critical occupations. IRS will also validate its list of 22 positions established in coordination with Treasury. A work plan for addressing MCOs and skills gaps could help IRS identify and close skills gaps on a timely basis. Without such a plan, IRS risks continuing to scale back on mission-critical activities, adding to the existing fragmentation of its human capital planning efforts.

Recommendation: The Commissioner of Internal Revenue should direct USCA to ensure that APMA staff record and track contact with taxpayers. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's recommendation. As of July 2020, IRS has taken steps to develop and implement an integrated case inventory and management system capable of recording and tracking taxpayer contacts. It expects this system to be deployed by October 2020.

Recommendation: The Commissioner of Internal Revenue should direct USCA to ensure that APMA staff record and track the hours they spend on MAP cases. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's recommendation. As of July 2020, IRS has taken steps to develop and implement an integrated case inventory and management system capable of tracking actual time worked on cases. It expects this system to be deployed by October 2020.

Recommendation: The Commissioner of Internal Revenue should direct USCA to ensure that Advance Pricing and Mutual Agreement Program (APMA) identify and record the dates of key milestones throughout MAP case resolutions. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's recommendation. As of July 2020, IRS plans to review its current practices in order to ensure they are in line with the GAO's recommendation with respect to MAP cases, as well as APA cases. IRS has taken steps to develop and implement an integrated case inventory and management system that it expects to deploy by October 2020.

Recommendation: The Commissioner of Internal Revenue should direct USCA to ensure that APMA puts procedures in place to review the quality of inventory data. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's recommendation. As of July 2020, IRS has taken steps to develop and implement an integrated case inventory and time management system for APMA's MAP (and other) cases that it believes will help it quickly identify when case and inventory data do not meet quality standards. The new system is expected to be deployed by October 2020.

Recommendation: The Commissioner of Internal Revenue should direct USCA to ensure that APMA records the dollar amounts of MAP case outcomes in its database. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's recommendation. As of July 2020, IRS has taken steps to record these amounts in the inventory management system that is expected to be deployed by October 2020.

Recommendation: The Commissioner of Internal Revenue should direct USCA to ensure that APMA analyzes trends in case characteristics as part of routine program management activities. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's recommendation. As of July 2020, IRS is exploring ways to examine correlations between case management and administrative characteristics as part of ongoing, routine measurement of stages of the MAP.

Recommendation: The Commissioner of Internal Revenue should direct USCA to ensure that APMA identify and record categories of the tax issue relevant in the dispute. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's recommendation. APMA already tracks issue classification data for completed APA cases for its annual report to Congress on the APA program, and IRS agrees that a similar system can and should be pursued for MAP cases. Implementing an integrated inventory management system capable of tracking these data across both MAP and APA cases would be especially informative and helpful for APMA management. As of July 2020, the IRS has taken steps to develop and implement such a system. It is expected to be deployed by October 2020..

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Treasury should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series and assign the appropriate NICE framework work role codes. (Recommendation 17)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: Treasury partially concurred with the recommendation and stated that some positions may not align to work roles in the National Initiative for Cybersecurity Education's (NICE) cybersecurity workforce framework. Treasury stated that it planned to review and validate the work role codes of its IT, cybersecurity, or cyber-related positions by March 2019. However, as of February 2020 Treasury had not provided evidence that it has implemented our recommendation. Until it assigns work role codes that are consistent with the IT, cybersecurity, and cyber-related functions performed by these positions, Treasury will continue to have unreliable information about its cybersecurity workforce that the department will need to identify its workforce roles of critical need.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should revise Large Bank Supervisions policy to require documentation of examination teams internal deliberations that lead to consequential decisions for the bank, such as the decision whether to issue a Matter Requiring Attention, among others. (Recommendation 1)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that consistently documenting internal deliberations that lead to consequential decisions for the bank could increase the transparency and accountability of examination teams' findings and decisions.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should revise Large Bank Supervisions policy to require that bank examination teams retain drafts of key documents, including the conclusion memorandum and supervisory letter, that record the supervisory review process. (Recommendation 2)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that revising the policy to ensure that drafts of key documents are not deleted will help OCC increase the transparency and accountability of the supervisory review process.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should revise Large Bank Supervisions policy to require documentation of communications with banks, including those between executive and senior management and banks, that inform supervisory decisions. (Recommendation 3)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that having meeting minutes and other documentation of key communications would provide OCC with a more complete and transparent record of the information banks provide to examiners and how that information impacts supervisory decisions.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should systematically track and monitor Large Bank Supervisions use of informal recommendations. (Recommendation 4)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that tracking and monitoring the use of informal recommendations could increase transparency of the supervisory process, which could help Large Bank Supervision mitigate the risk of regulatory capture.

Recommendation: The Chief Counsel should develop a policy for Large Bank Supervision (1) to check employees active conflicts of interests during the staffing process for examinations and other supervisory activities and (2) to document the results of this check. (Recommendation 6)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020,, OCC continued to disagree with GAO's recommendation and does not plan to develop a policy to check if employees have active conflicts of interest during the staffing process for examinations and other supervisory activities. OCC noted in its December 2018 response letter to the report that they believed such a policy would shift the responsibility for ensuring compliance with recusal requirements from employees to those responsible for staffing. We maintain that this recommendation does not aim to alleviate the personal responsibility all employees have to comply with recusal requirements. Rather, our recommendation aims to strengthen the due diligence of those responsible for staffing by requiring an independent, preliminary check of active conflicts of interest.

Recommendation: The IRS Commissioner should work with the Department of the Treasury to consider clarifying if transfers of unclaimed savings from employer-based plans (such as 401(k) plans) to states are distributions, what, if any, tax reporting and withholding requirements apply, and when they apply. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and stated that it would work with Treasury to consider clarifying the issues raised by this recommendation.

Recommendation: The IRS Commissioner should work with the Department of the Treasury to consider adding retirement savings transferred to states from terminating DC plans to the list of permitted reasons for rolling over savings after the 60-day rollover period, in a form consistent with the rules adopted on the taxation of transfers of unclaimed retirement savings. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and stated that it would work with Treasury to consider addressing the issues outlined in this recommendation.

Recommendation: The Assistant Secretary for Financial Institutions should annually collect and evaluate HFAs' risk assessments, which include HFAs' risk levels. (Recommendation 1)

Agency: Department of the Treasury
Status: Open

Comments: According to Treasury, as of March 2019, the agency had requested that each Housing Finance Agency evaluate its controls and update its Risk and Control Matrix to ensure that it reflects the risk assessment level of each control that has been assessed and to provide this information to Treasury. Treasury stated that it would evaluate the risk assessments to verify that the appropriate risk level had been assessed and that proper segregation of duties exists. As of August 2020, Treasury had not demonstrated that it had annually collected or evaluated HFA's risk assessments.

Recommendation: The Comptroller of the Currency should, in coordination with the other federal banking regulators and the Bureau of Consumer Financial Protection and with input from relevant stakeholders, communicate in writing to banks that engage in third-party relationships with fintech lenders on the appropriate use of alternative data in the underwriting process, including issues to consider when selecting types of alternative data to use. (Recommendation 4)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open
Priority recommendation

Comments: In December 2019, the Board of Governors of the Federal Reserve System, the Consumer Financial Protection Bureau, the Federal Deposit Insurance Corporation, the National Credit Union Administration, and the Office of the Comptroller of the Currency (the agencies) issued an interagency statement on the use of alternative data in credit underwriting. The statement broadly highlights some potential benefits and risks of using alternative data and encourages firms to responsibly use alternative data, but does not provide firms or banks with specific direction on the appropriate use of alternative data, including issues to consider when selecting types of alternative data to use. We will continue to monitor the agencies' actions related to this recommendation.

Recommendation: The Secretary of the Treasury should fully comply with OMB's requirements by providing metadata in a single location that are easy to find on the USAspending.gov website. (Recommendation 3)

Agency: Department of the Treasury
Status: Open

Comments: Treasury agreed with the recommendation. As of September 2020, metadata are not available on USAspending.gov.

Recommendation: The Secretary of the Treasury should ensure that the Office of the CIO and other offices, as appropriate, address gaps in the department's FITARA plans by developing and implementing policies and procedures that establish department-wide policy for the level of detail of planned expenditure reporting to the CIO for all transactions that include IT resources. (Recommendation 35)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that the Office of the CIO and other offices, as appropriate, address gaps in the department's FITARA plans by developing and implementing policies and procedures that include the CIO in the planning and budgeting stages for all programs that are fully or partially supported with IT resources. (Recommendation 36)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that the Office of the CIO and other offices, as appropriate, address gaps in the department's FITARA plans by developing and implementing policies and procedures that include the CIO as a member of governance boards that inform decisions regarding all IT resources, including component-level boards. (Recommendation 37)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that the Office of the CIO and other offices, as appropriate, address gaps in the department's FITARA plans by developing and implementing policies and procedures that document the process for the CIO's review and approval of the major IT investments portion of the budget request. (Recommendation 38)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that the Office of the CIO and other offices, as appropriate, address gaps in the department's FITARA plans by developing and implementing policies and procedures that document the steps the CIO is to take to ensure whether the IT portfolio includes appropriate estimates of all IT resources included in the budget request. (Recommendation 39)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should direct the department CIO to establish, for any OMB common baseline requirements that are related to IT budgeting that have been delegated, a plan that specifies the requirement being delegated, demonstrates how the CIO intends to retain accountability for the requirement, and ensures through quality assurance processes that the delegated official will execute such responsibilities with the appropriate level of rigor. (Recommendation 40)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should direct the Office of the CIO and other offices, as appropriate, to take steps to ensure that the actions taken to comply with OMB's common baseline for implementing FITARA on individual investments are adequately documented. (Recommendation 41)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should ensure that the Office of the CIO and other offices, as appropriate, establish quality assurance processes--such as data quality checks, reviews of estimation methods, linkages between the IT portfolio and procurement system data, and linkages between the IT portfolio and financial system data--for ensuring the annual IT budget is informed by complete and reliable information on anticipated government labor, contract, and other relevant IT expenditures. (Recommendation 42)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the department has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should ensure that the Deputy Commissioner for Services and Enforcement develops and documents improved controls for the validity, completeness, and accuracy of data on FBAR exams and enforcement actions. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In a letter dated October 15, 2018, IRS's Deputy Commissioner for Services and Enforcement stated that IRS is in the process of designing a new FBAR database solution using the FISMA-compliant Entellitrak case management system. The solution will include data fields and systemic controls to ensure the accurate recording and reporting of FBAR case information essential to the whistleblower program. As of December 2019, IRS officials said they are on track to complete this action by June 2020. When we can confirm that IRS has completed this action, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should direct the Chief of Appeals, in coordination with the IRS Human Capital Office, to conduct a skills gap analysis specific to Appeals mission needs and develop a strategy for mitigating any identified gaps. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. As of April 2020, the Office of Appeals stated that it is working with the IRS Human Capital Office to design a questionnaire for all Appeals managers to identify the technical and organizational skills necessary to meet organizational short and long-term needs for the Appeals Officer position. This information will be used to conduct a skills gap analysis on the current Appeals workforce and to enhance the selection/hiring process to ensure future hires possess necessary skills. IRS plans to complete these actions by October 2020, and Appeals stated that time frame for this corrective action may be affected by budgetary and resource constraints. GAO will continue to monitor IRS's implementation of this recommendation.

Recommendation: The Commissioner of Internal Revenue should evaluate the existing monitoring for collection due process appeal requests and address deficiencies in collection staff meeting the requirement for timely transfer to the Office of Appeals. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In July 2019, IRS evaluated the existing monitoring for collection due process appeal requests to identify any impediments to collection staff timely transferring these requests to the Office of Appeals and provided the studies and related recommendations to GAO. The affected IRS collection units have developed action plans to address deficiencies in case transfer time. These plans include modifying inventory software to alert both staff and managers on the number of days collection due process requests have been under review. IRS also plans to update relevant IRM documentation in early 2020 to ensure that receipt dates of collection due process appeal requests are recorded for all cases and that there is appropriate notation of reasons why certain cases exceed established timeframes for transfer to the Office of Appeals. To fully implement this recommendation, IRS will need to provide GAO copies of the updated IRM as well as evidence of other corrective actions outlined in its evaluations of its monitoring procedures for collection due process appeal requests. GAO will continue to monitor the implementation of this recommendation.

Recommendation: The Commissioner of Internal Revenue should establish timeframes and monitoring procedures for timely transfer of taxpayer appeals requests by examination compliance units to the Office of Appeals. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS agreed with this recommendation. All four IRS business operating divisions have a corrective action plan and established and documented time frames for timely appeal transfer as of February 2020. While three business operating divisions have reporting procedures planned for monitoring timely appeal transfer, one division has not provided a plan for monitoring its timeliness in transferring cases to the Office of Appeals. To fully implement this recommendation, IRS needs to assess whether the planned monitoring actions will result in timely transfer of examination appeals. As of February 2020, data tracking the time from taxpayer request for appeal to when it is received by the Office of Appeals indicated that the actual transfer times are longer than the established time frames. Delays in transferring such requests can result in increased interest costs for taxpayers because interest continues to accumulate on the tax liability during the appeal process. Further, taxpayers unsure of their appeal status may call or write to IRS, tying up other IRS staff to respond to inquiries about appeals delayed in transfer. GAO will continue to monitor IRS's implementation of this recommendation.

Recommendation: The Commissioner of Internal Revenue should direct the Chief of Appeals to regularly report and share with each compliance unit the data on the time elapsed between when a taxpayer requests an appeal to when it is received in the Office of Appeals. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In February 2019, IRS stated that the Chief of Appeals will share with each compliance unit data on the time elapsed between when a taxpayer requests an appeal to when it is received in the Office of Appeals. Appeals will also conduct an assessment with IRS compliance units of the time elapsed between when a taxpayer requests an appeal to when it is received in the Office of Appeals and implement improvements based on that assessment. As of February 2020, Appeals demonstrated that it provided to compliance units initial example data that tracks the time from taxpayer request for appeal to when it is received by the Office of Appeals. As of April 2020, it continues to refine the format of these reports. Appeals said it plans to do an assessment of the data with compliance units and will provide an example of this analysis when it is complete. IRS plans to complete these actions by October 2020, and GAO will continue to monitor IRS's implementation of this recommendation.

Recommendation: The Commissioner of Internal Revenue should provide more transparency to taxpayers on historical average total appeal resolution times. This could include publishing average total resolution times by workstream on an Office of Appeals web page as well as including total expected times in the Appeals welcome letter. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. In February 2019, IRS stated that the Chief of Appeals will review appeal resolution times and participate in IRS-wide efforts to improve transparency of resolution timeframes. As of June 2019, the Office of Appeals explained that IRS was beginning to simplify its website, including the Appeals website, with a focus on making it more customer friendly. IRS plans to complete these actions by June 2020, and GAO will continue to monitor IRS's implementation of this recommendation.

Recommendation: The Secretary of the Treasury, consistent with its responsibilities under GPRAMA and Executive Orders for customer service, should ensure that the Commissioner of Internal Revenue takes action to make Appeals customer service standards and performance results more transparent to the public. This could include publishing customer service standards and related performance measure results on the Office of Appeals web page on IRS.gov. (Recommendation 6)

Agency: Department of the Treasury
Status: Open

Comments: Treasury agreed with this recommendation and plans to monitor IRS implementation. In February 2019, IRS stated that it will publish customer service standards and related performance measure results on the Office of Appeals web page on IRS.gov. As of April 2020, the Office of Appeals stated it plans to use information from its redesigned customer satisfaction survey to address this recommendation and is determining how to include the performance information on its website. IRS plans to complete these actions by June 2020, and GAO will continue to monitor IRS's implementation of this recommendation.

Recommendation: The Secretary of the Treasury, consistent with its responsibilities under GPRAMA and Executive Orders for customer service, should ensure that the Commissioner of Internal Revenue takes action to develop a mechanism to solicit and consider public input and customer feedback on a regular basis on current and proposed IRS appeal policies and procedures. This could include leveraging existing IRS advisory bodies or establishing an Office of Appeals advisory body representing the taxpaying public, the tax practitioner community, and businesses to solicit customer perspectives. (Recommendation 7)

Agency: Department of the Treasury
Status: Open

Comments: Treasury agreed with this recommendation and will monitor IRS implementation. In February 2019, IRS stated that it will leverage existing IRS advisory bodies to solicit customer perspectives. In January 2020, the Office of Appeals reported that it had begun to meet with the IRS Advisory Committee (IRSAC) to solicit customer perspectives, with its first interactions beginning in November 2019. The Office of Appeals stated that, in addition to this action, its leadership continues to meet with other external bodies to capture public input and customer feedback on an ad hoc basis. As of April 2020, the Office of Appeals stated it plans to participate in IRSAC's public meetings. Since the Office of Appeals has only begun leveraging IRSAC to solicit customer perspectives in November 2019 in a working session, GAO will continue to monitor the implementation of this recommendation to ensure sustained interaction with IRSAC through working sessions, as well as public meetings.

Recommendation: IRS's Associate Chief Counsel, in consultation with Treasury's Assistant Secretary for Tax Policy, should require general contractor cost certifications for LIHTC projects to verify consistency with the developer cost certification. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with the recommendation and had not taken action to implement it as of August 2020. We maintain that requiring general contractor cost certifications would help address a known fraud risk.

Recommendation: To help allocating agencies analyze development cost trends and drivers and make comparisons to other agencies, IRS's Commissioner of the Small Business/Self-Employed Division should encourage allocating agencies and other LIHTC stakeholders to collaborate on the development of more standardized cost data, considering information in this report about variation in data elements, definitions, and formats. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with the recommendation and had not taken action to implement it as of August 2020. We maintain that greater standardization of LIHTC cost data would facilitate analysis of cost drivers and cost-management practices.

Recommendation: IRS's Associate Chief Counsel, in consultation with Treasury's Assistant Secretary for Tax Policy, should communicate to credit allocating agencies how to collect information on and review LIHTC syndication expenses, including upper-tier partnership expenses. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with the recommendation and had not taken action to implement it as of August 2020. We maintain that communicating expectations about the collection and review of syndication expenses would enhance program transparency and allocating agency financial assessments.

Recommendation: The Secretary of the Treasury should ensure that the department's IT management policies address the role of the CIO for key responsibilities in the six areas we identified. (Recommendation 17)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should take steps to improve the implementation of IRS's information security program by entering correct contractor password expiration dates, per IRS's policy, in the system used for managing user access authorizations. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, nor did the agency provide evidence that it had implemented this recommendation. When IRS indicates that it has implemented this recommendation, we will review relevant IRS actions.

