01/10/08 GAO: IRS Computer Security Show "Pervasive Weakeness"

[admin]

The Government Accountability Office is saying today that the Internal Revenue Service (IRS) computer system, which stores Social Security numbers and other detailed financial information, still has "pervasive weaknesses" in security. About 70 percent of the previously identified information security weaknesses remain unresolved. For example, IRS continues to, among other things, use passwords that are not complex, grant excessive access to individuals who do not need it, and install patches in an untimely manner. Other significant weaknesses in various controls continue to threaten the confidentiality and availability of IRS's financial processing systems and information, and limited assurances of the integrity and reliability of its financial and taxpayer information.

For more information:
http://weblogs.baltimoresun.com/business/han****/blog/2008/01/gao_numerous_security_flaws_in.html