Despite information security progress, the IRS still has deficiencies in controls over taxpayer data, according to a GAO study that found insufficient controls in identity authentication, server access, encryption of authentication data, auditing systems to ensure compliance with agency policies, and access to restricted areas.
[…]