Recommendation: The Commissioner of Internal Revenue should take steps to improve the implementation of IRS's information security program by documenting access authorizations for non-unique accounts. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, nor did the agency provide evidence that it had implemented this recommendation. When IRS indicates that it has implemented this recommendation, we will review relevant IRS actions.

Recommendation: The Commissioner of Internal Revenue should take steps to improve the implementation of IRS's information security program by reviewing non-unique accounts at least annually, per IRS's policy. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, nor did the agency provide evidence that it had implemented this recommendation. When IRS indicates that it has implemented this recommendation, we will review relevant IRS actions.

Recommendation: Based on the assessment in recommendation 2, the Commissioner of Internal Revenue should implement the most cost-effective method to digitize information provided by taxpayers who file returns on paper. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS agreed with this recommendation and in December 2019 indicated that it plans to begin scanning and digitizing individual tax returns filed on paper beginning in October 2021. According to IRS, digitizing paper returns at intake would allow IRS to reduce processing time, use the same RRP fraud filters on all paper and electronic forms, and allow more pre-refund audits or investigations, among other benefits.

Recommendation: The Commissioner of Internal Revenue should evaluate the costs and benefits of expanding RRP to analyze individual returns not claiming refunds to support other enforcement activities. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS agreed with this recommendation and told us expanding the use of RRP is an agency goal. In December 2019, IRS officials reported that internal IRS offices are collaborating on identifying priorities for expanding use of RRP to support other enforcement activities, such as pre-refund audits and investigations, and improve detection and treatment of fraud and noncompliance.

Recommendation: Based on the assessment in recommendation 4, the Commissioner of Internal Revenue should expand RRP to support identified activities. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of June 2019, IRS has not yet completed its analysis of the costs and benefits of expanding RRP, and therefore has not taken action to expand RRP based on this assessment. IRS agreed with the recommendation but noted that it must first evaluate opportunities to expand RRP. Implementing this recommendation could help IRS streamline the detection and treatment of fraud as well as promote voluntary compliance with tax laws.

Recommendation: The Secretary of the Treasury should include in Treasury's fiscal year 2018 AFR information about all civil monetary penalties within its jurisdiction, including the inflation adjustment of the civil monetary penalties. (Recommendation 5)

Agency: Department of the Treasury
Status: Open

Comments: In November 2018, Treasury issued its fiscal year 2018 agency financial report and included information about all civil monetary penalties within its jurisdiction. However, it did not adjust two civil monetary penalty amounts for inflation and indicated that it planned to complete the regulations to adjust these two amounts for inflation by the end of 2018. In November 2019, Treasury issued its fiscal year 2019 agency financial report and included information about all civil monetary penalties within its jurisdiction. However, it did not adjust one of the two civil monetary penalty amounts for inflation in our finding. As of June 2020, Treasury has not taken the necessary corrective actions to completely address this recommendation.

Recommendation: The Commissioner of Internal Revenue should leverage existing consultation with stakeholders and the public to explicitly seek input on the estimated burden imposed by information collections. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: According to IRS, agency officials met with representatives of external stakeholder organizations on the Information Reporting Program Advisory Committee (IRPAC) to seek input on the burden experience of their participants and the communities they represent. As a result of these discussions, the IRPAC has added the burden experience as defined by the PRA as a monthly agenda topic for the 2019 session. As of September 2019, IRS officials reported that the IRPAC has not yet met in 2019. Once we receive documentation confirming this action, we will update the status of the recommendation accordingly.

Recommendation: The Commissioner of Internal Revenue should include enough information in Federal Register notices to allow the public to reasonably calculate or determine the number of respondents, the frequency of response, and the average burden time per response for each information collection activity. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In October 2018, Internal Revenue Service (IRS) reported that it continues to standardize the review process by developing a checklist that ensures all required elements are included in the Federal Register notice. Agency officials stated that the agency will complete the development and delivery of training for employees with responsibility for PRA compliance in fiscal year 2019. We will continue to monitor IRS's progress toward completing these actions.

Recommendation: The Commissioner of the IRS should ensure the operational analysis for IMF fully addresses greater utilization of technology or consolidation of investments to better meet organizational goals. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2019, IRS provided its fiscal year 2018 Operational Analysis Results report, dated June 24, 2019. The report demonstrated that IRS, in response to our recommendation, had ensured that the operational analysis for IMF fully addressed greater utilization of technology or consolidation of investments to better meet organizational goals. However, the operational analysis did not reflect IRS's progress to date in modernizing IMF and the associated challenges. As we reported, this omission is concerning given the risk exposure from the agency's continued use of the legacy assembly language code. In order to close the recommendation, IRS needs to update the operational analysis to reflect its progress modernizing IMF.

Recommendation: The Commissioner of the IRS should ensure the operational analysis for Telecommunications Systems and Support (TSS) addresses the extent to which the investments support customer processes as designed, and how well the investments are delivering the goods or services they were designed to deliver. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2019, IRS provided its fiscal year (FY) 2018 Operational Analysis Results report, dated June 24, 2019. While the report included a summary of the FY 2018 operational analysis for TSS, it did not identify the metrics used to determine whether TSS supported customer processes or delivered the goods and services that it is intended to deliver. To close this recommendation, IRS will need to provide the detailed operational analysis for TSS incorporating these metrics. As of December 2019, IRS has not provided the full TSS operational analysis to GAO. Upon receiving the document, we will review it to determine if IRS has implemented the recommendation.

Recommendation: The Commissioner of the IRS should ensure the operational analysis for TSS includes a comparison of current performance with a pre-established cost baseline. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2019, IRS provided GAO its fiscal year (FY) 2018 Operational Analysis Results report. While the report included a summary of the FY 2018 operational analysis for the Telecommunications Systems and Support (TSS) investment , including planned and actual cost figures for FY2018, the report did not indicate whether the planned cost figure for FY2018 accounted for reimbursable costs and user fees, as we reported. To address this recommendation, IRS will need to provide a full operational analysis for TSS, as well as documentation showing whether reimbursable costs and user fees are included in the planned cost figure. As of December 2019, IRS has not provided a full TSS operational analysis to GAO. Upon receiving the document, we will review it to determine if IRS has implemented the recommendation.

Recommendation: The Commissioner of the IRS should ensure the operational analysis for End User Systems and Services includes a comparison of current performance with a pre-established cost baseline. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2019, IRS provided its fiscal year (FY) 2018 Operational Analysis Results report, dated June 24, 2019. While the report included a summary of the FY 2018 operational analysis for End User Systems and Services (EUSS) investment, including planned and actual cost figures for FY2018, it did not specify whether the planned cost figure accounted for multi-year funding and user fees, as we reported. To address this recommendation, IRS will need to provide a full operational analysis for EUSS, as well as documentation showing whether multi-year funding and user fees are included in the planned cost figure. As of December 2019, IRS has not provided the full EUSS operational analysis to GAO. Upon receiving it, we will review it to determine if IRS has implemented the recommendation.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with preparing for risk management for the IMF investment. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates on the status of the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with analyzing risk for the IMF investment. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates on the status of the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice for prioritizing risk for the IMF investment. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates indicating whether the agency has implemented the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with mitigating risk for the IMF investment. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates on the status of the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with monitoring, reporting, and controlling risk for the IMF investment. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates on the status of the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with preparing for risk management for the IDRS investment. (Recommendation 12)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates indicating whether the agency has implemented the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with analyzing risk for the IDRS investment. (Recommendation 13)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates on the status of the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with mitigating risk for the IDRS investment. (Recommendation 14)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates indicating whether the agency has implemented the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with monitoring, reporting, and controlling risk for the IDRS investment. (Recommendation 15)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by November 2019. As of December 2019, IRS has not provided any updates indicating whether the agency has implemented the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with preparing for risk management for the MSSS investment. (Recommendation 16)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In November 2019, IRS provided its IT Enterprise Operations Mainframe and Servers Services and Support (MSSS) Risk Management Plan, dated October 7, 2019. While the plan addressed most of the activities associated with the preparing for risk management key practice, it did not identify risk constraints, risk assumptions, or risk tolerance for the MSSS investment. Upon receiving further information, we will review it to determine if IRS has fully addressed this recommendation.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with analyzing risk for the MSSS investment. (Recommendation 18)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by October 2019. In November 2019, IRS provided its IT Enterprise Operations Mainframe and Servers Services and Support (MSSS) Risk Management Plan, dated October 7, 2019, along with several other documents associated with the agency's IT risk management process. However, the documents do not demonstrate that IRS has implemented the activities associated with the Analyze Risk key practice. Specifically, while the plan describes a risk analysis process in which risks are classified as high, medium, or low risk, neither the plan nor any of the other documents describes criteria for evaluating and quantifying risk likelihood and severity (impact) levels. Additionally, the Risk Management Plan does not indicate whether analysis of MSSS risks includes both inherent and residual risks. Upon receiving additional information indicating that IRS has addressed these activities, we will review it to determine if IRS has implemented the recommendation.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with mitigating risk for the MSSS investment. (Recommendation 19)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by October 2019. In November 2019, IRS provided its IT Enterprise Operations Mainframe and Servers Services and Support (MSSS) Risk Management Plan, dated October 7, 2019, along with several other documents associated with the agency's IT risk management process. However, the documents do not demonstrate that IRS has established threshold values for MSSS risk categories or alternative courses of action for critical risks. Upon receiving additional information indicating that it has addressed these activities. we will review it to determine if IRS has implemented the recommendation.

Recommendation: The Commissioner of the IRS should fully implement the risk management key practice associated with monitoring, reporting, and controlling risk for the MSSS investment. (Recommendation 20)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it would implement the recommendation by October 2019. In November 2019, IRS provided its IT Enterprise Operations Mainframes and Servers Services and Support (MSSS) Risk Management Plan, dated October 7, 2019, along with several other documents associated with the agency's IT risk management process. However, the documents do not demonstrate that IRS has fully implemented all of the activities associated with the monitoring, reporting, and controlling key practice. Specifically, our review of the documents shows that IRS has not established threshold values for MSSS risk categories, and as a result is unable to compare the status of risks to acceptability thresholds to determine the need for implementing a risk mitigation plan. In addition, although the MSSS Risk Management Plan was updated in October 2019, its previous revision occurred in October 2017, indicating that IRS has not yet reviewed all aspects of the risk management program at least once a year. Upon receiving additional information that IRS has addressed these activities, we will review it to determine if IRS has implemented the recommendation.

Recommendation: The Commissioner of the IRS should fully implement IT workforce planning practices, including the following actions (1) setting the strategic direction for workforce planning; (2) analyzing the workforce to identify skill gaps; (3) developing strategies and implementing activities to address skill gaps; and (4) monitoring and reporting on progress in addressing skill gaps. (Recommendation 21)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS told GAO it had initiated efforts to address workforce planning agency-wide. The agency stated that the Human Capital Office in coordination with the Information Technology organization prioritizes critical skills gaps to develop gap mitigation strategies, which are implemented through IT annual training plans and succession planning efforts. IRS also stated that the mitigation plans will be monitored in the current Project and Portfolio Management System and that the Human Capital and Information Technology organizations will monitor resource capacity, skills, assigned work effort, and staff availability. In addition, IRS stated that it would utilize special hiring authorities as a competency and staffing mitigation strategy. The agency noted that the special authorities are subject to the availability of resources and agency approval. Further, IRS stated that, due to the diversion of IT resources to the Tax Cuts and Jobs implementation, development of a plan for scaling and expansion of workforce planning efforts will commence after the opening of Filing Season 2020. IRS stated that, due to those constraints, it could not provide a date for fully implementing the recommendation. As of December 2019, IRS has not provided any updates indicating whether it has implemented the recommendation. When we confirm what actions IRS has taken, we will provide updated information.

Recommendation: Based on the estimates developed in Recommendation 1, the Commissioner of Internal Revenue should direct the Identity Assurance Office to prioritize foundational initiatives in its Identity Assurance Strategy and Roadmap. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, the Internal Revenue Service (IRS) had taken preliminary steps to prioritize its foundational initiatives in its Identity Assurance Strategy and Roadmap (Roadmap), as GAO recommended in June 2018. For example, IRS documentation stated that initial efforts to update the original Roadmap included collecting implementation documents for the 14 foundational initiatives. IRS stated that this information and progress that IRS has made on the initiatives shows that the initiatives are a priority for IRS leadership. However, IRS has not used this information to clearly prioritize in-progress initiatives or supporting activities going forward. IRS stated that it intends to update its Roadmap annually, including prioritizing new and existing authentication initiatives and capabilities. IRS's continued attention to this action will help ensure that in-progress authentication initiatives are prioritized and completed.

Recommendation: The Commissioner of Internal Revenue should establish a policy for conducting risk assessments for telephone, in-person, and correspondence channels for authentication. This policy should include, for example, the frequency of assessments to be performed and timeframes for addressing deficiencies. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials had developed a draft policy for conducting risk assessments for telephone, in-person, and correspondence channels for authentication, as we recommended. IRS officials stated that once this policy is approved, it will be used to develop a plan to perform risk assessments for these authentication channels. IRS's continued attention to this recommendation will help ensure that it is aware of emerging threats to the tax environment.

Recommendation: Consistent with the policy developed in Recommendation 3, the Commissioner of Internal Revenue should direct the Identity Assurance Office and IRS business owners to develop a plan for performing risk assessments for telephone, in-person, and correspondence channels for authentication. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials stated that they will develop a plan for performing risk assessments for telephone, in-person, and correspondence channels for authentication by May 2020. Until IRS develops and implements this plan, these authentication channels may be more vulnerable to fraudulent activity, including unauthorized attempts to access taxpayer information.

Recommendation: The Commissioner of Internal Revenue should establish a mechanism to collect data on outcomes for telephone, in-person, and correspondence authentication, consistent with federal standards for internal control. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials stated that the agency intends to implement this recommendation by spring 2020. Officials noted that developing a systemic solution for collecting data on all authentication outcomes is complex and involves multiple IRS business divisions. Until IRS fully addresses this recommendation, it will have limited insight into the number of taxpayers who fail authentication and the reason for failure.

Recommendation: The Commissioner of Internal Revenue should revise or establish, as appropriate, procedures to ensure data quality in the Account Management Services (AMS) consistent with federal standards for internal control. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS stated that it has planned enhancements to its authentication data collection procedures in AMS. Officials stated that by June 2020, they intend to implement improvements for ensuring data quality of authentication outcomes. Until IRS fully implements our recommendation, it will be limited in conducting systematic data analysis on taxpayer authentication outcomes.

Recommendation: The Commissioner of Internal Revenue should ensure that IRS business units have access to complete AMS data to monitor authentication performance and identify potential issues. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials told us that IRS has explored options that will allow the agency to more effectively record, track, and monitor authentication outcomes. IRS officials said that they are developing and testing a tool to document Taxpayer Protection Program interactions, outcomes of taxpayer authentication, and the reasons for authentication failures. Officials stated that IRS plans to have this tool implemented by spring 2020, one year later than originally planned. Officials stated that the delay is due to additional technical programming to fully develop the tool. We will follow up on IRS's actions to determine the extent to which they implement our recommendation.

Recommendation: The Commissioner of Internal Revenue should direct the Identity Assurance Office and other appropriate business partners to develop a plan--including a timeline, milestone dates, and resources needed--for implementing changes to its online authentication programs consistent with new NIST guidance. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, IRS has taken steps to implement this recommendation. Efforts include developing plans for a new authentication capability to authenticate taxpayer's identities online using external partners, consistent with National Institute of Standards and Technology (NIST) guidance. IRS officials told us that they plan to work with external partners to perform additional testing on its new authentication platform this year, including a usability study to understand user experience. IRS officials also stated that they are determining a schedule for fully implementing these NIST-compliant taxpayer authentication capabilities. IRS's timely implementation of NIST's guidance is critical to help the agency mitigate potential security weaknesses in its existing online authentication programs.

Recommendation: In accordance with the plan developed in Recommendation 8, the Commissioner of Internal Revenue should implement improvements to IRS's systems to fully implement NIST's new guidance. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, IRS has taken steps to develop plans for a new authentication capability to authenticate taxpayer's identities online using external partners, consistent with National Institute of Standards and Technology (NIST) guidance. IRS officials stated that they are determining a schedule for fully implementing these NIST-compliant taxpayer authentication capabilities. As noted in our report, IRS's timely implementation of NIST's new guidance is critical, as it can help the agency mitigate potential security weaknesses in its existing online authentication programs.

Recommendation: The Commissioner of Internal Revenue should develop a repeatable, comprehensive process to identify and evaluate alternative options for improving taxpayer authentication, including technologies in use by industry, states, or other trusted partners. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, the Internal Revenue Service (IRS) had taken steps to develop a repeatable, comprehensive process to identify and evaluate alternative options for improving taxpayer authentication, as GAO recommended in June 2018. IRS stated that the draft process was being reviewed by the Chief Privacy Officer and it expects to finalize the process in spring 2020. IRS also stated that the Identity Assurance office will be ready to use the repeatable process once it is approved by IRS leadership. IRS's continued attention to this action will help ensure that it has a sound rationale for its investment decisions and the resources it needs to make authentication improvements in a timely manner.

Recommendation: Based on the approach developed in Recommendation 10, the Commissioner of Internal Revenue should include and prioritize these options, as appropriate, in IRS's Identity Assurance Strategy and Roadmap. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, the Internal Revenue Service (IRS) had taken steps to develop a repeatable, comprehensive process to identify and evaluate alternative options for improving taxpayer authentication. However, IRS had not yet included and prioritized these options, as appropriate, in IRS's Identity Assurance Strategy and Roadmap (Roadmap), as GAO recommended in June 2018. IRS stated that it expects to finalize its process to evaluate alternative authentication options in spring 2020. IRS documentation states that it plans to update its Roadmap annually, but it has not articulated a timeline for doing so in 2020. IRS's continued attention to this action will help ensure that it has a sound rationale for its investment decisions and the resources it needs to make authentication improvements in a timely manner.

Recommendation: The Acting Commissioner of Internal Revenue should ensure that the appropriate IRS officials, based on IRS's research and determination, design and implement the corrective actions necessary to reasonably assure that IRS effectively resolves and records unpostable transactions in a timely manner, including establishing clearly defined time frames in the Internal Revenue Manual (IRM) by which the IRS operating divisions should correct unpostable transactions and appropriate related oversight and review processes. (Recommendation 18-02)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. As of September 30, 2019, three of the four operating divisions involved in this recommendation designed and implemented the corrective actions necessary to reasonably assure that IRS effectively resolved and recorded unpostable transactions in a timely manner. In March 2019, one operating division determined that based on the research performed, no actions needed to be taken by the operating division to effectively resolve and record unpostable transactions in a timely manner. We will continue to evaluate IRS's actions to address this recommendation during our audit of IRS's fiscal year 2020 financial statements.

