Report Type
Report Category
Submitting Agency
- (-) Department of Defense OIG (55)
- (-) Treasury Inspector General for Tax Administration (50)
- Alaska Division of Legislative Audit (1)
- AmeriCorps Office of Inspector General (1)
- Amtrak (National Railroad Passenger Corporation) OIG (1)
- Architect of the Capitol OIG (6)
- Arizona Auditor General (7)
- California State Auditor (12)
- Connecticut Office of the Auditors of Public Accounts (1)
- Council of Inspectors General on Financial Oversight (4)
- Defense Intelligence Agency OIG (3)
- Department of Agriculture (1)
- Department of Agriculture OIG (25)
- Department of Commerce (1)
- Department of Commerce OIG (9)
- Department of Defense (1)
- Department of Education (1)
- Department of Education OIG (38)
- Department of Energy (1)
- Department of Energy OIG (2)
- Department of Health & Human Services (1)
- Department of Health & Human Services OIG (82)
- Department of Homeland Security (1)
- Department of Homeland Security OIG (30)
- Department of Housing and Urban Development (1)
- Department of Housing and Urban Development OIG (41)
- Department of Justice (2461)
- Department of Justice OIG (266)
- Department of Labor (2)
- Department of Labor OIG (68)
- Department of State (1)
- Department of State OIG (2)
- Department of the Interior (1)
- Department of the Interior OIG (35)
- Department of the Treasury (1)
- Department of the Treasury OIG (147)
- Department of Transportation (1)
- Department of Transportation OIG (11)
- Department of Veterans Affairs (1)
- Department of Veterans Affairs OIG (44)
- Election Assistance Commission (1)
- Election Assistance Commission OIG (23)
- Environmental Protection Agency (1)
- Environmental Protection Agency OIG (13)
- Farm Credit Administration OIG (1)
- Federal Communications Commission (1)
- Federal Housing Finance Agency OIG (4)
- Federal Reserve Board & CFPB OIG (11)
- General Services Administration (1)
- General Services Administration OIG (12)
- Government Accountability Office (1)
- Government Publishing Office OIG (1)
- Illinois Auditor General (2)
- Kansas Legislative Division of Post Audit (5)
- Legal Services Corporation (1)
- Maryland State Legislative Audits (1)
- Mississippi Office of the State Auditor (1)
- National Aeronautics and Space Administration (1)
- National Aeronautics and Space Administration OIG (1)
- National Archives and Records Administration (1)
- National Endowment for the Arts (1)
- National Endowment for the Humanities (1)
- National Reconnaissance Office OIG (3)
- National Science Foundation (1)
- National Science Foundation OIG (14)
- National Security Agency OIG (1)
- New York, Ulster County Office of the Comptroller (4)
- New York State Comptroller (2)
- North Carolina, City of Charlotte Internal Audit Department (3)
- North Carolina State Auditor (1)
- Nuclear Regulatory Commission (1)
- Office of Management and Budget (4)
- Office of Personnel Management (1)
- Office of Personnel Management OIG (2)
- Office of the Special Inspector General for the Troubled Asset Relief Fund (1)
- Oregon, Multnomah County Auditor's Office (5)
- Oregon Secretary of State, Audits Division (1)
- Pandemic Response Accountability Committee (42)
- Peace Corps (1)
- Peace Corps OIG (3)
- Pension Benefit Guaranty Corporation OIG (8)
- Railroad Retirement Board OIG (8)
- Securities and Exchange Commission OIG (2)
- Small Business Administration (1)
- Small Business Administration OIG (60)
- Social Security Administration (1)
- Social Security Administration OIG (7)
- Special Inspector General for Pandemic Recovery (47)
- Special Inspector General for the Troubled Asset Relief Program (2)
- State of Louisiana (1)
- Tennessee Valley Authority OIG (5)
- Texas, City of Austin Auditor (4)
- U.S. Agency for International Development (1)
- U.S. Agency for International Development OIG (16)
- U.S. Postal Service OIG (16)
- Virginia Auditor of Public Accounts (1)
- Wisconsin Legislative Audit Bureau (12)
Agency Reviewed
Management Challenges
Any Recommendations
Any Open Recommendations
Reports
Compliance Efforts Are Needed to Address Refund Claims Reported on Form 1139 That Are Based on the CARES Act Net Operating Loss Carryback Provisions
Track and monitor examination results for the 25 “still open” examinations of Forms 1120 with reported NOL and an associated Form 1139 reported in Figure 4 of this report, excluding Joint Committee Refund cases which currently have specific monitoring requirements in place.
Use the examination results from Recommendation 1 to assess whether to increase the number of examinations of Forms 1120 with reported NOL and an associated Form 1139.
