The IRS\u2019s Computer Security Incident Response Center, or CSIRC, is doing an adequate job of stopping cyberattacks, according to an audit by the Treasury Department\u2019s Inspector General for Tax Administration.<\/p>\n\n\n\n
\u201cIn general, the CSIRC prevented, detected, reported and responded to cybersecurity incidents,\u201d the audit concluded. For example, out of a sample 100 incidents from a total of 368 incidents in FY 2015 and 2016, the CSIRC \u201cproperly identified and documented the type, nature and scope of all 100 incidents with information such as the systems and applications affected, the source of the incident, and the specific kind of lost equipment.\u201d<\/p>\n\n\n\n
Nonetheless, the IG audit also found that \u201cnot all incidents were properly reported, some supporting incident documentation was insufficient, incident costs were not captured, and reporting procedures were inconsistently applied.\u201d<\/p>\n\n\n\n
Auditors recommended that employees and contractors be properly trained in cybersecurity, and that contractors without proper security training be denied access to IRS systems.<\/p>\n","protected":false},"excerpt":{"rendered":"
The IRS\u2019s Computer Security Incident Response Center is stopping cyberattacks, but could improve its reporting and documentation, according to the Treasury Department\u2019s Inspector General for Tax Administration.<\/p>\n","protected":false},"author":7,"featured_media":27463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":9,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[106,108,31,33,9,40],"tags":[],"coauthors":[3339],"class_list":["post-15272","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-daily-brief-sub-section","category-home","category-newsletters","category-federal-oversight","category-watchdogs"],"acf":{"subheadline":"","legacy_arc_id":"Z6H6BYWI3NA3TICZEL7SBQL3CQ","arc_canonical_url":"\/federal-oversight\/2017\/09\/06\/irs-cybersecurity-adequate-not-airtight-audit-finds\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n