Recommendation: The Acting Commissioner of Internal Revenue should ensure that the appropriate IRS officials develop and implement policies in the IRM for conducting and monitoring the Submission Processing internal control review. These policies should include or be accompanied by procedures to (1) assess and update the review questions and cited IRM criteria to reasonably assure they align with the controls under review; (2) periodically evaluate and document a review of the error threshold methodology to assess its current validity based on changes to the operating environment; (3) report findings identified in the Findings and Corrective Actions Report; and (4) assess and monitor (a) safeguarding internal control activities across all work shifts, particularly during peak seasons, (b) safeguarding internal control activities for the appropriate use and destruction of hard copy taxpayer information, and (c) the results of relevant functional level reviews. (Recommendation 18-03)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2019, IRS developed policies in the Internal Revenue Manual (IRM) for conducting and monitoring the Submission Processing internal control review. Specifically, the IRM addresses the (1) designated roles and responsibilities among IRS business units for ensuring the review questions and associated criteria are assessed and updated to align with internal controls under review; (2) requirements for periodically evaluating the error threshold methodology used in the review; (3) procedures for the review to assess and monitor (a) internal control activities across work shifts and (b) internal control activities for appropriate use and destruction of hard-copy taxpayer information. However, the IRM did not include requirements for reporting findings identified during all components of the internal control review and for assessing and monitoring results of relevant functional level reviews. Since IRS developed the relevant IRM policies and procedures after we had already performed our fiscal year 2019 internal control testing, we will evaluate IRS's implementation of the established procedures during our fiscal year 2020 audit.

Recommendation: The Acting Commissioner of Internal Revenue should ensure that the appropriate IRS officials develop and implement policies in the IRM for conducting and monitoring the Audit Management Checklist review. These policies should include or be accompanied by procedures for IRS management responsible for establishing policies related to safeguarding controls to (1) periodically monitor the results of the review; (2) clarify the minimum requirements for how frequently the review should be completed at its various facilities while considering factors that may affect the most appropriate timing of these reviews, such as changes in personnel, operational processes, or information technology; and (3) reasonably assure that corrective actions for all identified deficiencies are tracked until fully implemented. (Recommendation 18-04)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2019, IRS notified stakeholders of the added procedures to the Internal Revenue Manual (IRM) for (1) conducting the Audit Management Checklist reviews, including how frequently the reviews should be completed; (2) developing corrective actions for deficiencies; and (3) tracking the status of the corrective actions until fully implemented. Since IRS provided us the IRM procedures after the end of our fiscal year 2019 audit, we will evaluate IRS's implementation of the established procedures during our fiscal year 2020 audit.

Recommendation: The Acting Commissioner of Internal Revenue should ensure that the appropriate IRS officials develop and implement policies in the IRM for conducting and monitoring the All Events History Report review. These policies should include or be accompanied by procedures for IRS management responsible for establishing policies related to safeguarding controls to (1) periodically monitor the results of the review and (2) reasonably assure that corrective actions for all identified deficiencies are tracked until fully implemented. (Recommendation 18-05)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2019, IRS notified stakeholders of the added procedures to the Internal Revenue Manual (IRM) for conducting the All Events History Report reviews, including developing and monitoring corrective actions for deficiencies until fully implemented. Since IRS provided us the IRM procedures after the end of our fiscal year 2019 audit, we will evaluate IRS's implementation of the established procedures during our fiscal year 2020 audit.

Recommendation: The Comptroller of the Currency should engage in collaborative discussions with other relevant financial regulators in a group that includes all relevant stakeholders and has defined agency roles and outcomes to address issues related to consumers' use of account aggregation services. (Recommendation 9)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: In a May 2018 letter, OCC noted that its staff have met with the other banking regulators and with market participants about account aggregation issues in the past. In October 2018, OCC staff advised us that issues related to data aggregation were discussed at a June 28, 2018 meeting of the Fintech Interagency Discussion Group, which includes OCC, the Federal Reserve, the Federal Deposit Insurance Corporation, the National Credit Union Administration, and the Bureau of Consumer Financial Protection. We followed up in January 2020 and they confirmed that their collaboration had yet to produce outcomes that would satisfy the recommendation. We plan to follow up with OCC staff to obtain updates on these efforts in the future.

Recommendation: The Secretary of Treasury should take steps to consult with respective sector partner(s), such as the SCC, DHS and NIST, as appropriate, to develop methods for determining the level and type of framework adoption by entities across their respective sector. (Recommendation 9)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: The Department of the Treasury neither agreed nor disagreed with the recommendation in our report. The department stated that it will assess using the identified initiatives and their viability for collecting and reporting sector-wide improvements from use of the framework with input from the sector coordinating council (SCC) and financial regulators. However, as of January 2020, the department had yet to develop methods to determine the level and type of framework adoption. Treasury officials stated that the department, in coordination with the Financial and Banking Information Infrastructure Committee, and in consultation with NIST, developed the Cybersecurity Lexicon in March 2018. The lexicon addressed, among other things, common terminology for cyber terms used in the framework. Additionally, the Financial Services sector, in consultation with NIST, created the Financial Service Sector Cybersecurity Profile (profile) in October 2018, which mapped the framework core to existing regulations and guidance, such as the Commodity Futures Trading Commission System Safeguards Testing Requirements. Officials stated that these efforts will facilitate the use of the framework. However, while the department has ongoing initiatives, implementing our recommendations to gain a more comprehensive understanding of the framework's use by critical infrastructure sectors is essential to the success of protection efforts.

Recommendation: The Secretary of the Treasury, as the chair of CFIUS, and working with member agencies, should coordinate member agencies' efforts to better understand the staffing levels needed to address the current and projected CFIUS workload associated with core committee functions. (Recommendation 1)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: In commenting on the report in February 2018, Treasury concurred with the recommendation. In December 2018, Treasury noted that the Foreign Investment Risk Review Modernization Act of 2018 requires each CFIUS member agency to submit detailed spending plans annually for seven years to appropriate congressional committees, including estimated expenditures and staffing levels, and requires annual testimony for seven years from the CFIUS staff chairperson regarding anticipated resource needs. As of November 2019, GAO continues to monitor this recommendation.

Recommendation: The IRS Commissioner should review taxation issues relating to distributions involving incorrect participant addresses and uncashed benefit checks and clarify for the public the Internal Revenue Code's requirements in these circumstances. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed to review taxation issues relating to distributions involving incorrect participant addresses and uncashed benefit checks and to clarify for the public the Internal Revenue Code's requirements in these circumstances. We will consider closing this recommendation when the agency provides evidence that it completed these efforts.

Recommendation: The IRS Commissioner should consider revising the letter forwarding program in a cost-effective manner to again provide information on behalf of plan sponsors on unclaimed retirement accounts to participants. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with this recommendation, noting that the IRS address of record for a participant would likely be of no greater value than addresses available through alternatives such as commercial locator services. However, our report does not cite the accuracy of IRS addresses, but rather other benefits that make a program revision worth considering, specifically the likelihood that individuals will open IRS correspondence, and the trust DOL places in the service as way for plan fiduciaries to meet their obligations. IRS also stated that the limited number of IRS staff and resources impact the feasibility of reinstating this program for plan participants. We continue to believe that expanding the letter forwarding program would be beneficial, and we encourage IRS to consider cost-effective ways to do so.

Recommendation: The IRS Commissioner should clarify how U.S. individuals are to report their foreign retirement accounts. The clarification could include addressing how these accounts should be designated and how the taxpayer should report contributions, earnings, and distributions made from the account. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. We encourage IRS to take the necessary steps to dispel any confusion U.S. individuals may have over how to properly classify and report their foreign retirement accounts on a U.S. tax return-such clarification should help ensure that these taxpayers can meet their tax reporting obligations.

Recommendation: The IRS Commissioner should systematically analyze data reported through Form 8938 filings on foreign retirement accounts owned by U.S. individuals with the goal of developing an evidence-based understanding of how these accounts change over time and what level of risk these accounts pose for tax evasion. To assist with this analysis, IRS should consider revising Form 8938 to more clearly distinguish between retirement accounts and other types of accounts or assets being reported by taxpayers under current reporting requirements. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with this recommendation but not on its merits, citing a lack of resources to implement it. Specifically, IRS noted that although the modification to the Form 8938 suggested in this recommendation may seem minor, systemically collecting and analyzing the data would require resources beyond those currently available to IRS. However, our report notes that IRS indicated that they already collect foreign account filing data through the Form 8938 and that the current reporting requirements help the agency to "keep a line of sight" on U.S. individuals' foreign pension arrangements. IRS told us that without such data being reported, U.S. individuals with foreign retirement accounts may seek to avoid proper reporting on their tax returns when distributions are made. However, without agreeing to take steps to analyze these data reported by taxpayers, the question remains why the agency continues to collect such information-which we show in the report to present a substantial reporting burden on taxpayers-if the agency has no plan to analyze the data in order to make an informed decision about the risk for tax evasion that such accounts present. It is also unclear how IRS would maintain a line of sight on foreign retirement accounts belonging to U.S. individuals without analyzing the data reported by taxpayers on such accounts. We recognize that resources are limited. When staff and resources become available, IRS should modify the form and conduct a systematic analysis of these data-data that current law requires taxpayers to report-in order to assess the risk of tax evasion that foreign retirement accounts pose. Such an analysis can provide a basis to reach an evidence-based understanding of how these accounts change over time and what level of risk they pose for tax evasion, and U.S. individuals owning foreign retirement accounts will continue to face these substantial reporting burdens without the knowledge that the data they are required to provide will be put to good use by the federal government.

Recommendation: The IRS Commissioner should take steps to improve the likelihood that the Notice of Potential Private Pension Benefit Information corresponds to actual retirement benefits in the future, for example, by working with the Social Security Administration as necessary. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation. The agency indicated it would work to improve the likelihood that the Notice of Potential Private Pension Benefit Information corresponds to actual retirement benefits in the future, and agreed to take steps to ensure that the data reported on Form 8955-SSA are accurate and to advise plan sponsors of any changes to reporting these data.

Recommendation: The Acting Commissioner of Internal Revenue should assess options for improving enforcement of late W-2 filing penalties, for example, by mailing notices before the next filing deadline. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of October 2019, IRS continues to disagree with this recommendation. IRS stated that it does not have all the information required for calculating and sending late penalty notifications prior to the beginning of the next filing season. However, in its response, IRS did not consider other options that could be available prior to finalizing penalty calculations, such as communicating with the employers earlier in the process. As noted in our report, quickly responding to employers that filed late increases the potential for compliance, thereby increasing the availability of W-2 data for systemic verification to detect and prevent fraud and noncompliance. We continue to believe that assessing the options for improving enforcement of late W-2 filing penalties, such as through earlier communication, would help IRS identify potential opportunities to encourage compliance with the W-2 filing deadline and verify more wage information before releasing refunds. We will continue to discuss options with IRS regarding this recommendation.

Recommendation: The Acting Commissioner of Internal Revenue should develop an evaluation plan to fully assess the benefits and costs, including taxpayer burden, of modifying the February 15 refund hold, and determine how this effort informs IRS's overall compliance strategy for refundable tax credits and fraud risk management. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, IRS has assessed the benefits of modifying the refund hold, but it has not assessed the costs, as GAO recommended in January 2018. In November 2018, IRS provided its assessment of the February 15 refund hold. In it, IRS reiterated its findings regarding the benefits of the refund hold. These benefits included potential savings if IRS modified the hold to include all taxpayers, extended the hold to a later date when more W-2 data are available, or made both changes. However, IRS did not include any assessment of costs to achieve these potential savings, such as the costs for IRS to review any additional returns that would be identified under a modified refund hold. It did not assess taxpayer burden, either. IRS also did not determine how the February 15 refund hold informs IRS's overall compliance strategy for refundable tax credits and its fraud risk management strategy. In January 2019, IRS took actions to hold more returns beyond the February 15 refund hold date using a risk-based selection method. Nevertheless, without a complete assessment of the benefits and costs, including taxpayer burden, IRS is making a decision based upon incomplete information. Further, if Congress or Treasury considered making any changes, they too would have incomplete information on which to direct IRS's actions.

Recommendation: Based on the benefits and costs assessment in Recommendation 3, the Acting Commissioner of Internal Revenue should use IRS's existing authority to modify the refund hold such that it minimizes the risk of releasing fraudulent or noncompliant refunds. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, IRS has taken actions consistent with our recommendations by modifying its filters to hold more returns claiming the Earned Income Tax Credit (EITC) or Additional Child Tax Credit (ACTC) beyond the February 15 refund hold date based on a risk-based selection method. In addition, in May 2019, IRS officials told us they are making similar changes for the 2020 filing season to hold more high-risk returns not claiming EITC or ACTC until W-2 data are available. This action, if taken, would be consistent with our recommendations. In 2018, IRS assessed the benefits of modifying the refund hold, however, it did not assess or document the costs, including taxpayer burden, or determine how the February 15 refund hold informs IRS's overall compliance strategy for refundable tax credits and its fraud risk management strategy. Completing these actions, along with the planned modifications, would fully address our recommendations, which would enable IRS to make decisions based on completed information.

Recommendation: The Acting Commissioner of Internal Revenue should assess the benefits and costs of additional uses and applications of W-2 data for pre-refund compliance checks, such as addressing underreporting, employment fraud, and other fraud or noncompliance before issuing refunds. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2019, IRS provided results for a pilot encouraging voluntary compliance through expanded systemic verification using W-2 data. In the pilot, IRS sent soft notices to a targeted group of taxpayers whose returns under-reported income compared to W-2 data. In its analysis, IRS reported that some taxpayers voluntarily amended their returns after receiving the soft notice, resulting in a net increase in tax revenue. If IRS determines that the benefits outweigh the costs of adopting this practice based on the pilot results, or assesses additional options to address other fraud and noncompliance before issuing refunds, it would satisfy our recommendation. We will continue to follow IRS's progress on the pilot and its results.

Recommendation: Based on the assessment in Recommendation 5, the Acting Commissioner of Internal Revenue should implement any identified changes to improve pre-refund compliance checks. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2019, IRS provided an evaluation of a pilot it conducted during tax year 2019. In the pilot, IRS sent soft notices to a targeted group of taxpayers whose returns under-reported income compared to W-2 data. In its analysis, IRS reported that some taxpayers voluntarily amended their returns after receiving the soft notice, resulting in a net increase in tax revenue. IRS told us they intend to continue the pilot during tax year 2020. We will continue to follow IRS's progress on the pilot and its results.

Recommendation: The Secretary of the Treasury should ensure that IT acquisition plans or strategies are reviewed and approved according to OMB's guidance. (Recommendation 23)

Agency: Department of the Treasury
Status: Open

Comments: The agency did not state whether it agreed or disagreed with the recommendation. In March 2019, Treasury issued a memo that requires the CIO to review and approve IT acquisition plans for acquisitions with a total value of $68 million or more, or for actions with a period of performance longer than 5 years. The review and approval of all other IT acquisition plans are delegated to the component CIOs or Chief Technology Officers. However, the agency had not yet provided evidence that the CIO (or designee) was reviewing and approving selected IT acquisition plans, as required. We will continue to monitor the implementation of this recommendation.

Recommendation: The Acting Commissioner of Internal Revenue should ensure that the Information Sharing and Analysis Center (ISAC) pilot better aligns with leading practices for effective pilot design. This should include (1) establishing criteria for assessing whether the pilot's objectives have been met before making decisions about its scalability and whether, how, and when to when to proceed to full implementation; and (2) developing a data analysis plan that identifies data sources and criteria necessary for effectively evaluating the pilot. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS transitioned the Information Sharing and Analysis Center (ISAC) from a pilot to full implementation in October 2018. As of June 2020, we have requested documentation from IRS related to this transition to determine if it is consistent with the recommendation to align with leading practices. We will continue to monitor ISAC activities.

Recommendation: The Acting Commissioner of Internal Revenue should ensure that the ISAC Partnership develops an outreach plan to expand membership and improve states' and industry partners' understanding of the ISAC's benefits. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The ISAC annual report released in April 2018 cites plans to continue to grow member participation from private sector and other government agencies and to provide opportunities to deepen members' participation with clear guidelines. As of June 2020, we have requested additional information about participation levels and ongoing outreach efforts. Developing an outreach plan to broaden membership to non-Security Summit members of industry and financial institutions would further promote stakeholders collaborating and sharing fraud information.

Recommendation: The Secretary of the Treasury should reasonably assure that ongoing monitoring controls to help ensure the completeness and accuracy of agency submissions are designed, implemented, and operating as designed. (Recommendation 4)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: In September 2019, Treasury officials stated that they are working to formalize a process for monitoring agency submissions. This process will include (1) emailing agencies prior to submission deadlines to remind them of the approaching submission deadlines; (2) following up with agencies that do not submit required data by the submission deadline and offering technical assistance as needed; and (3) forwarding a list of non-compliant agencies to OMB. GAO will continue to monitor Treasury's efforts to establish monitoring controls to help ensure the completeness and accuracy of the data.

Recommendation: The Secretary of the Treasury should disclose known data quality issues and limitations on the new USAspending.gov. (Recommendation 5)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of January 2020, Treasury has made progress by disclosing limitations related to unreported spending, among other things. Treasury is planning a major update to the USAspending.gov website to include more information about known data quality issues. Treasury plans to make this update to the website in the coming months and has an internal target date of June 2020 for completion. When completed, this action will help users make more informed decisions about how to interpret and use the data provided on the website.

Recommendation: The Commissioner of Internal Revenue should re-establish long-term, quantitative goals for improving voluntary compliance. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS reported it does not agree with the recommendation. In September 2018, IRS officials stated that the Fiscal Year 2018-2022 IRS Strategic Plan included six strategic goals and six performance measures. However, none of those performance measures related to a long-term, quantitative goal for improving voluntary compliance. In its 60-day letter, IRS agreed that improving voluntary compliance is core to its mission; however, it stated that creating a quantifying goal will do little to advance that purpose. IRS provided several reasons why it should not create a quantitative measure, including the voluntary compliance rate could rise over time without any help from IRS, or fall despite additional effort from IRS. Further, IRS reported that the voluntary compliance rate is not effective to making strategic and operational decisions. However, as we note in the report, setting long-term strategic goals is essential for results-oriented management, because such goals explain in greater specificity the results an agency is intending to achieve. Further, focusing on intended results can promote strategic and disciplined management decisions that are more likely to be effective because managers who use fact-based performance analysis are better able to target areas most in need of improvement and to select appropriate interventions. As of August 2020, there has been no change in this status.

