Internal Revenue Service continues to struggle to implement proper security controls to protect taxpayers’ data. IRS data will remain “unnecessarily vulnerable” to inappropriate use, GAO says. IRS has made progress in restricting access privileges for key financial applications and expanding multifactor authentication across the agency. IRS also revised upward the number of accounts victimized in its Get Transcript breach, originally discovered last May. IRS says it has discovered and blocked at least 800 cases that appear to involve criminals who were able to obtain legitimate identity protection PINs tied to tax filers’ accounts.”]
Source: https://www.cuinfosecurity.com/audit-reveals-irs-struggles-to-implement-security-controls-a-8995