The Commissioner, SB/SE Division should review the examination results and computations of proposed NOL adjustments for the 25 “still open” Form 1120 examinations with associated Forms 1139, as referenced in Figure 4, excluding Joint Committee Refund cases which currently have specific review requirements in place, to determine if the interim guidance regarding NOLs is being properly followed.
Delays Continue to Result in Businesses Not Receiving Pandemic Relief Benefits
On November 22, 2021, we notified the Director, Customer Account Services, Wage and Investment Division, that IRS employees were erroneously suspending Forms 941-X when the amended employment tax return did not include an adjustment to the amount of deferred Social Security tax. We recommended that the Accounts Management function immediately review the Forms 941-X that are identified in the suspense inventory as an adjustment to the amount of deferred Social Security tax to ensure that they are categorized properly.
The Commissioner, Wage and Investment Division, should evaluate the current inventory of backlogged claims related to pandemic relief and develop specific plans to prioritize claims and develop timelines to process backlogged claims.
The Commissioner, Wage and Investment Division, should review the 928 business entities identified that do not appear to qualify as an RSB and take actions needed to recover the ERCs that are determined to be erroneous.
The Commissioner, Small Business/Self-Employed Division, should identify all fourth quarter Tax Year 2021 paper-filed Forms 941 processed prior to when the programming was implemented and identify amended employment tax returns receiving the ERC for which there was no indication that the business was an RSB and take actions needed to recover the ERCs that are determined to be erroneous.
On May 13, 2021, we notified the Director, Examination, Small Business/Self-Employed Division, about the inconsistent referral criteria and recommended that the IRS update referral criteria to include Forms 941-X with refundable credits.
On November 23, 2021, we alerted the Director, Customer Account Services, Wage and Investment Division, that Forms 941-X were not being referred to Examination as required and recommended that the Accounts Management function provide additional guidance to its employees to reinforce established CAT-A referral criteria.
The Commissioner, Wage and Investment Division, should review the 41 Form 941-X claims identified with a nonrefundable COVID-19 related employer credit that meet CAT-A referral criteria and take actions needed to recover credits that are determined to be erroneous.
Provide additional training to employees as it relates to referring Forms 941-X to Examination for review.
Submit a request for the development of a systemic process to identify Form 941-X claims that meet referral criteria and alert the Accounts Management employee when processing these claims of the need to refer the return to Examination.
American Rescue Plan Act: Assessment of the Child Tax Credit Update Portal’s Capabilities and Related Processes
On January 25, 2022, we notified the Director, Return Integrity and Compliance Services, of potential inaccuracies and other areas of concern based on our review of information on www.ChildTaxCredit.gov. For example, the website references Publication 972, Child Tax Credit and Credit for Other Dependents, which the IRS made obsolete for Tax Year 2021, and did not reference thresholds for single or married filing separately taxpayers. We recommended that the IRS review our concerns and share them with the Department of the Treasury to address.
On January 28, 2022, we notified the Director, Return Integrity and Compliance Services, of our concerns with the reconciliation process when there are undelivered checks. This concern arises when the taxpayer files their Tax Year 2021 tax return but has a check for an advance Child Tax Credit payment that was returned undelivered after the taxpayer filed their tax return. In these situations, the taxpayer will not receive the payment from the undelivered check and will need to work with the IRS, after filing their tax return, to recover their payment. We recommended that the IRS develop a process to continue to proactively identify and correct accounts with undelivered advance Child Tax Credit that post to accounts after the IRS processes the Tax Year 2021 tax return.
Fingerprinting and Employment Eligibility Verification Delays Due to the COVID-19 Pandemic May Increase Taxpayer Data Exposure Risks
The Chief Human Capital Officer should conduct periodic reviews of the Form I-9 SharePoint site and provide periodic reminders to hiring officials responsible for completion of Forms I-9 to determine whether or not those individuals are still pending physical inspection and update the records based upon the results of that review to ensure that the Form I-9 SharePoint site is a complete and accurate representation of the status of the deferred physical inspections.
Audit of DoD Use of the Government Purchase Card in Response to the Coronavirus Disease–2019 Pandemic
The objective of this audit is to determine whether cardholders used the Government Purchase Card to support DoD's response to the pandemic in accordance with Federal and DoD policies. We may revise the objective as the audit proceeds, and we will also consider suggestions from management for additional or revised objectives.
Processing of Recovery Rebate Credit Claims During the 2021 Filing Season
On June 15, 2021, we alerted IRS management of our concerns with the systemic calculation of the allowable RRC amount. We recommended that IRS management review the returns we identified and provide us with any corrective actions they intended to take.
Conduct analysis of Tax Year 2020 tax returns processed after May 27, 2021, to identify additional individuals who received an RRC for a qualifying child for which the IRS has already paid an EIP or an RRC to someone else and take the actions needed to recover RRC payments that are determined to be erroneous.