Recommendation: The Commissioner of Internal Revenue should instruct the appropriate officials to develop and document a strategy that outlines how IRS will use National Research Program data to update compliance strategies that could help address the tax gap. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of August 2020, IRS stated that it is working on a redesign of the National Research Program (NRP). The outcome of the redesign will determine the scope of the information available from NRP in the future. IRS reported that next steps to address this recommendation is contingent on the completion of the NRP redesign.

Recommendation: To address demonstrated noncompliance with section 15(k) of the Small Business Act, as amended, the Secretary of the Treasury should comply with sections 15(k)(8) and (k)(11) or report to Congress on why the agency has not complied, including seeking any statutory flexibilities or exceptions believed appropriate.

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretaries of Agriculture, Commerce, Defense, Homeland Security, Energy, HHS, Interior, Labor, State, Transportation, Treasury, and VA; the Attorney General of the United States; the Administrators of EPA, GSA, and SBA; the Director of OPM; and the Chairman of NRC should take action to, within existing OMB reporting mechanisms, complete plans describing how the agency will achieve OMB's requirement to implement automated monitoring tools at all agency-owned data centers by the end of fiscal year 2018.

Agency: Department of the Treasury
Status: Open

Comments: In November 2019, the Department of the Treasury reported that it had 16 agency-owned data centers that the department planned to keep open. However, of those 16 data centers, only four had implemented the advanced monitoring tools. As of January 2020, we have not received a more recent update from the department about how it will meet the Data Center Optimization Initiative requirement to implement monitoring tools at the remaining 12 agency-owned data centers. We will continue to monitor the status of this recommendation.

Recommendation: To help strengthen information security controls over key financial and tax processing systems, and to more effectively implement security-related policies and plans, the Commissioner of Internal Revenue, in addition to addressing previously made but still unresolved recommendations from our prior audits, should implement the audit plans for the 12 systems and applications that we reviewed in the production computing environment.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, but the agency provided some evidence of its progress in implementing this recommendation. When IRS fully implements this recommendation, we will review relevant IRS actions.

Recommendation: To help strengthen information security controls over key financial and tax processing systems, and to more effectively implement security-related policies and plans, the Commissioner of Internal Revenue, in addition to addressing previously made but still unresolved recommendations from our prior audits, should ensure that system administrators and security operations analysts are alerted in the event of audit processing failures.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, nor did the agency provide evidence that it had implemented this recommendation. When IRS indicates that it has implemented this recommendation, we will review relevant IRS actions.

Recommendation: To help strengthen information security controls over key financial and tax processing systems, and to more effectively implement security-related policies and plans, the Commissioner of Internal Revenue, in addition to addressing previously made but still unresolved recommendations from our prior audits, should regularly update configuration standards and guidelines for network devices to incorporate recommendations from industry leaders, security agencies, and key practices from IRS partners to address known vulnerabilities applicable to IRS's environment.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, nor did the agency provide evidence that it had implemented this recommendation. When IRS indicates that it has implemented this recommendation, we will review relevant IRS actions.

Recommendation: To help strengthen information security controls over key financial and tax processing systems, and to more effectively implement security-related policies and plans, the Commissioner of Internal Revenue, in addition to addressing previously made but still unresolved recommendations from our prior audits, should implement a compliance verification application, or other appropriate process, to ensure configuration policies are comprehensively tested on the mainframe.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, nor did the agency provide evidence that it had implemented this recommendation. When IRS indicates that it has implemented this recommendation, we will review relevant IRS actions.

Recommendation: To help strengthen information security controls over key financial and tax processing systems, and to more effectively implement security-related policies and plans, the Commissioner of Internal Revenue, in addition to addressing previously made but still unresolved recommendations from our prior audits, should identify and review service organizations' listing of user controls that are deemed relevant and test those controls to appropriately draw conclusions about the operating effectiveness of controls.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of FY 2019 IRS financial statements, IRS did not submit this recommendation for closure, nor did the agency provide evidence that it had implemented this recommendation. When IRS indicates that it has implemented this recommendation, we will review relevant IRS actions.

Recommendation: To comply with improper payments reporting requirements and improve procedures related to processing PTC information on tax returns, the Commissioner of Internal Revenue should direct the appropriate officials to assess the program against applicable IPIA-defined thresholds and conclude on its susceptibility to significant improper payments, and revise the scope of its improper payments susceptibility assessment for the PTC program to include instances in which advance PTC is greater than or equal to the amount of PTC claimed on the tax return. If the program meets the IPIA definition for being susceptible to significant improper payments based on this assessment, estimate and report improper payments associated with the PTC program consistent with IPIA requirements.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: The Internal Revenue Service (IRS) partially agreed with this recommendation. On December 13, 2019, IRS provided us a status update and stated that its Research, Applied Analytics and Statistics division completed an analysis of net premium tax credit (PTC) using National Research Program (NRP) tax years 2015 and 2014 data during the 4th quarter of fiscal year 2019 and developed improper payment estimates using two different methodological approaches. However, IRS indicated that it did not publish these improper payment estimates in Treasury's Agency Financial Report for two reasons: (1) there is as yet insufficient NRP data to develop an estimate that is within the confidence interval and margin of error prescribed by the Office of Management and Budget for improper payments sampling, and (2) the Department of the Treasury (Treasury) wishes to engage with Health and Human Services' Centers for Medicare & Medicaid Services on the potential for developing a joint rate estimate for advance PTC and PTC. In addition, IRS noted that it had not yet determined whether this is even possible from a data compatibility standpoint. Further, IRS stated that while the estimates do not meet the statistical precision requirement, they do suggest that Net PTC would meet the criteria to be considered susceptible to significant improper payments. IRS indicated that when it last discussed this recommendation with GAO, it was suggested this recommendation would be closed once improper payment rates are published. However, IRS would now like GAO to consider closing this recommendation at this time given (1) the IRS's efforts to analyze potential improper payments, (2) Treasury's new approach to reporting, and (3) the need for additional years of data before a statistically valid estimate can be developed. We do not believe the recommendation should be closed at this time based on the three reasons IRS has listed above. However, we credit IRS for exploring ways to meet the intent of the recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: To comply with improper payments reporting requirements and improve procedures related to processing PTC information on tax returns, the Commissioner of Internal Revenue should direct the appropriate officials to assess and document the feasibility of approaches for incorporating information from the marketplaces on individuals who did not demonstrate that they met the eligibility requirements for citizenship or lawful presence in the tax compliance process. If determined feasible, IRS should work with Treasury to require marketplaces to periodically provide such information on individuals and use such information to recover advance PTC made for those individuals.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service (IRS) agreed with this recommendation. In December 2018, an IRS official indicated that IRS conducted a detailed review of the recommendation. IRS informed GAO that it is internally discussing an alternative way to address the recommendation to prevent premium tax credit to noncitizens. The IRS official indicated that IRS is reviewing this alternative with the Department of the Treasury and the Department of Health and Human Services' Centers for Medicare & Medicaid Services. IRS did not provide GAO with a time frame for its implementation. On December 13, 2019, IRS provided us a status update and stated that it had no new information for this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB, to improve corrective action plans for (1) treaties and international agreements, (2) additional audit procedures for intragovernmental activity and balances, and (3) the Reconciliation Statements so that they include sufficient information to address the control deficiencies in these areas effectively.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), we determined that this recommendation remained open. Treasury believes that its current remediation plan, including its various corrective action plans (CAPs), is comprehensive, appropriate, and effective, with robust and ongoing monitoring processes in place. However, we continue to note that the CAPs in these three areas do not include sufficient steps to effectively address related control deficiencies involving processes used to prepare the CFS. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The IRS Commissioner should direct the appropriate IRS officials to strengthen the process for reasonably assuring that the Internal Revenue Manual (IRM) is reviewed annually to align with the current control procedures and guidance being implemented by agency personnel. This should include a mechanism for reasonably assuring that program owner directors (1) review their respective program control activities and related guidance annually and timely update the IRM as needed, (2) document their reviews, and (3) utilize interim guidance and supplemental guidance correctly for their intended purposes.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. During fiscal year 2018, IRS created an annual Internal Revenue Manual (IRM) review and certification requirement to reasonably assure that all IRM sections align with the current control procedures and guidance that IRS personnel are implementing. In addition, the Small Business/Self-Employed (SB/SE) and Tax Exempt & Government Entities (TE/GE) organizations developed action plans to achieve substantial compliance with this requirement. During fiscal year 2019, the SB/SE organization completed its action plan; however, IRS officials stated that the TE/GE organization will complete its action plan during fiscal year 2020. Further, in fiscal year 2019, the Large Business & International organization reviewed and analyzed the results of its involvement in the annual IRM certification process. Based on the results of its analysis, the organization developed an action plan to achieve substantial compliance with the IRM review and certification requirement, which IRS officials stated it will complete by December 2021.

Recommendation: To further ensure that the new campaigns under LB&I's new approach for addressing tax compliance are implemented successfully, the Commissioner should document lessons learned from stakeholder input and past performance.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of February 2020, IRS officials said LB&I has developed and deployed the Campaign Development Form and the LB&I Taxpayer Registry to capture stakeholder input and feedback. The form documents all actions and a decision made on a particular campaign and is used to monitor real-time performance. While this will help IRS document lessons learned moving forward, IRS officials have not said how they would document lessons learned in the past.

Recommendation: To assist IRA owners in addressing challenges associated with investing their retirement savings in unconventional assets, the Commissioner of Internal Revenue should provide guidance to IRA owners and custodians on how to determine and document fair market value (FMV) for certain categories of hard-to-value unconventional assets. For example, IRS could consider updating Form 5498 instructions to custodians on how to document FMV for hard-to-value assets (e.g., last-known FMV based on independent appraisal, acquisition price) and provide guidance directed at account owners that provides examples of how to ascertain FMV for different types of unconventional assets.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed that guidance should be provided to IRA owners and custodians. In 2018, IRS stated that it had discussed this issue with Counsel and Treasury, and it was agreed that fair market value would be a part of the IRA guidance project under the 2017 Priority Guidance Plan. IRS officials said that these new regulations would address FMV for certain categories of hard-to-value unconventional assets. IRS further noted that it would be premature to modify instructions and guidance to custodians on how to determine and document FMV for hard-to- value assets until the new regulations are issued. In their October 2019 update of planned guidance projects, Treasury's Office of Tax Policy and IRS still listed planned IRA regulations. GAO will not close this recommendation as implemented until the new valuation guidance is issued.

Recommendation: To facilitate the analysis of gaps between current skills and future needs, the development of strategies for filling the gaps, and succession planning, the Secretary of the Treasury should require the Chief Information Officer, Chief Human Capital Officer, and other senior managers as appropriate to address the shortfalls in IT workforce planning noted in this report, including the following actions: (1) establish and maintain a workforce planning process; (2) develop competency and staffing requirements for all positions; (3) assess competency and staffing needs regularly; (4) assess gaps in competencies and staffing for all components of the workforce; (5) develop strategies and plans to address gaps in competencies and staffing for all components of the workforce; (6) implement activities that address gaps, including a career path for program managers and special hiring authorities, if justified and cost-effective; (7) monitor the department's progress in addressing competency and staffing gaps; and (8) report to department leadership on progress in addressing competency and staffing gaps for all components of the workforce.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: The department agreed with our recommendation and identified planned and ongoing efforts to address it. In October 2019 (in GAO-20-129), we reported the results of our evaluation of the department's progress in implementing the eight IT workforce planning activities. Specifically, we reported that it had fully implemented the activity to develop competency and staffing requirements, but had not yet fully implemented the remaining seven activities, including developing a workforce planning process. In January 2020, the department stated that its Office of the Chief Human Capital Officer and Office of the Chief Information Officer would be presenting a decision paper to the Human Capital Advisory Council that month to request approval and resources to complete an IT Competency Framework, conduct a competency assessment, and conduct a department-wide workforce planning study for the 2210 (IT management) occupation. We will continue to monitor the department's efforts to implement our recommendation.

Recommendation: To ensure that current vesting policies appropriately balance plans' needs and interests with the needs of workers to have employment mobility while also saving for retirement, Treasury should evaluate the appropriateness of existing maximum vesting policies for account-based plans, considering today's mobile labor force, and seek legislative action to revise vesting schedules, if deemed necessary. The Department of Labor could provide assistance with such an evaluation.

Agency: Department of the Treasury
Status: Open

Comments: As of August 2020, no action had been taken on this recommendation. Treasury did not report an evaluation of existing maximum vesting policies for account-based plans and reiterated its policy of not recommending any legislative change to Congress. Other priorities have delayed the agency's plan to work with IRS on guidance to update the regulations under Code section 411, which concern vesting schedules, as currently in effect. But those updates, even if they should occur in the future, cannot modify permitted vesting schedules because, as Treasury notes in its comments, the vesting rules were determined by Congress. Given that more than 84 million people hold 401(k) plan accounts and that median current tenure in the private-sector is about four years, the potential for these policies to significantly impact Americans' retirement security remains. We will close this recommendation when Treasury evaluates the appropriateness of current maximum vesting policies to help determine whether they unduly reduce the retirement savings of workers, regardless of whether the agency opts to seek legislative action.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Department of the Treasury
Status: Open

Comments: We reported that the Department of the Treasury had partially met the following two practices for establishing a complete software application inventory, (1) specifies basic application attributes, and (2) is regularly updated with quality controls to ensure reliability. In September 2017, the department provided evidence showing that it had taken steps to address these practices. Specifically, the department provided an export of its inventory, which showed that most of the systems listed contained a system description. According to department officials, some systems do not have a system description because the department's inventory policy allows bureaus to attach documents to the inventory, which include the system description, instead of populating the system description field. Further, the policy does not require a system description for systems in the disposal state. Moreover, the inventory did not include the business segment or function that the system supports. According to Treasury officials, the Bureau and Functional Unit fields within the inventory allow the department to map the systems to the business segments that they support. We followed up with the department to obtain this mapping. However, as of January 2020, the department had not provided it. We will continue to monitor the department's efforts to ensure that the inventory is regularly updated with quality controls to ensure its reliability.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and communicate Field Collection program and case selection objectives, including the role of fairness, in clear and measurable terms sufficient for use in internal control.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and described actions being taken to address it. In June 2019, IRS officials told us they were beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan and that Field Collection was chosen as one of the pilot programs for this initiative. In September 2020, IRS officials provided us draft program and case selection objectives and said they expected to complete actions to implement the recommendation in Fall 2020.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and implement performance measures clearly linked to the Field Collection program and case selection objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and outlined planned actions to address it. In June 2019, IRS officials told us they were beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan and that Field Collection was selected as one of the pilot programs for this initiative. In September 2020, IRS officials provided us draft program and case selection objectives and said they expected to complete actions to implement the recommendation in Fall 2020.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should incorporate program and case selection objectives into existing risk management systems or use other approaches to identify and analyze potential risks to achieving those objectives so that Field Collection can establish risk tolerances and appropriate control procedures to address risks.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and outlined planned actions to address it. In June 2019, IRS officials told us they were beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan and that Field Collection was selected as one of the pilot programs for this initiative. Since program and case selection objectives are necessary before appropriate risk management systems can be established, in September 2020, IRS officials said they expected to complete actions to implement program and case selection objectives in Fall 2020 but provided no anticipated completion date for actions to identify and analyze potential risks to those objectives and related risk management actions.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and communicate control procedures guidance for group managers to exercise professional judgment in the Field Collection program case selection process to achieve fairness and other program and collection case selection objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and described actions it will take to address it. In June 2019, IRS officials told us they are beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan. IRS selected Field Collection as one of the pilot programs for this initiative which would include actions to address this recommendation. In September 2020, IRS officials said they had revised the Internal Revenue Manual to guide group managers on elements to consider in selecting cases. We will update the status of IRS's actions to implement the recommendation after review of any documentation IRS provides.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and implement procedures to periodically monitor and assess the design and operational effectiveness of both automated and manual control procedures for collection case selection to assure their continued effectiveness in achieving program objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and outlined planned actions to address it. In June 2019, IRS officials told us they are beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan. IRS selected Field Collection as one of the pilot programs for this initiative. According to IRS officials, this pilot effort is ongoing and includes consideration of how the agency will address this recommendation. In September 2020, we met with IRS officials to discuss the status of actions to implement this recommendation but no anticipated completion date was provided.

Recommendation: To improve the certification of adequate incremental development, the Secretaries of Defense, Education, Health and Human Services, and the Treasury should direct their CIOs to establish a department policy and process for the certification of major IT investments' adequate use of incremental development, in accordance with OMB's guidance on the implementation of the Federal Information Technology Acquisition Reform Act.

Agency: Department of the Treasury
Status: Open

Comments: In September 2020, an official from the Department of the Treasury (Treasury) reported that the department had developed draft guidance to address our recommendation, but did not provide time frames for when the guidance would be finalized. Until the department establishes a CIO certification policy, Treasury will not be able to fully ensure adequate implement of, or benefit from, incremental development practices. We will continue to evaluate Treasury's progress in implementing this recommendation.

Recommendation: To enhance the budget process and to improve transparency, the Commissioner of Internal Revenue, to the extent feasible, should ensure that the CJ includes data by appropriation account on the amount of funding requested to maintain current services for each future state theme.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In its fiscal year 2017 congressional justification, IRS modified how its budget data were organized, including linking requested increases to future state themes, but did not clarify how current spending by themes relates to appropriation accounts. Information on current spending by theme and account is important to ensure transparency on the current funding levels to assist Congress in making informed budget decisions. As reported in October 2018 in GAO-19-108R, the themes under the Future State vision are now being pursued as part of IRS's strategic plan for fiscal years 2018 to 2022-issued in May 2018. IRS has been phasing out the use of the term Future State and did not include it in its fiscal year 2020 congressional justification. Including data on the themes in the strategic plan would provide additional transparency and improve the quality of the information available to Congress for budget deliberations.

Recommendation: As Treasury works with IRS to improve the quality and accuracy of budget data, the Secretary of the Treasury should ensure sufficient controls are in place to make certain that the information technology investment reports generated from the SharePoint Investment Knowledge Exchange are accurate. This includes, for example, taking steps to reduce the need for manual corrections to the data.

Agency: Department of the Treasury
Status: Open

Comments: As of November 2017, Treasury Department officials took steps to address the need to manually correct budget data for the fiscal year 2017 budget request. However, as of October 2019, we have not received documentation that they have done so for future budget years. Improved information would help Treasury and IRS better account for information technology resources. We will continue to monitor Treasury's progress.

