GovernmentExecutive.com

Return to Article: IRS incorrectly claimed security issues had been corrected

• 41344
  

  The IRS has approximately six to seven 'lockboxes' needing unlocking. The password complexity requirement for each differs making it (for the most part) impossible to have the same password - leaving users to write down their passwords for others to see. Access should be development like USDA level II eauth , allowing the user to enter their credentials up front and logging out upon completion of use.

  Brandon Lynch Posted January 11, 2008 12:30 PM
• 41246
  

  I worked briefly for the IRS last year, and in order to get into the critical computer databases my supervisor sat right next to me and made me show her all my passwords and security questions. I kept trying to keep them secret, and she insisted that if I got locked out, she was the one who had to restore my access so she needed that info. I'm sure that's not right. Moreover, anyone in that office could access the safe, and all the lockbox keys for individual lockboxes stored in the safe had duplicates. The duplicates were in a drawer in the safe, in case someone was absent and the others needed to get into their lockbox. So how safe do you think I felt leaving $6000 collected in cash from taxpayers in the safe over night? Even if it was in my lockbox, it could be taken by anyone in that office. Since I was new, and the others long term well trusted folks (most of them protected by the union, too -- an the union rep claimed he had a cold hence did not contact me in 3 months) -- well, anyway, it was a set up for disaster. The security seemed to be intense due to special access codes for all the computer programs, special access to the safe, lockboxes inside the safe -- but in the end I did not feel there was a way to keep the money safe.

  Mary Lori Posted January 10, 2008 12:53 PM
• 41166
  

  While some of this long-standing mess may be due to a lack of management committment, most can be attached to unfunded mandates (setting the bar high and providing no resources to reach it), excessive outsourcing (which saps existing funds), lack of fed recruiting for tech skills, and a lack of concern for the completion of critical government missions (in this case secure and responsible collection of revenue) on the part of the current administration. From FEMA, to GSA contracting scandals, to corruption at HUD, etc...agencies need both funds and the ability to build solid core staff for on-going critical missions...they are NOT currently receiving what they need.

  GAO is doing an excellent job of providing the taxpayers with a brutally honest (they deserve it) assessment of their government's effectiveness. This administration apparently does not understand that "efficiency" does NOT equal effectiveness. A-76 seems to be a mission prioritized over all other government missions. This is a sad state for America.

  Don Posted January 10, 2008 7:39 AM