Review the 7,022 individuals identified in which the IRS issued multiple RRCs for a qualifying child who was claimed on more than one tax return and take the actions needed to recover payments that are determined to be erroneous.
Conduct analysis of Tax Year 2020 tax returns processed after May 27, 2021, to identify additional individuals who received an RRC for a qualifying child who was claimed on more than one tax return and take the actions needed to recover payments that are determined to be erroneous.
Review the 75,594 tax returns identified in which the individual is potentially a nonresident alien and take the actions needed to recover the RRC payments that are determined to be erroneous.
Perform analysis of Tax Year 2020 tax returns filed after May 27, 2021, to identify additional tax returns with the same characteristics as those the IRS determined were filed by a nonresident alien and take the actions needed to recover erroneous RRC payments.
The Commissioner, Wage and Investment Division, should coordinate with the Territories to confirm and recover erroneous RRCs.
Review the nearly 6.9 million potentially eligible individuals we provided to the IRS who had not filed a Tax Year 2020 tax return as of May 27, 2021, and send a letter to those individuals who still have not filed a Tax Year 2020 return to encourage them to file a return and claim the RRC if eligible.
Review the 3.1 million eligible individuals we identified who filed a Tax Year 2020 return and proactively issue these taxpayers their credit.
Conduct additional analysis to identify tax returns filed after May 27, 2021, in which an individual is eligible for the RRC based on their Tax Year 2020 tax return and did not claim the credit, and proactively issue the taxpayer their credit.
If IRS management does not proactively issue the RRC to individuals who filed a return and did not claim the credit, the IRS should notify these individuals that they are eligible to claim the RRC and should file an amended tax return to claim the credit.
On March 19, 2021, we alerted IRS management of our concerns that an incorrect amount of advance payments was being used to calculate the RRC for some taxpayers. We recommended that IRS management review the returns we identified and provide us with any corrective actions they intended to take.
Work with the BFS to ensure that individuals who were denied the RRC and have still not activated their EIP1 or EIP2 debit card as of December 31, 2021, have EIPs reversed in their tax account and are issued their RRC. These processes should include notifying Metabank that the debit cards in question are to be cancelled.
Work with the BFS to obtain recurring data during Processing Year 2022 to identify individuals who have not activated their advance ARPA RRC debit card at the time a return is filed and implement processes to reverse the advance payment so these individuals can receive the RRC on their Tax Year 2021 tax return.
We alerted the Commissioner, Wage and Investment Division, of our concerns that the IRS was unnecessarily burdening taxpayers whose RRC claims were identified for manual ERS review. We recommended the IRS develop processes to systemically adjust RRC claims using the computer-generated RRC calculation.
On April 6, 2021, we alerted IRS management of our concerns regarding ERS tax examiners incorrectly computing the RRC (see management’s action in response to Recommendation 1). We recommended the IRS review the returns we identified and take the actions necessary to ensure that these taxpayers receive the amount of the RRC they are entitled to receive.
On March 12, 2021, we alerted IRS management of our concerns that some tax returns were not being identified by fraud filters. We recommended IRS management review the returns we identified and associated fraud filters to identify why these returns were not selected and make programming changes as necessary to ensure proper identification of returns with potentially questionable claims.
Conduct analysis to identify Tax Year 2020 RRC claims processed after May 27, 2021, to identify other returns in which ERS tax examiners incorrectly calculated the number of allowable dependents and returns that were not reprocessed per IRS guidance after programming was corrected, and ensure that these taxpayers receive the correct amount of the RRC.
Review the 14,508 individuals identified in which the IRS issued an RRC to an individual who was claimed as a dependent on someone else’s tax return but did not check the dependent box and take the actions needed to recover payments that are determined to be erroneous.
Conduct analysis of Tax Year 2020 tax returns processed after May 27, 2021, to identify additional individuals who received an RRC and were also claimed as a dependent on someone else’s tax return but did not check the dependent box, and take the actions needed to recover the RRC payments that are determined to be erroneous.
Review the 238,680 individuals under the age of 25 identified as potential dependents and take the actions needed to recover payments that are determined to be erroneous.
Review the 15,741 individuals identified in which the individual incorrectly received an RRC and an EIP for the same qualifying child and take the actions needed to recover RRC payments that are determined to be erroneous.
The Child Tax Credit Update Portal Was Successfully Deployed, but Security and Process Improvements Are Needed
Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.
Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.
Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.
Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.
Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.
Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.
Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.
Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.
Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.
Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.
Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.
Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.
The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.
The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.
The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.
The Chief Privacy Officer should establish a process that complies with Office of Management and Budget requirements regarding the selection, implementation, assessment, and continuous monitoring of privacy controls.
The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.
The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.
The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.
The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.
The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.
The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.
The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.
The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.
The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.
Ensure that all CTC Update Portal and SADI system associated POA&Ms (listed in Appendix II) are completed timely based on IRS-defined timelines and processes.