Recommendation: To help IRS improve its process for determining IT funding priorities and to provide timely information on the progress of its investments, the Commissioner of IRS should direct the Chief Technology Officer to establish, document, and implement policies and procedures for selecting new and reselecting ongoing business systems modernization activities, consistent with IRS's process for prioritizing operations support priorities, which addresses (1) prioritization and comparison of IT assets against each other, (2) criteria for making selection and prioritization decisions, and (3) ensuring IRS executives' final funding decisions on IT proposals are based on IRS's prioritization process.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS provided GAO a slide deck titled "Prioritization Process for the Business Systems Modernization (BSM) Program/Projects" which describes a process for prioritizing BSM investments and capabilities within the investments. However, the slides were labeled "pre-decisional." In addition, they did not include specific procedures for prioritizing investments. In April 2020, IRS informed us that it had moved its target for fully implementing the recommendation to November 2020. We will continue to monitor IRS's efforts to implement the recommendation.

Recommendation: To help IRS improve its process for determining IT funding priorities and to provide timely information on the progress of its investments, the Commissioner of IRS should direct the Chief Technology Officer to modify existing processes for Foreign Account Tax Compliance Act (FATCA) and Return Review Program (RRP) for measuring work performed by IRS staff to incorporate best practices, including accounting for actual work performed and using the level of effort measure sparingly.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In May 2018, IRS told GAO it had implemented the recommendation. As supporting evidence, the agency provided an April 2018 update to its Investment Performance Tool user guide along with briefing slides specifying actions taken to modify its processes to measure work performed by IRS staff. We reviewed the evidence provided and determined that it was not sufficient to close the recommendation as implemented. Specifically, while the Investment Performance Tool user guide included updated procedures for measuring work performed by IRS staff which aligned with best practices, it did not clearly state that earned value (or work performed) during an iteration should always be based on to the percentage of planned features or user stories that were completed for that iteration. In addition, IRS did not provide evidence that it had used its updated procedures for the Return Review Program investment. We followed up with IRS to obtain this documentation. The agency subsequently provided the requested documentation to us and, as of July 2020, we were reviewing it to determine the extent to which it addresses the recommendation.

Recommendation: To strengthen efforts to identify and address noncompliance with the EITC, ACTC, and AOTC, the Commissioner of Internal Revenue should direct Refundable Credits Policy and Program Management (RCPPM) to take necessary steps to ensure the reliability of collections data and periodically review that data to (a) compute a collections rate for post-refund enforcement activities and (b) determine what additional analyses would provide useful information about compliance results and costs of post-refund audits and document-matching reviews.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: No executive action taken as of December 2019. The Internal Revenue Service (IRS) disagreed with this May 2016 recommendation. IRS raised concerns about the cost of studying collections data for post-refund enforcement activities. GAO recognizes that gathering collections data has costs and the data have limitations, notably that not all recommended taxes are collected. However, use of these data -- once IRS is able to verify their reliability -- could better inform resource allocation decisions and improve the overall efficiency of enforcement efforts. By not taking necessary steps to ensure the reliability of that data and to link them to tax assessments to calculate a collections rate, IRS lacks critical information. Periodic reviews of collections data and analyses could help IRS officials more efficiently allocate limited enforcement resources by providing a more complete picture about compliance results and costs.

Recommendation: To monitor whether existing investments are meeting the needs of their agencies, the Secretaries of Commerce and the Treasury should direct the respective agency CIO to ensure that required analyses are performed on investments in the operations and maintenance phase.

Agency: Department of the Treasury
Status: Open

Comments: The agency had no comment on the recommendation. In June 2017, Treasury provided an update on the IRS's efforts to ensure that operational analyses are performed on investments in the operations and maintenance phase. However, the recommendation is intended to address issues at the department level and not just at the IRS. In 2017, Treasury declined to provide an update at the department level. As of April 2020, Treasury has not responded to requests for updates. We will continue to monitor the implementation of this recommendation.

Recommendation: To address obsolete IT investments in need of modernization or replacement, the Secretaries of Agriculture, Commerce, Defense, Energy, Health and Human Services, Homeland Security, State, the Treasury, Transportation, and Veterans Affairs; the Attorney General; and the Commissioner of Social Security should direct their respective agency CIOs to identify and plan to modernize or replace legacy systems as needed and consistent with OMB's draft guidance, including time frames, activities to be performed, and functions to be replaced or enhanced.

Agency: Department of the Treasury
Status: Open

Comments: The agency had no comment on the recommendation. In June 2017, Treasury provided an update on the IRS's efforts to modernize the IRS's legacy systems. However, the recommendation is intended to address issues at the department level and not just at the IRS. In 2017, Treasury declined to provide an update at the department level. As of April 2020, Treasury has not responded to requests for updates. We will continue to monitor the implementation of this recommendation.

Recommendation: The IRS Commissioner should direct the appropriate IRS officials to determine the reason(s) why staff did not always comply with IRS's established policies and procedures related to initiating, monitoring, and reviewing the monitoring of manual refunds and, based on this determination, establish a process to better enforce compliance with these requirements.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2019, we identified instances where staff did not comply with IRS's policies and procedures related to monitoring and reviewing the monitoring of manual refunds. IRS officials stated that the Wage and Investment (W&I) organization determined that a fully automated process to perform monitoring of manual refunds is the optimal solution to address, at an enterprise level, deficiencies associated with reliance on employees to monitor refunds in process and take appropriate action when potential duplicate or erroneous refund conditions are encountered. In addition, IRS officials indicated that the W&I organization will develop business requirements and request programming through the Unified Work Request process; however, limited resources and competing priorities prevent the identification of an implementation date. As a result, IRS will place this recommendation on hold until an implementation date is known.

Recommendation: The IRS Commissioner should direct the appropriate IRS officials to identify the cause of and implement a solution for dealing with the periodic backlogs of ICO inventory that is hampering the performance of quality reviews.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2019, the Wage and Investment (W&I) organization determined that periodic backlogs of Input Correction Operation (ICO) inventory were caused by a combination of factors, such as systemic issues, fluctuations in projected filings, and hiring challenges. IRS officials stated that the W&I organization has also identified and implemented several strategies to address ICO backlogs and mitigate the impact on the quality review program, including hiring more staff in ICO functions, using seasonal employees, cross-training, overtime, transferring of work, and updating the Internal Revenue Manual. Since IRS provided us with this information near the end of our fiscal year 2019 audit in September 2019, we will evaluate IRS's actions to address this recommendation during our fiscal year 2020 audit.

Recommendation: The IRS Commissioner should direct the appropriate officials to establish and implement monitoring procedures designed to reasonably assure that the key detailed information for tangible capitalized P&E is properly recorded and updated in the KISAM system.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS established the Asset Management Program Monitoring and Review procedure, effective October 1, 2016, for performing quarterly sample reviews of Information Technology (IT) assets in the Knowledge, Incident/Problem, Service Asset Management (KISAM) system. In September 2017, IRS also revised the Internal Revenue Manual to require Facilities Management and Security Services territory managers or section chiefs to review KISAM key data elements for non-IT assets to verify that they are correct and updated. However, during our fiscal year 2018 floor-to-book inventory testing, we identified exceptions where (1) a key detailed information element (e.g., building code) for property and equipment (P&E) assets was not properly recorded in KISAM and (2) P&E assets found on the floor did not have asset records in KISAM. We will conduct inventory testing and follow-up to determine the status of this issue during our audit of IRS's fiscal year 2020 financial statements.

Recommendation: To help ensure continued progress in the implementation of effective cloud computing SLAs, the Secretaries of Health and Human Services, Homeland Security, Treasury, and Veterans Affairs should direct appropriate officials to develop SLA guidance and ensure key practices are fully incorporated as the contract and associated SLAs expire.

Agency: Department of the Treasury
Status: Open

Comments: In August 2020, an official from the Department of the Treasury (Treasury) reported that the department was in the process of addressing the recommendation. Specifically, a Treasury official reported that the department's Office of the Chief Information Officer was working with the Treasury Senior Procurement Executive to incorporate the key practices identified in our report into Treasury acquisition policy, which was expected to be completed by January 2021. We will continue to monitor the status of this recommendation.

Recommendation: In addition to implementing our previous recommendations, to more effectively implement security-related policies and plans, the Commissioner of Internal Revenue should update system and application audit plans based on the current version of referenced policies and guidelines and when significant changes are made to a system or application.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During GAO's audit of IRS' FY 2019 financial statements, IRS indicated that it had not yet implemented this recommendation. When the agency indicates that it has implemented this recommendation, we will review its actions.

Recommendation: The Commissioner of Internal Revenue should direct the referral programs to establish a mechanism to coordinate on a plan and timeline for developing a consolidated, online referral submission in order to better position IRS to leverage specialized expertise while exploring options to further consolidate the initial screening operations.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, IRS had taken some action to establish a mechanism to coordinate on a plan and timeline for developing a consolidated, online referral submission, as GAO recommended in its February 2016 report. IRS established a cross-functional team in February 2016 to comprehensively review IRS's referral programs. Among other things, the team has explored options to consolidate the initial screening operations and determine the scope and complexity for moving the referral process to an online format. According to IRS, an electronic submission process is expected to provide better access to the program and reduce the burden associated with making a written report or referral. In November 2016, the cross-functional team requested information technology resources for fiscal year 2019 to develop an online system which could potentially replace four separate referral forms, filter out incomplete referrals, and electronically route referrals for further IRS action. IRS assessed options for consolidating all forms for the various referral programs and determined that consolidating them to a single form was not feasible because of the technical nature and complexity of the various referral types. The cross-functional team had worked with IRS On Line Services to develop an online application prototype and was considering the cost-effectiveness of a commercial off-the-shelf product. According to IRS, the online application will make it easier for the public to report possible tax violations. Also, the online system will improve efficiency in coordination and provide reports that will be incorporated into the quarterly coordination meetings of the new cross-division referral coordination committee. As of January 2020, IRS was still considering funding for online referral submission development. IRS estimated that a commercial off-the-shelf product would cost about $2 million with an online referral capacity operational within one year. IRS said it will consider further consolidating the referral programs once the online application is in place. Without continued progress on efforts to consolidate referral intake, IRS faces continued inefficiencies in receiving and processing referrals as well as public confusion caused by trying to choose among multiple forms.

Recommendation: To improve performance management of taxpayer services, the Secretary of the Treasury should update the Department's performance plan to include overage rates for handling taxpayer correspondence as a part of Treasury's performance goals.

Agency: Department of the Treasury
Status: Open

Comments: In May 2017, Treasury officials told us that they planned to include correspondence data as part of Treasury's fiscal year 2018 annual performance plan and fiscal year 2016 annual performance report. While the fiscal year 2016 performance report included data on correspondence overage rates, as of August 2019, Treasury has not included correspondence overage as part of its performance goals. We continue to believe this recommendation is valid.

Recommendation: To better monitor and provide a basis for improving the effectiveness of cybersecurity risk mitigation activities, informed by the sectors' updated plans and in collaboration with sector stakeholders, the Secretary of the Treasury should direct responsible officials to develop performance metrics to provide data and determine how to overcome challenges to monitoring the financial services sector's cybersecurity progress.

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury, as the sector-specific agency for the financial services sector, continues to develop initiatives intended to enhance the sector's cybersecurity. In 2016, Treasury developed and promulgated a set of seven fundamental elements or critical building blocks for sector stakeholders' cybersecurity, disseminated a template for financial sector cyber exercises, and promoted the NIST Cybersecurity Framework throughout the sector. However, they have not provided evidence of metrics implemented, and the 2015 sector-specific plan does not include specific metrics to track and report on their effectiveness. We will continue to monitor Treasury's efforts to create specific metrics and related reports on the sector's cybersecurity progress.

Recommendation: To improve the department's IT savings reinvestment plans, the Secretary of the Treasury should direct the CIO, as part of any future update to the department's IRM strategic plan or equivalent document, to include information regarding the approach to reinvesting savings from the consolidation of commodity IT resources (including data centers) in accordance with OMB's guidance.

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury has not yet taken steps to implement our recommendation. Specifically, as of May 2020, the department had not yet updated its Information Resources Management (IRM) Strategic Plan to include information regarding the approach to reinvesting savings from the consolidation of commodity IT resources. In addition, in an April 2020 e-mail, the department's GAO liaison stated that Treasury had not yet updated its IRM strategic plan, but might have other, more current, strategic documents that described its reinvestment plans. The department expects to provide an update in June 2020. We will continue to evaluate the department's progress in implementing this recommendation.

Recommendation: To improve the department's IT savings reinvestment plans, the Secretary of the Treasury should direct the CIO to ensure that the department's integrated data collection submission to OMB includes, for all reported initiatives, complete plans to use any resulting cost savings and avoidances from OMB-directed IT reform-related efforts.

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury has not yet taken steps to implement our recommendation. Specifically, as of May 2020, the department's quarterly integrated data collection submission to the Office of Management and Budget did not include reinvestment plans for 15 of the 27 reported cost savings and avoidance initiatives. For example, the department reported about $100 million in cost avoidances from its data center consolidation and optimization initiatives, but did not provide information regarding how it plans to reinvest these avoidances. The department expects to provide an update in June 2020. We will continue to evaluate the department's progress in implementing this recommendation.

Recommendation: To help ensure the IRS collection program meets its mission and selects cases fairly, the Commissioner of Internal Revenue should establish, document, and implement objectives for the collection program and ACS, and define the key term of "fairness" as it applies to collection activities, which can be communicated to IRS staff.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In January 2017, IRS supplied documentation on how it had established a fairness policy statement, which is incorporated into the Internal Revenue Manual, communicated to staff in email, and provided via a powerpoint presentation to staff. IRS also established and documented collection program objectives as part of its FY2017 Collection Program Letter. In October 2017, IRS shared additional draft documentation with GAO that would align SB/SE objectives with objectives from its FY2017 Collection Program Letter as well as other information such as performance measures. Following our assessment and request for more information, in November 2017, IRS provided a document intended to define certain collection program objectives, but it did not clearly define fairness or collection program and ACS objectives. We provided IRS feedback on the document in November 2017, January 2018, and July 2018. In June 2019, IRS officials provided information on an ongoing IRS initiative to identify objectives for various programs, but the collection program with its automated case processes was not among the pilot programs. As a result, any actions to implement the recommendation will be stalled until the initiative's pilot programs are complete. As of December 2019, IRS had not provided a planned date when it expects to complete them. We will update the status of IRS's plans and actions to implement the recommendation after we complete review of any documents IRS provides, as we requested in December 2019.

Recommendation: To help ensure the IRS collection program meets its mission and selects cases fairly, the Commissioner of Internal Revenue should establish, document, and implement clear objectives for the collection program and enterprise-wide case categorization and routing processes, and define key terms, such as "fairness" and "risk."

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. In March 2017, IRS provided documentation of actions taken on the recommendation, but the documents did not clearly define and communicate program objectives sufficient for internal control to support the collection program mission, including fairness in case selection. In November 2017, IRS provided additional documentation but it did not address case selection fairness or other objectives for the collection program and enterprise-wide case categorization and routing processes. In June 2019, IRS officials provided information on an ongoing IRS initiative to identify objectives for various programs, but the collection program with its case processes was not among the pilot programs. As a result, any actions to implement the recommendation will be stalled until the initiative's pilot programs are complete. As of November 2019, IRS had not provided a planned date when it expects to complete them. We will update the status of IRS's plans and actions to implement the recommendation after we complete review of any documents IRS provides, as we requested in December 2019.

Recommendation: To help ensure the IRS collection program meets its mission and selects cases fairly, the Commissioner of Internal Revenue should build upon existing Enterprise Risk Management (ERM) guidance to help managers identify internal and external risks to collection program objectives, and better understand how long-standing risk processes integrate with new ERM approaches; incorporate this guidance into existing or future ERM or collection program risk assessment processes.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. In November 2016, IRS provided documentation of risk management training for managers intended to assist them in understanding their responsibilities for identifying internal and external risks to collection program objectives. However, since objectives for the collection program and fairness were not yet clearly defined, such guidance could not be effectively incorporated into risk assessment processes. In March 2017, IRS provided documentation of further actions taken, but the documents did not clearly define and communicate program objectives sufficient for internal control, including risk assessment. In November 2017, IRS provided additional documentation but it did not address case selection fairness or other objectives for the collection program. In June 2019, IRS officials provided information on an ongoing IRS initiative to identify objectives for various programs, but the collection program was not among the pilot programs. As a result, any actions to implement the recommendation will be stalled until the initiative's pilot programs are complete. As of November 2019, IRS had not provided a planned date when it expects to complete them. We will update the status of IRS's plans and actions to implement the recommendation after we complete review of any documents IRS provides, as we requested in December 2019.

Recommendation: To strengthen oversight of the individual shared responsibility and premium tax credit provisions, the Commissioner of Internal Revenue should assess whether or not the data received from the health insurance marketplaces are sufficiently complete and accurate to enable effective correction of tax returns at-filing based on matching with the marketplace data and, if the assessment determines that such corrections would be effective, seek legislative authority to correct tax returns at-filing based on the marketplace data.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service (IRS) agreed with GAO's recommendation. IRS reports that the quality of data submitted by health insurance marketplaces has improved since the 2015 return filing season, and it continues to use its correspondence process for resolving discrepancies between marketplace data and that reported by the taxpayer after the return has been filed. IRS has not considered requesting legislative authority to correct tax returns at the time of filing based specifically on discrepancies between the data submitted by the health insurance marketplace and reported by the taxpayer. Agency officials believe that would be premature at this time. They noted that a broader legislative initiative has already been proposed that would grant IRS with correctable error authority in cases where the information provided by the taxpayer does not match the information contained in government databases. Should this broad authority be granted in the future, IRS will then consider how to approach correction of tax returns at the time of filing based on discrepancies with health insurance marketplace data. Such authority was also included in the Administration's 2021 budget.

Recommendation: To strengthen oversight of the individual shared responsibility and premium tax credit provisions, the Commissioner of Internal Revenue should evaluate IRS efforts to collaborate and communicate with key external stakeholders to inform efforts related to implementation of the new 2015 PPACA requirements.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: The Internal Revenue Service (IRS) agreed with GAO's recommendation but has not yet initiated an evaluation of collaboration and communication efforts with external stakeholders. IRS currently utilizes informal feedback processes to share information and identify opportunities for improvement with external stakeholders in implementing the shared responsibility payment and premium tax credit provisions. We continue to encourage IRS to evaluate its collaboration and communication efforts, but such an evaluation has not yet happened. We will continue to monitor IRS efforts.

Recommendation: The Commissioner of IRS should direct the appropriate IRS officials to establish procedures to monitor whether non-IRS contractors with unescorted physical access to IRS facilities are receiving unauthorized access awareness training.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2018, Facilities Management and Security Services (FMSS) established training requirements for non-IRS contractors with unescorted physical access to IRS facilities and communicated these requirements to its employees. However, FMSS did not establish procedures to monitor whether these non-IRS contractors receive the required unauthorized access awareness training. In addition, during our fiscal year 2019 audit, we found instances in which non-IRS contractors with unescorted physical access to an IRS facility did not complete the required training.

Recommendation: The Commissioner of IRS should direct the appropriate IRS officials to determine why staff did not consistently comply with IRS's existing requirements for the final candling of receipts at service center campuses and lockbox banks, including logging remittances found during final candling on the final candling log at the time of discovery, safeguarding the remittances at the time of discovery, transferring the remittances to the deposit unit promptly, and passing one envelope at a time over the light source, and based on this determination, establish a process to better enforce compliance with these requirements.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. During fiscal year 2017, IRS held a meeting with Submission Processing executives, staff, and the Receipt and Control Operation managers from all five service center campuses (SCC), and as a result of the meeting, IRS developed an action plan to resolve the residual risks associated with candling at the SCCs. IRS officials stated that during fiscal year 2020, it will complete the developed action plan.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not implemented the recommendation. In August 2019, the department stated that it had established enterprise-wide procurement vehicles for mobile devices. However, as of January 2020, the department had not demonstrated that it has an inventory of mobile devices and associated service information. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not demonstrated that it has implemented the recommendation. In August 2019, an official from the department's Office of the Chief Information Officer stated that the department was collecting and analyzing information on voice and data utilization. However, as of January 2020, the department had not demonstrated that it had established procedures in accordance with our recommendation. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: In addition to implementing our previous recommendations, to effectively implement key elements of the IRS information security program, the Commissioner of Internal Revenue should ensure that control testing methodology and results fully meet the intent of the control objectives being tested.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: During our audit of IRS's FY 2019 financial statements, , the agency submitted this recommendation for closure, but our testing determined it should remain open. Subsequently, IRS updated its anticipated closure date for the recommendation to July 2020. As part of our FY 2020 audit, we will continue to monitor IRS's progress in ensuring that its control testing methodology and results fully meet the intent of the control objectives being tested.

Recommendation: In addition to implementing our previous recommendations, to effectively implement key elements of the IRS information security program, the Commissioner of Internal Revenue should update the remedial action verification process to ensure actions are fully implemented.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: During the audit of IRS's FY 2019 financial statements, the agency submitted this recommendation for closure, but our testing determined that it should remain open. While IRS continued to make positive steps to address our recommendation, the agency's implementation of corrective actions did not fully address it. As part of our FY 2020 audit, we will continue to monitor IRS's progress in strengthening its remedial action verification process and ensuring its corrective actions are fully implemented.

Recommendation: To improve the reliability and reporting of investment performance information and management of selected major investments, the Commissioner of the IRS should direct the Chief Technology Officer to modify reporting of the Affordable Care Act Administration testing status to senior management to include a comprehensive report on all impacted systems--including an explanation for why impacted systems were not tested at a particular level--and ensure this reporting is aligned with the manner in which testing is being performed.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS disagreed with this recommendation at the time we made it stating that it followed a rigorous risk-based process for planning the tests of ACA-impacted systems, including the types and levels of testing, and that it had comprehensive reporting for the filing season 2015 release, which included ACA impacted systems. However, as noted in our report, our review of ACA Testing Review Checkpoint reports and filing season reports, which officials stated were used to provide comprehensive reports to senior managers, did not identify the status of testing for all systems impacted by ACA Releases 5.0 and 6.0. In September 2017, IRS finished developing ACA and the investment transitioned to the operations and maintenance phase. We followed up with IRS to determine the extent to which it might be implementing the recommendation in light of this transition. In response, in June and December 2019 , IRS provided some documentation, including systems acceptance test plans and end-of-test results reports for ACA releases completed since September 2017. We reviewed the documentation provided and determined that it did not provide a status of testing for all systems impacted as we recommended. As of September 2020, we were following up with IRS to determine if the agency has other documentation provided to senior managers that addresses our recommendation.

Recommendation: To provide participants with useful information and to provide for lump sums that are based on up-to-date assumptions, Treasury should review its regulations governing the information contained in relative value statements to ensure these statements provide a meaningful comparison of all benefit options, especially in instances where the loss of certain additional plan benefits may not be disclosed.

Agency: Department of the Treasury
Status: Open

Comments: Treasury generally agreed with this recommendation but did not provide specific comments on plans to address it. As of August 2019, Treasury has not addressed this recommendation.

Recommendation: To provide participants with useful information and to provide for lump sums that are based on up-to-date assumptions, Treasury should review the applicability and appropriateness of allowing sponsors to select a "lookback" interest rate for use in calculating lump sums associated with a lump sum window that can serve to advantage the interests of the sponsor.

Agency: Department of the Treasury
Status: Open

Comments: Treasury generally agreed with this recommendation but did not provide specific comments on plans to address it. As of August 2019, Treasury has not addressed this recommendation.

Recommendation: To provide participants with useful information and to provide for lump sums that are based on up-to-date assumptions, Treasury should establish a process and a timeline for periodically updating the mortality tables used to determine minimum required lump sums-- including a means for monitoring when experts' views may indicate that mortality tables may have become outdated, and for taking expedited action if warranted.

Agency: Department of the Treasury
Status: Open

Comments: Treasury generally agreed with this recommendation but did not provide specific comments on plans to address it. As of August 2019, Treasury has not addressed this recommendation.

Recommendation: To help ensure that FSOC is comprehensively identifying and considering companies, the Secretary of the Treasury in consultation with FSOC members, should establish procedures to evaluate companies in Stage 2 and Stage 3 under both statutory determination standards when an evaluation in either stage concludes that a company does not meet one of the standards, or document--on a company-specific or more general basis--why the second determination standard is not relevant for determination evaluations.

Agency: Department of the Treasury: Financial Stability Oversight Council
Status: Open

Comments: In December 2019, FSOC adopted final interpretive guidance that revises its approach to evaluating and determining whether to designate nonbank financial companies. The final revised guidance prioritizes an activities-based approach to identifying and addressing potential risks to financial stability and states that FSOC will pursue company-specific determinations only if the activities-based approach is not sufficient. The guidance further states that if FSOC does consider a company-specific determination, its evaluation will focus primarily on the first determination standard. The guidance does not indicate the establishment of procedures to evaluate companies under both determination standards for the purpose of comprehensively identifying and considering companies or to document why the other standard is not relevant. We will continue to monitor FSOC's implementation of the guidance and any additional actions that may be responsive to our recommendation.

Recommendation: To help ensure that FSOC is comprehensively identifying and considering companies, the Secretary of the Treasury in consultation with FSOC members, should develop a process to collect information necessary for Stage 1 analysis, as appropriate, from certain nonbank financial companies for which public or regulatory information is otherwise unavailable. For example, FSOC could have companies for which such information is unavailable and that meet certain characteristics (such as quantitative thresholds similar to those used in Stage 1) report necessary information to the Office of Financial Research.

Agency: Department of the Treasury: Financial Stability Oversight Council
Status: Open

Comments: In December 2019, FSOC adopted final interpretive guidance that revises its approach to evaluating and determining whether to designate nonbank financial companies. The final revised guidance introduces a new stage 1 of the designation process in which FSOC would notify a nonbank financial company under review and consider available public and regulatory information. While the guidance states that a company under review in stage 1 may submit information it deems relevant to the evaluation, FSOC would not require the company to submit information during stage 1. We will continue to monitor FSOC's implementation of the revised guidance and any additional actions that may be responsive to our recommendation.

Recommendation: To improve IRS's ability to detect and pursue noncompliance associated with undervalued assets sheltered in IRAs and prohibited transactions, the Commissioner of Internal Revenue should work in consultation with the Department of the Treasury on a legislative proposal to expand the statute of limitations on IRA noncompliance to help IRS pursue valuation-related misreporting and prohibited transactions that may have originated outside the current statute's 3-year window.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with GAO's October 2014 recommendation on IRAs with large balances and said it had discussed the recommendation with Treasury's Office of Tax Policy and Benefits Tax Counsel. Consequently, IRS said Treasury is aware of IRS's willingness to support legislative efforts in this area. Ultimately, Treasury reviews all tax legislative proposals and presents the administration's tax proposals for congressional consideration. However, Treasury has not released a legislative proposal as of January 2020. GAO reported in January 2020 that IRS examination said the 3-year statute of limitations for assessing taxes owed remains an obstacle in pursuing noncompliance that may span the many years of an IRA investment.

Recommendation: To help taxpayers better understand compliance risks associated with certain IRA choices and improve compliance, the Commissioner of Revenue should, building on research data on IRAs holding nonpublic assets, identify options to provide outreach targeting taxpayers with nonpublic IRA assets and their custodians, such as reminder notices that engaging in prohibited transactions can result in loss of the IRA's tax-favored status.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS has taken some action to provide general outreach and as of January 2020 has ongoing compliance research that could inform additional opportunities to target outreach to taxpayers with nonmarketable IRA assets at greater risk of noncompliance, as GAO recommended in October 2014. In June 2016, IRS published information on IRS.gov outlining the new information to be reported for nonmarketable IRA assets and included a general caution that IRAs with nonmarketable investments or assets under direct taxpayer control may be subject to a heightened risk of committing prohibited transactions. This caution is similar to those that IRS added to its publications about IRA contributions and distributions. It is a step toward helping taxpayers better understand which investments pose greater risks. In February 2018, IRS completed its first analysis of new information about the amounts and types of nonpublic IRA assets from Form 5498 for tax year 2016 that was filed in 2017. In October 2019, IRS also completed an interim compliance research project examining a sample of tax returns to determine whether the beneficiary of the IRA caused his or her IRA to engage in a prohibited transaction. As of January 2020, IRS was conducting a new compliance research project examining IRAs holding certain nonpublic asset types. The compliance research began in February 2019 and is to be completed in January 2021. Unless IRS augments outreach based on reliable data about nonpublicly traded IRA investments, taxpayers at greater risk may not be able to ensure compliance with rules on prohibited transactions.

Recommendation: The Commissioner of Internal Revenue should track the results of large partnerships audits: (a) define a large partnership based on asset size and number of partners; (b) revise the activity codes to align with the large partnership definition; and (c) separately account for field audits and campus audits.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS has taken actions to implement GAO's September 2014 recommendation, but the definition IRS provided is not likely to help it analyze results from audits of the very large partnerships that GAO's report covered. In September 2017, IRS defined large partnerships as those with assets of $10 million or more, without regard to the number of partners. With changes to the Tax Equity and Fiscal Responsibility Act of 1982 partnership audit procedures and enactment of the Bipartisan Budget Act of 2015 (BBA) (sections 1101 and 1102 of Public Law 114-74), IRS officials said that the number of partners is no longer a critical factor when defining a large partnership. IRS is correct that the number of partners is no longer relevant to this statutory definition of large partnership. The recently eliminated Electing Large Partnerships audit procedures had defined large partnerships as those with 100 or more direct partners in a taxable year. Even so, IRS's new definition of large partnerships is limited compared to large corporations. IRS has defined eight asset categories for tracking large corporation audit results while it has one for large partnerships, which vary widely based on asset amounts and complex structures. As GAO reported, during tax years 2002 through 2011, the number of large partnerships with 100 or more direct and indirect partners as well as $100 million or more in assets more than tripled to 10,099, some of which had assets exceeding $5 billion. In tax year 2011, more than two-thirds of these large partnerships had at least 100 or more pass-through entities as direct and indirect partners. Until IRS develops a more expansive definition of large partnerships, IRS may have challenges analyzing the results from its audits of large partnerships. As of January 2020, IRS had revised its activity codes to create a category for its large partnership definition as well as created a reporting and monitoring structure for its new definition to track the results from auditing large partnerships. IRS also created reports to regularly track audit results (e.g., dollar amounts, hours, number of returns, campus versus field locations) for this one category. IRS officials said they plan to use the reports to analyze audit results to identify opportunities to better plan and use resources in auditing large partnerships but this outcome may not be possible with the statutory changes governing partnerships. Given the challenges involving such audits, IRS officials said they have started efforts to better select partnership returns for audits based on compliance risk. They said these efforts will extend at least through fiscal year 2021. Thus, IRS does not yet know whether the audit results will be sufficient to analyze ways to better plan and use IRS audit resources as well as to analyze noncompliance risk for its new definition. IRS's analysis may not be able to achieve these ends with only one asset category to cover the wide range of asset amounts above $10 million.

Recommendation: The Commissioner of Internal Revenue should analyze the audit results by these activity codes and types of audits to identify opportunities to better plan and use IRS resources in auditing large partnerships.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, IRS created a reporting and monitoring structure for its new large partnership definition to track the results from auditing large partnerships. IRS also created reports to regularly track audit results (e.g., dollar amounts, hours, number of returns, campus versus field locations) for this one category. IRS officials said they plan to use the reports to analyze audit results to identify opportunities to better plan and use resources in auditing large partnerships but this outcome may not be possible with the statutory changes governing partnerships. Thus, IRS does not yet know whether the audit results will be sufficient to analyze ways to better plan and use IRS audit resources as well as to analyze noncompliance risk for its new definition. IRS's analysis may not be able to achieve these ends with only one asset category to cover the wide range of asset amounts above $10 million. Given these and other challenges involving such audits, IRS officials said they have started efforts to better select partnership returns for audits based on compliance risk. They said these efforts will extend at least through fiscal year 2021.

Recommendation: The Secretary of the Treasury should issue guidance on how funding or assistance from other government programs can be combined with the NMTC including the extent to which other government funds can be used to leverage the NMTC by being included in the qualified equity investment.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: The Department of the Treasury (Treasury) has not issued guidance on how funding or assistance from other government programs can be combined with the NMTC, as GAO recommended in July 2014. However, Treasury has taken steps toward addressing this action. The Community Development Financial Institutions Fund (CDFI Fund), which administers the NMTC program, completed new empirical research assessing the extent to which other government programs are being combined with the NMTC. The findings of this research (issued in August 2017) indicate that some NMTC projects, especially those using other government funds to leverage the NMTC, potentially received more government funds than needed to close a financing gap. As of January 2020, CDFI Fund officials said that they intend to solicit public comments on additional data to be collected from the Community Development Entities before using these data to identify NMTC-financed projects that may have excessive public funding. Once fully implemented, these additional actions could help ensure that low-income community projects do not receive more government assistance than required to finance a project.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB, to establish and implement policies and procedures for accounting for and reporting all significant General Fund activity and balances, obtaining assurance on the reliability of the amounts, and reconciling the activity and balances between the General Fund and federal entities.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Over the past few years, Treasury has made progress by (1) improving the accounting for and reporting of General Fund transactions and balances, (2) working to resolve significant differences between the General Fund and federal entity trading partners, and (3) including differences involving General Fund activity and balances in the quarterly scorecard process. However, significant differences between the General Fund and federal entity trading partners existed as of the end of fiscal year 2019. Also, Treasury continues to work on obtaining audit assurance on the activity and balances. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB, to establish a formalized process to require the performance of additional audit procedures specifically focused on intragovernmental activity and balances between federal entities to provide increased audit assurance over the reliability of such information.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury did not perform corrective actions in FY 2019 to address this recommendation. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: To help minimize Treasury borrowing costs over time by better understanding and managing the risks posed by Treasury floating rate notes and by enhancing demand for Treasury securities, the Secretary of the Treasury should track and report an additional measure of the length of the portfolio that captures the interest rate reset frequency of securities in the portfolio.

Agency: Department of the Treasury
Status: Open

Comments: Treasury agreed with our recommendation but has not yet introduced this additional metric. In July 2019 we reached out to Treasury to obtain information on the status of this recommendation. As of October 2019, no new metric has been publicly introduced.

Recommendation: Because ROI provides insights on the productivity of a program and is one important factor in making resource allocation decisions, the Commissioner of Internal Revenue should calculate actual ROI for implemented initiatives, compare the actual ROI to projected ROI, and provide the comparison to budget decision makers for initiatives where IRS allocated resources.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: No executive action taken as of December 2019. While IRS agreed that having actual ROI data for implemented initiatives would be useful, it did not believe it was feasible to produce such estimates, as GAO recommended in June 2014. GAO maintains that IRS should be able to provide some information on past initiatives, such as whether funds requested were used in the manner originally proposed. As of December 2016, IRS officials reported there is no timeline for full implementation. Comparing projected ROI to actual ROI can help hold managers and IRS accountable for the funding received.

Recommendation: To improve the usefulness, reliability, and comparability of Form 5500 data for all stakeholders while limiting the burden on the filing community, the Secretaries of DOL and Treasury, and the Director of PBGC should consider implementing the findings from our panel when modifying plan investment and service provider fee information, including: (1) revising Schedule H plan asset categories to better match current investment vehicles and provide more transparency into plan investments; (2) revising the Schedule of Assets attachments to create a standard searchable format; (3) developing a central repository for EIN and PN numbers for filers and service providers to improve the comparability of form data across filings; (4) clarifying Schedule C instructions for direct, eligible indirect, and reportable indirect compensation so plan fees are reported more consistently and, as we recommended in the past, better align with the 408(b)(2) fee disclosures; and (5) simplifying and clarify Schedule C service provider codes to increase reporting consistency.

Agency: Department of the Treasury
Status: Open

Comments: In 2016, DOL in coordination with IRS and PBGC has implemented cross-year edit checks into EFAST in an effort to improve the consistency in key identifying information, such as the EIN, Plan Number and Plan Name. These checks aim to verify identifying information submitted on the Form 5500 and to notify the filer and government agencies of inconsistencies, which affords filers the ability to review and modify crucial identifying information prior to submission. Additionally, if the filer chooses to submit data that may contain inconsistent information, the edit test indicators provide government users with the ability to more readily detect filings containing potential errors in the identifying information for further review and correction. IRS has also collaborated with DOL and PBGC in issuing proposed revisions to the Form 5500 Series in a Notice of Proposed Forms Revisions. The deadline for public comment ended December 5, 2016. The proposed revisions in the Notice reflect efforts of DOL, IRS, and PBGC to improve the Form 5500 reporting for filers, the public, and the agencies by among other things, (1) modernizing financial information filed by regarding plans; (2) updating fee and expense information on plan service providers with a focus on harmonizing annual reporting requirement with DOL's 408(b)(2); financial disclosure requirements; (3) enhancing the ability to mine data files on annual returns/reports; and (4) improving compliance with ERISA and the Code through selected new questions regarding plan operation, service provider relationships, and financial management of plans. Specifically, in the Notice the agencies propose that Schedule H report assets held and assets disposed of during the plan year to provide more transparency and a more complete report of plan's annual investments and that that the Schedule of Assets be revised to require reporting of assets held through direct filing entities. Additionally, the agencies are proposing revisions to the Schedule H, Schedule of Assets that require filers to complete standardized Schedules in a format enabling data to captured electronically. This requirement would enable importation of information from the Schedules of Assets into structured databases that DOL would make available to the public from each year's Form 5500 Series filing. The agencies are also proposing to add clarifying definitions and instructions to improve the consistency of Form 5000 responses. This includes clarification of conventions to identify filers by name and identifying numbers to help mitigate confusion about legal identities with which plans transact and improve comparability of form data across filings. In addition, the agencies also propose revisions to Schedule C to require reporting of indirect compensation for service provider subject to 408(b)(2) requirements and for all compensation that is required to be disclosed. Further, the Schedule C instructions would be clarified to track more closely with the language of the 408(b)(2) regulations. The agencies are also proposing to limit the codes for Schedule C and requiring the filer to more simply indicate all types of services for each provider identified. Additionally, they propose a requirement to indicate all the types of fees/compensation separately when reporting sources of compensation from parties other than plan and plan sponsor. The agencies are reviewing the public comments and expect the process to continue through 2017. While the Agencies have made considerable efforts to address our recommendation in the proposed revisions to the Form 5500, they have not made any decisions on whether to make changes to the forms or DOL regulations, and have not decided on a timeline for implementation of any changes to the form or DOL regulations that the Agencies ultimately may decide to adopt. We will close this recommendation once the revision is final.

Recommendation: To clarify the desired results of the correspondence audit program and its linkages to IRS-wide activities, the Commissioner of the Internal Revenue Service should establish formal program objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS correspondence audit program officials planned a working group to develop formal program objectives. In November 2016, IRS officials provided documents intended to define the program objectives, but the objectives were unclear. As of December 2019, IRS officials provided draft program objectives to GAO for discussion and are responding to comments from GAO. We will update the status when IRS provides any further supporting documentation, as we requested in March 2020.

Recommendation: To clarify the desired results of the correspondence audit program and its linkages to IRS-wide activities, the Commissioner of the Internal Revenue Service should ensure that the program measures reflect those objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS officials said that, among other actions, they plan to review and update program documentation and guidance as warranted to ensure a clear link between correspondence audit program objectives and related measures. IRS officials provided documentation in November 2016, but program measures could not be clearly linked to objectives because the objectives were not clear. As of December 2019, IRS officials provided draft measures for their draft program objectives to GAO and are responding to comments from GAO. We will update the status when IRS provides any further supporting documentation, as we requested in March 2020.

Recommendation: To clarify the desired results of the correspondence audit program and its linkages to IRS-wide activities, the Commissioner of the Internal Revenue Service should clearly link those measures with strategic IRS-wide goals on ensuring compliance in a cost-effective way while minimizing taxpayer burden.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS officials said that, among other actions, they plan to review and update program documentation and guidance as warranted to ensure that program measures clearly link to IRS strategic goals. IRS officials provided documentation in November 2016,but measures for the program could not be clearly linked to either the program objectives or IRS goals because the objectives were not clear. As of December 2019, IRS officials provided GAO with draft linkages to IRS's strategic goals for the draft measures and program objectives and are responding to comments from GAO on those linkages. We will update the status when IRS provides any further supporting documentation, as we requested in March 2020.

Recommendation: While IRS works to improve the quality of its Schedule K-1 data, the Commissioner of Internal Revenue should develop a plan for conducting testing or other analysis to determine whether the improved Schedule K-1 data, perhaps combined with other IRS information about businesses and taxpayers, could be used more effectively to ensure compliance with the reporting of flow-through income.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS stated that it understands the objective of this recommendation and, at such time that resources are available to enhance capabilities, it would consider the proposed methodology of advanced testing. However, based on current and anticipated budget constraints, it does not expect its plans to change in the near future. As of September 2020, there has been no change. As such we will continue to monitor progress.

Recommendation: To improve the department's implementation of PortfolioStat, in future reporting to OMB, the Secretary of the Treasury should direct the CIO to fully describe the following PortfolioStat action plan elements: (1) consolidate commodity IT spending under the agency CIO and (2) establish criteria for identifying wasteful, low-value, or duplicative investments.

Agency: Department of the Treasury
Status: Open

Comments: In September 2014, the Department of the Treasury reported that it did not plan to consolidate commodity IT spending under the agency CIO. Specifically, the department stated that commodity IT investment decisions were consolidated under the Treasury Technology Investment Review Board which is co-chaired by the agency CIO and Assistant Secretary for Management; and that it did not see the benefit of combining the budget authorities of the various bureau infrastructure investments. In regards to establishing criteria to identify wasteful, low-value, and duplicative investments, in September 2014, the department stated that the Treasury Technology Investment Review Board and Technology Advisory Working Group had established an approach that considers risk, value and cost in reviewing investment requests to identify wasteful, low-value, and duplicative investments. As of May 2019, we were reviewing documentation we received from the department in September 2018 to determine whether the recommendation has been fully addressed.

Recommendation: To improve the department's implementation of PortfolioStat, as the department finalizes and matures its enterprise architecture and valuation methodology, the Secretary of the Treasury should direct the CIO to utilize these processes to identify whether there are additional opportunities to reduce duplicative, low-value, or wasteful investments.

Agency: Department of the Treasury
Status: Open

Comments: In September 2014, the Department of the Treasury described several examples of processes it had established to identify opportunities to reduce duplicative, low-value or wasteful investments, including annual reviews of each major IT investment and monthly portfolio reviews. As of May 2019, we were reviewing updated information we received in September 2018 to determine whether the recommendation has been fully addressed.

Recommendation: To ensure that IRS is meeting the stated goals of CAP, the Principal Deputy Commissioner of Internal Revenue and Deputy Commissioner for Services and Enforcement should track savings from Compliance Maintenance and CAP overall and develop a plan for reinvesting any savings.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of December 2019, IRS had taken some steps to implement this August 2013 recommendation, but had not developed a plan to track and reinvest any savings. IRS provided documents from October 2019 which discussed how portfolio management is used as a tool to prioritize and allocate time to eight compliance program areas, including CAP. IRS officials explained that any hours saved in a compliance program area are reallocated to the same or another compliance program area based on the division's strategic priorities rather than a plan focusing on CAP. Furthermore, CAP has not yet achieved the desired outcome of saving resources, according to IRS. If IRS finds any savings from CAP, it will need to develop a plan for reinvesting it to expand audit coverage. Without a plan for tracking savings and using them to increase audit coverage, IRS cannot be assured that the savings are effectively invested in either CAP or non-CAP taxpayers with a high compliance risk.

Recommendation: To improve the reliability of the information presented in the CFS budget statements, the Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish and implement effective procedures for reporting amounts in the CFS budget statements that are fully consistent with the underlying information in significant federal entities' audited financial statements and other financial data.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury continued to develop its budget deficit/surplus and cash reconciliation procedures. Specifically, Treasury performed a preliminary analysis on several federal entities' implementation of the new Statement of Federal Financial Accounting Standards No. 53, Budget and Accrual Reconciliation (BAR), and noted inconsistencies in the way each entity populated line items in the BAR. Treasury and OMB provided additional guidance for the BAR in OMB Circular No. A-136 and on the Treasury U.S. Standard General Ledger website, including a BAR crosswalk template. However, additional work is needed to reconcile line items to audited federal entity financial statements. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: To improve the reliability of the information presented in the CFS budget statements, the Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish and implement effective procedures for identifying and reporting all items needed to prepare the CFS budget statements.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury continued to make improvements in fiscal year 2019 by implementing procedures, publishing guidance, and developing new transaction codes to improve the accounting for and reporting of General Fund transactions and balances that Treasury uses to compute the budget deficit reported in the consolidated financial statements. However, additional work is needed in determining the appropriate presentation for the reconciling items, which could affect the line items included. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: To increase the effectiveness of IRS's examinations individual tax returns, the Commissioner of Internal Revenue should transcribe data from paper-filed Form 1040 Schedules C and E that are not currently transcribed and make that data available to SB/SE examiners for classification. If IRS has evidence that the costs related to transcribing all such data on Schedules C and E are prohibitive, IRS could do one or both of the following actions: (1) transcribe less data by transcribing only the missing data for selected line items, such as certain, large expense line items, or (2) develop a budget proposal to fund an initiative for transcribing Schedule C and E.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS has taken some steps to implement this May 2013 recommendation. In September 2015, IRS completed a study on whether to transcribe more data from paper-filed returns. IRS officials said the study showed that the benefits to be derived from additional transcription are not significant and would not outweigh the added cost. That study did not provide specific information about the costs and benefits of transcribing information from Schedules C and E. In December 2018, IRS provided a cost-benefit estimate for transcribing all data from Schedules C and E and concluded that the cost of transcribing all additional Schedule C and Schedule E lines would exceed the expected benefits. This analysis satisfied the first part of GAO's recommendation. However, the study did not address whether transcribing certain, select lines on Schedules C and E would be cost-effective, as GAO's recommendation suggested. Having specific data transcribed and electronically available likely will improve the classification of audits as well as the quality of the audits, according to examiners GAO spoke with for the report. As of March 2020, GAO continues to monitor IRS's progress.

Recommendation: The Acting Commissioner of Internal Revenue should direct the appropriate IRS officials to perform a risk assessment to determine the appropriate level of Integrated Data Retrieval System (IDRS) access that should be granted to employee groups that handle hard-copy taxpayer receipts and related sensitive taxpayer information as part of their job responsibilities.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. In October 2019, the functions within the Small Business/Self-Employed organization completed risk assessments to determine the appropriate level of Integrated Data Retrieval System (IDRS) access that should be granted to the employees who handle hard-copy taxpayer receipts and related sensitive taxpayer information as part of their job responsibilities. In addition, IRS officials stated that during fiscal year 2020, the Taxpayer Advocate Service organization, in coordination with the Information Technology organization, as necessary, will complete a risk assessment of all employee groups that handle hard-copy taxpayer receipts and related sensitive taxpayer information to determine the most appropriate level of IDRS access.

Recommendation: The Acting Commissioner of Internal Revenue should direct the appropriate IRS officials to, based on the results of the risk assessment, update the Internal Revenue Manual (IRM) accordingly to specify the appropriate level of IDRS access that should be allowed for (1) remittance perfection technicians and (2) all other employee groups with IDRS access that handle hard-copy taxpayer receipts and related sensitive information as part of their job responsibilities.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that by October 2020, the Small Business/Self-Employed, Taxpayer Advocate Service, and Tax Exempt & Government Entities organizations will work with the Information Technology organization, as necessary, to ensure that the applicable Internal Revenue Manual section(s) are revised for any policy changes on (1) risk mitigation, including specifying the appropriate level of Integrated Data Retrieval System access that should be allowed and (2) risk acceptance for affected employee groups, as needed.

Recommendation: The Acting Commissioner of Internal Revenue should direct the appropriate IRS officials to establish procedures to implement the updated IRM, including required steps to follow to prevent (1) remittance perfection technicians and (2) all other employee groups that handle hard-copy taxpayer receipts and related sensitive information as part of their job responsibilities from gaining access to command codes not required as part of their designated job duties.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that by October 2020, the Small Business/Self-Employed, Taxpayer Advocate Service, and Tax Exempt & Government Entities organizations will work with the Information Technology organization, as necessary, to establish procedures to prevent affected employees from gaining access to command codes not required as part of their designated job duties, as needed.

Recommendation: The Acting Commissioner of the Internal Revenue Service should direct appropriate officials to develop a long-term strategy to improve web services provided to taxpayers, in accordance with Howto.gov and other federal guidance outlined in our report. To accomplish this, the IRS should establish a numerical or other measureable goal to improve taxpayer satisfaction and a timeframe for achieving it.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS has made progress in improving its online services strategy, as we recommended, but as of February 2020, IRS has not yet completed its efforts. IRS's strategy has evolved from a singular focus on on-line services to a more comprehensive strategy of taxpayer interaction through all service channels. In February 2016, IRS announced an agency-wide Future State Initiative, which in part, aims to deliver service improvements across different taxpayer interactions such as individual online accounts assistance, exams, and collections. In July 2016, the official responsible for IRS's on-line office reported that the agency is working towards developing an overall customer service satisfaction goal as part of the IRS Future State Initiative. The official said that this goal is broadly meant to cover various ways the public interacts with IRS, including web, phone, correspondence and walk in. In November 2016, IRS provided documentation on the goals of the Future State Initiative. However, this documentation does not include specific numerical targets for the performance measures that IRS expects to achieve for each goal or a timeline to achieve those goals. IRS officials stated they will incorporate a customer service satisfaction goal in its upcoming strategic plan. IRS released the Fiscal Year 2018-2022 Strategic Plan, however a numerical or other measureable goal to improve taxpayer satisfaction with the website was not included in it. We are currently following up with IRS to determine their next steps.

Recommendation: The Acting Commissioner of Internal Revenue should take the following action outline a strategy that defines appropriate levels of telephone and correspondence service and wait time and lists specific steps to manage service based on an assessment of time frames, demand, capabilities, and resources.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS neither agreed nor disagreed with GAO's recommendation from December 2012, but has made progress in developing a customer service strategy that defines appropriate levels of telephone service; however, as of February 2020, IRS had not finalized its strategy nor determined the appropriate levels of service for correspondence and wait time. In January 2017, IRS shared results of a benchmarking study that compared its telephone service, measures, and goals to comparable agencies and companies. The team that conducted the study recommended options for additional measures to indicate the level of access taxpayers have to service across service channels. In September 2019, IRS provided GAO its revised customer service strategy; however, it did not include correspondence service. In July 2019, the Taxpayer First Act (Public Law 116-25) was enacted which requires IRS to develop a comprehensive customer service strategy. As of February 2020, IRS had established an internal office to implement this requirement. Completion of a comprehensive customer service strategy that defines appropriate levels of service and wait time as well as specific steps to manage services based on an assessment of time frames, demand, capabilities, and resource requirements would enable IRS to make a more informed request to Congress about resources needed to deliver specific levels of service. Further, finalizing a long-term comprehensive strategy will help ensure IRS is maximizing the benefit to taxpayers and possibly reduce costs in other areas.

Recommendation: FSOC and OFR should clarify responsibility for implementing requirements to monitor threats to financial stability across FSOC and OFR, including FSOC members and member agencies, to better ensure that the monitoring and analysis of the financial system are comprehensive and not unnecessarily duplicative.

Agency: Department of the Treasury: Financial Stability Oversight Council
Status: Open

Comments: In October 2019, Treasury staff said that steps continue to be taken to clarify roles and responsibilities across FSOC and OFR for monitoring threats to financial stability. Treasury staff said that they are working with OFR to reorganize and restructure the organization to better fulfill its mission and support FSOC. That work is still underway and will include additional clarification of roles and responsibilities. In June 2019, the Senate confirmed a new OFR Director. Treasury published a report in response to the President's executive order (13772) on Core Principles for Regulating the United States Financial System that recommended the structure and mission of the Office of Financial Research should be reformed to improve its effectiveness and to ensure greater accountability. We will continue to monitor progress in implementing these steps.

Recommendation: FSOC and OFR should clarify responsibility for implementing requirements to monitor threats to financial stability across FSOC and OFR, including FSOC members and member agencies, to better ensure that the monitoring and analysis of the financial system are comprehensive and not unnecessarily duplicative.

Agency: Department of the Treasury: Financial Stability Oversight Council: Office of Financial Research
Status: Open

Comments: In October 2019 Treasury staff said that steps are being taken to clarify roles and responsibilities across FSOC and OFR for monitoring threats to financial stability. Treasury staff said that they are working with OFR to reorganize and restructure the organization to better fulfill its mission and support FSOC. That work is still underway as staff from both entities meet on a weekly basis and will include additional clarification of roles and responsibilities. The Senate confirmed a new OFR director in June 2019. In June 2017, Treasury published a report in response to the President's executive order (13772) on Core Principles for Regulating the United States Financial System that recommended the structure and mission of the Office of Financial Research should be reformed to improve its effectiveness and to ensure greater accountability. We continue to monitor FSOC and OFR actions that would be responsive to clarifying responsibilities for monitoring threats to financial stability.

Recommendation: The Commissioner of Internal Revenue should develop a new refund timeliness measure and goal to more appropriately reflect current capabilities.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of March 2020, IRS had not developed a new measure for refund timeliness. In early 2019, Treasury announced that it would discontinue reporting the refund timeliness measure beginning with fiscal year 2019 because it was based on paper returns, which account for approximately 10 percent of returns. Nevertheless, as of January 2020, IRS continues to use this measure internally to monitor performance. During the 2019 tax filing season, taxpayers filed about 90 percent of returns electronically, and as a means to set taxpayer expectations, IRS publicly reported that about 90 percent of taxpayers owed a refund received it in less than 21 days. Accordingly, we continue to believe that IRS's sole performance measure of issuing paper-filed refunds within 40 days is outdated and does not acknowledge advances in technology that allow IRS to issue refunds faster. We agree with IRS that the environment has changed considerably since we made this recommendation--the growth in identity theft refund fraud has increased the need for additional scrutiny of tax refunds, which can add to the time needed to process tax returns. IRS can take into account its concerns and set a performance measure and goal that would be both challenging and obtainable. Without a measure and goal to assess refund timeliness that includes both paper and electronically filed returns and is reflective of IRS's current capabilities, IRS is missing opportunities to provide optimum levels of taxpayer service while also ensuring that taxpayers receive accurate refunds. As such, we believe that our recommendation remains valid.

Recommendation: To better ensure that economically similar outcomes are taxed similarly and minimize opportunities for abuse, the Secretary of the Treasury should undertake a study that compares the current approach to alternative approaches for the taxation of financial derivatives. To determine if changes would be beneficial, such a study should weigh the tradeoffs to IRS and taxpayers that each alternative presents, including simplicity, administrability, and economic efficiency.

Agency: Department of the Treasury
Status: Open

Comments: Treasury disagreed with this recommendation based on the fact that many outside studies already exist and IRS did not comment. The Tax Cuts and Jobs Act enacted in December 2017 did not include any requirements that Treasury study alternative approaches for the taxation of financial derivatives. However members of Congress have released proposals for a mark-to-market tax system, which would include financial derivatives. GAO continues to maintain that further study is needed in coordination with IRS and will continue to monitor the climate for such a study.

Recommendation: The Commissioner of Internal Revenue should direct the appropriate officials to define and implement a process, including defined criteria, for reselecting ongoing projects.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In March, 2017, IRS issued its Portfolio Investment Plan Process Description Manual for selecting and prioritizing new and ongoing operations support activities. The manual includes criteria for prioritizing selections; and provides for comparing assets against one another to create a prioritized portfolio; and ensuring executives' funding decisions are based upon the process for selecting and prioritizing activities. In March 2018, IRS updated the manual and also issued related detailed procedures. In May 2019, IRS stated that its Information Technology/Strategy and Planning group had developed a prioritization process and associated scoring criteria to help facilitate decision making for business systems modernization programs, projects, and capabilities. The agency noted that improvements were being made to the process and full implementation was anticipated for June 2019.In April 2020, IRS informed us that it had moved its target for fully implementing the recommendation to November 2020. We will continue to monitor IRS's efforts to implement the recommendation.

Recommendation: The Commissioner of the IRS should direct the appropriate IRS officials to revise the post orders for the service center campuses (SCC) and lockbox bank security guards to include specific procedures for timely reporting exterior lighting outages to SCC or lockbox bank facilities management. These procedures should specify (1) whom to contact to report lighting outages and (2) how to document and track lighting outages until resolved.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that during fiscal year 2020, Facilities Management and Security Services (FMSS) will update the Internal Revenue Manual to reflect the necessary guidance for service center guards and FMSS physical security specialists to know (1) whom the guards are to contact to report lighting outages and (2) how lighting outages are to be documented and tracked until resolved.

Recommendation: To improve reporting on the results of examinations on ATAT issues, the Commissioner of Internal Revenue should separately track the tax amounts recommended, assessed, and collected between ATAT issues and non-ATAT issues.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of December 2019, IRS did not plan on taking any further actions to track examination results for ATAT versus non-ATAT issues, as GAO recommended in May 2011. In July 2012, IRS told GAO that although it agreed with GAO's May 2011 recommendation, resource and capability constraints preclude it from capturing information in this way. GAO maintains that tracking examination results for ATAT versus non-ATAT issues would provide IRS management with the data needed to make informed judgments about program effectiveness and resource allocations. IRS has taken steps to check whether taxpayers file all required ATAT-related disclosure obligations. In February 2013, IRS implemented a new indicator and matching process to regularly review whether taxpayers are meeting their ATAT-related filing obligations. Additionally, IRS developed a procedure to evaluate the completeness of ATAT-related disclosure forms and follow up on incomplete forms as necessary and updated the Internal Revenue Manual to reflect these changes. Developing and implementing these new processes and procedures will provide IRS with additional information for determining whether the disclosures are made as required and are complete.

Recommendation: To gain efficiencies and improve taxpayer service, the Commissioner of Internal Revenue should direct the appropriate officials, based on the quality of service provided by comparable organizations and on what matters most to the customer, to determine a customer service telephone standard, and the resources required to achieve this standard based on input from Congress and other stakeholders.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of August 2019, IRS finalized a customer service strategy identifying an optimal telephone level of service. According to the strategy, IRS has a process to compare major metrics with other agencies and private industry, and conducted two studies to look at industry practices. In response to our recommendation, IRS compared its telephone data with similar telephone environments, and determined that a telephone level of service between 70 and 80 percent provides an optimal balance for servicing customer service telephones and paper correspondence requests. However, IRS faced two significant challenges in managing the 2019 filing season: (1) implementing major tax law changes from the Tax Cuts and Jobs Act (TCJA), and (2) a lapse in appropriations that left IRS unfunded during five weeks leading up to the opening of the 2019 filing season. As a result of issues stemming from these challenges, IRS revised its 2019 filing season telephone service goals from 80 percent to 65 percent during the filing season, and from 75 percent to 63 percent for all of fiscal year 2019. By not maintaining the identified optimal level of service standard, IRS is missing opportunities to illustrate gaps between actual and desired levels of service that may have resulted from issues linked to TCJA implementation and the lapse in appropriations. IRS did outline steps it is taking to achieve the optimal range of 70-80 percent telephone level of service outlined in its customer service strategy. Specifically, IRS said that it is working to upgrade equipment for all IRS business units that provide telephone services to taxpayers. It also cited examples of these upgrades, such as implementing a customer callback system that allows callers to keep their place in queue without remaining on the phone. While IRS said it has allocated funding to begin the development and installation of the customer callback feature, it did not provide an estimate of the resources required to upgrade the equipment and otherwise achieve the optimum range of telephone level of service. By not providing sufficient information to Congress on resources needed to achieve an optimal level of service, IRS is missing opportunities to justify the resources it believes are needed to improve taxpayer service.

Recommendation: The Commissioner of Internal Revenue should establish an IRS-wide strategy with goals, which may need to be developed incrementally, to coordinate and plan ongoing and future efforts to identify and pursue network tax evasion. The strategy should include: (1) assessing the effectiveness of network analysis tools, such as yK-1; (2) determining the feasibility and benefits of increasing access to existing IRS data, such as scanning additional data from Schedule K-1, or collecting additional data for use in its network analysis efforts; (3) putting the development of analytical techniques and tools that focus on networks as the unit of analysis, such as GraphQuery, on a specific time schedule; and (4) deciding how network efforts will be managed across IRS, such as whether a core program team or management group is needed.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of December 2019, IRS had not created a documented, agency-wide strategy to manage network noncompliance efforts; however, IRS has developed elements of the strategy, as GAO recommended in September 2010. For example, IRS has made and continues to focus on making iterative improvements to its network analysis tools. Although these improvements are not contained within an IRS-wide strategy, they relate to assessing effectiveness. For example, IRS has taken steps to assess its most predominantly used network analysis tool. As part of an annual survey, IRS asked users of this tool about its effectiveness and to suggest improvements. IRS also certified the tool as conforming to agency guidelines and requirements for usefulness. However, IRS has not created a strategic approach on managing network compliance efforts across IRS that includes time frames for network analysis tool development, and the agency has no plans to do so. With a more strategic approach, IRS would be better positioned to address network noncompliance across the agency.

Recommendation: In order to significantly reduce the uncertainty that some taxpayers have about their ability to earn credits for their research activities, the Secretary of the Treasury should issue regulations clarifying the definition of gross receipts for purposes of computing the research credit for controlled groups of corporations.

Agency: Department of the Treasury
Status: Open

Comments: Treasury issued proposed regulations clarifying the definition of gross receipts on December 13, 2013 and solicited public comments. During the course of 2014, tax practitioners and business executives submitted comments criticizing the regulations and asking for them to be withdrawn. As of March 2020, Treasury has yet to issue final regulations that would include responses to these criticisms. The regulations would not become effective until the tax year beginning after the date on which the regulations are published in final form.

Recommendation: In order to significantly reduce the uncertainty that some taxpayers have about their ability to earn credits for their research activities, the Secretary of the Treasury should provide additional guidance to more clearly identify what types of activities are considered to be qualified support activities.

Agency: Department of the Treasury
Status: Open

Comments: As of March 2020, Treasury has not issued regulations to clarify what types of activities are considered to be qualified support activities.

Recommendation: In order to significantly reduce the uncertainty that some taxpayers have about their ability to earn credits for their research activities, the Secretary of the Treasury should provide additional guidance to more clearly identify when commercial production of a qualified product is deemed to begin.

Agency: Department of the Treasury
Status: Open

Comments: As of March 2020, Treasury has not issued regulations to more clearly identify when commercial production of a qualified product is deemed to begin.

Recommendation: To better ensure the notice phase is achieving desired results at the lowest costs, the Commissioner of Internal Revenue should provide IRS collection managers and executives accessible, reliable information on what the business rules are.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2017, IRS provided documentation of plans to periodically share with appropriate staff business rules information, along with related results of periodic evaluations of the business rules for the four highest-volume collection notices. In February 2018, IRS officials said that conducting the evaluations will depend on resources being available from the multiple functions involved. As of December 2019, IRS had not provided GAO with documentation of time frames for regularly sharing business rules information. We will update the status when IRS provides supporting documentation on actions taken, as we requested in December 2019.

Recommendation: To better ensure the notice phase is achieving desired results at the lowest costs, the Commissioner of Internal Revenue should periodically and regularly evaluate the business rules in terms of efficiency and effectiveness or other results and ensure the results are available to managers so the data and methodologies can be used or considered in future evaluations.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2017, IRS provided documentation of plans to periodically evaluate the business rules for the four highest-volume collection notices and share evaluation results with appropriate staff. In February 2018, IRS officials said that conducting the evaluations will depend on resources being available from the multiple functions involved. As of December 2019, IRS had not provided GAO with documentation of any evaluation results or a date when IRS expects to complete the first such evaluation. Nor had IRS provided time frames for regularly conducting and sharing business rules evaluation results. We will update the status when IRS provides supporting documentation on actions taken, as we requested in December 2019.

Recommendation: In order to better assess whether changes are needed in the way IRS administers activities not engaged in for profit provisions, the Commissioner of Internal Revenue should take steps to estimate the extent of activities not engaged in for profit noncompliance from its ongoing research programs.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed to research sole proprietor noncompliance, as GAO recommended in September 2009. It is focusing on those who improperly claim business losses (i.e., not profits). IRS's Office of Research, Analysis and Statistics is using the reporting compliance study of Form 1040 filers to gather the data on such noncompliant business losses. This research covered sampled tax returns filed for tax years 2009, 2010, and 2011 and used audits of the sampled tax returns that are filed for each tax year. In November 2016, IRS research officials provided the initial rough estimates of the percentage of disallowed losses and associated dollar amounts for all 3 tax years but as of December 2019, they had not yet indicated how these estimates helped IRS to understand the nature of the tax noncompliance. The officials cautioned that their ability to develop the estimates depends on the number of observations that can be applied from each tax year. This research, when completed, could help IRS to identify noncompliant sole proprietor issues and take action to reduce losses.

Recommendation: To improve IRS's guidance to its examiners auditing the real-estate tax deduction, the Commissioner of Internal Revenue should revise the guidance to indicate that evidence of deductibility should not rely on mortgage escrow statements, Forms 1098, and cancelled checks (which can be evidence of payment), and may require more than reliance on a real-estate tax bill.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: No executive action taken. IRS had not addressed this action and had no plans to do so as of January 2020. IRS did not agree with GAO's May 2009 recommendation and the agency maintains that existing examination guidance provides examiners with sufficient information to properly examine this deduction. For tax years beginning after December 31, 2016, section 11042 of Public Law 115-97 caps the deduction for state and local taxes, including real estate taxes, at $10,000. In its 2009 review, GAO found that some examiners were not confirming that taxpayers were entitled to deduct real estate charges claimed, even in situations where their deductibility may have been in question. As a result, GAO maintains that examiners are continuing to rely on guidance that is inadequate to properly examine this deduction and that action should be taken to clarify the guidance.

Recommendation: To improve IRS's guidance to its examiners auditing the real-estate tax deduction, the Commissioner of Internal Revenue should revise the guidance to require examiners to ask taxpayers to substantiate the deductibility of the amounts claimed whenever they are examining the real-estate tax deduction and they have reason to believe that taxpayers have claimed nondeductible charges that are large, unusual, or questionable.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: No executive action taken. IRS had not addressed this action and had no plans to do so as of January 2020. IRS did not agree with GAO's May 2009 recommendation and the agency maintains that existing examination guidance provides examiners with sufficient information to properly examine this deduction. For tax years beginning after December 31, 2016, section 11042 of Public Law 115-97 caps the deduction for state and local taxes, including real estate taxes, at $10,000. In its 2009 review, GAO found that some examiners were not confirming that taxpayers were entitled to deduct real estate charges claimed, even in situations where their deductibility may have been in question. As a result, GAO maintains that examiners are continuing to rely on guidance that is inadequate to properly examine this deduction and that action should be taken to clarify the guidance.

Recommendation: To gauge the extent of 1099-MISC payer noncompliance and its contribution to the tax gap, the Commissioner of Internal Revenue should, as part of future research studies, develop an estimate of 1099-MISC payer noncompliance.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: According to IRS, developing such an estimate requires a multi-pronged approach and a large amount of coordinated effort. One prong is to determine the extent of filing compliance among employers. A second prong would determine the extent to which 1099-MISC payers properly report their payments. Starting with the Tax Year 2001 individual income tax reporting compliance study, the National Research Program (NRP) office has been collecting some data related to Form 1099-MISC compliance, from both the payer and payee perspectives. Additional data were generated by the NRP reporting compliance study for employment tax. As part of the NRP employment tax research, IRS examiners were to review taxpayers' Form 1099 filing compliance. Data collected from these studies should shed some light on whether employers are appropriately reporting required payments on Form 1099-MISC. As of March 2020, IRS had completed its preliminary analysis and expected to complete more comprehensive analysis of the NRP employment tax data by May 2020. GAO will continue to monitor IRS's progress.

Recommendation: To gauge the extent of 1099-MISC payer noncompliance and its contribution to the tax gap, the Commissioner of Internal Revenue should, as part of future research studies, determine the nature and characteristics of those payers that do not comply with 1099-MISC reporting requirements so that this information can be factored into an IRS-wide strategy for increasing 1099-MISC payer compliance.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS researchers collected data on 1099-MISC reporting as part of its National Research Program (NRP) study on employment taxes, a program that involved examinations of a sample of tax returns for tax years 2008 through 2010. As part of the NRP employment tax research, IRS examiners were to review taxpayers' Form 1099 filing compliance. Collecting data on this issue will enable IRS to study the nature and characteristics of payers that do not comply with 1099-MISC reporting requirements. As of March 2020, IRS had completed its preliminary analysis and expected to complete more comprehensive analysis of the NRP employment tax data by May 2020. GAO will continue to monitor IRS's progress.

Recommendation: The Secretary of the Treasury should ensure that the tax gap strategy includes (1) a segment on improving sole proprietor compliance that is coordinated with broader tax gap reduction efforts and (2) specific proposals, such as the options we identified, that constitute an integrated package.

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, Treasury has taken no action to address this recommendation and has not provided GAO with plans to do so. Treasury's tax gap strategy does not cover sole proprietor compliance in detail while coordinating it with broader tax gap reduction efforts as GAO recommended in July 2007. In March 2016, Treasury officials reported to GAO that they have implemented or proposed several actions to address the tax gap among sole proprietors, such as requiring reporting on payment card payments and improved audit selection procedures for sole proprietors. However, GAO's July 2007 report noted there are many trade offs involved in various options for improving sole proprietor compliance. GAO recommended that Treasury's strategy for reducing the tax gap include a segment on sole proprietor compliance that is coordinated with broader tax gap reduction efforts.

Recommendation: To ensure that policymakers and the public have the necessary information to make informed decisions and to improve the progress toward exercising greater scrutiny of tax expenditures, the Director of OMB, in consultation with the Secretary of the Treasury, should develop and implement a framework for conducting performance reviews of tax expenditures. In developing the framework, the Director should (1) determine which agencies will have leadership responsibilities to review tax expenditures, how reviews will be coordinated among agencies with related responsibilities, and how to address the lack of credible performance information on tax expenditures; (2) set a schedule for conducting tax expenditure evaluations; (3) re-establish appropriate methods to test the overall evaluation framework and make improvements as experience is gained; and (4) to identify any additional resources that may be needed for tax expenditure reviews.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: Treasury did not submit comments on this report and deferred to OMB. OMB agreed that this recommendation had promise and also said that tax expenditure evaluations were the responsibility of Treasury, which had access to the necessary data. As of February 2020, when the President's fiscal year 2021 budget was released, the Director of OMB had not developed a framework for reviewing tax expenditure performance, as GAO recommended in June 1994 and again in September 2005. Since their initial efforts in 1997 and 1999 to outline a framework for evaluating tax expenditures and preliminary performance measures, OMB and the Department of the Treasury have ceased to make progress and retreated from setting a schedule for evaluating tax expenditures. The President's fiscal year 2012 budget stated that developing an evaluation framework is a significant challenge due to limited data availability and analytical constraints of isolating the effect of any single program. The administration planned to focus on addressing some of these challenges so it can work toward crosscutting analyses that examine tax expenditures alongside related spending programs. However, OMB and Treasury have not reported on progress on this recommendation since the President's fiscal year 2012 budget. In December 2019, OMB said its Office of Economic Policy is responsible for the framework outline. OMB said it was exploring options to further develop its evaluation framework, which would include working with Treasury. The budget released in February 2020 did not provide an update on these evaluation framework efforts.

Recommendation: To ensure that policymakers and the public have the necessary information to make informed decisions and to improve the progress toward exercising greater scrutiny of tax expenditures, the Director of OMB, in consultation with the Secretary of the Treasury, should require that tax expenditures be included in the PART process and any future such budget and performance review processes so that tax expenditures are considered along with related outlay programs in determining the adequacy of federal efforts to achieve national objectives.

Agency: Department of the Treasury
Status: Open

Comments: In October 2005, the Department of the Treasury responded that this recommendation did not relate to Treasury. OMB made some progress in including tax expenditures along with related outlay programs in the executive branch's budget and performance review processes, as GAO recommended in September 2005. However, as of December 2019, OMB had not developed a systematic approach for conducting such reviews, and OMB staff told GAO that they were not pursuing the effort because of competing priorities, as well as capacity and resource constraints. The President's fiscal year 2012 budget stated that the administration would work toward examining the objectives and effects of the wide range of tax expenditures in the budget. The GPRA Modernization Act of 2010 (GPRAMA) requires OMB and the agencies to identify the relevant tax expenditures that contribute to each crosscutting priority goal. Beginning with its August 2012 update to Circular No. A-11 with guidance for implementing GPRAMA and continuing in subsequent annual updates, OMB has directed agencies to identify tax expenditures that contribute to each of their agency priority goals. Beginning with the July 2013 update, OMB expanded its guidance to include identifying these contributions to agency strategic objectives. In both its July 2013 and July 2014 guidance, OMB stated that it planned to work with the Department of the Treasury (Treasury) and agencies to facilitate alignment of tax expenditure information with agency priority goals and strategic objectives. However, in its June 2015 update of this guidance, OMB removed the language about working with Treasury and agencies to align tax expenditures with agency goals. OMB's December 2019 guidance still requires agencies to identify tax expenditures that contribute to their agency priority goals and strategic objectives.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies develop a detailed schedule of all major treaties and other international agreements that obligate the U.S. government to provide cash, goods, or services, or that create other financial arrangements that are contingent on the occurrence or nonoccurrence of future events (a starting point for compiling these data could be the State Department's Treaties in Force).

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies classify all such scheduled major treaties and other international agreements as commitments or contingencies.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies disclose in the notes to the CFS amounts for major treaties and other international agreements that have a reasonably possible chance of resulting in a loss or claim as a contingency.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies disclose in the notes to the CFS amounts for major treaties and other international agreements that are classified as commitments and that may require measurable future financial obligations.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies take steps to prevent major treaties and other international agreements that are classified as remote from being recorded or disclosed as probable or reasonably possible in the CFS.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Commissioner of Internal Revenue should match independent contractors' information returns with their tax returns to more systematically identify employers who are misclassifying employees as independent contractors and to better target audit resources for doing employment tax examinations.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: Call 202/512-6100 for additional information.