IRS not capturing the true cost of its legacy IT footprint, watchdog says

A GAO report released Tuesday said the IRS has yet to finalize plans to dispose of legacy IT systems as part of its modernization efforts.

A GAO report released Tuesday said the IRS has yet to finalize plans to dispose of legacy IT systems as part of its modernization efforts. STEFANI REYNOLDS / GETTY IMAGES

An oversight report requested by Rep. Gerry Connolly found that the tax agency lacks timelines for decommissioning decades-old legacy systems and isn't tracking how much they are paying for upkeep of out-of-date software.

The IRS is lagging in efforts to modernize its technology infrastructure, in part because the tax agency had to reprogram funds to accommodate a staffing crunch during the most recent tax season.

But with $80 billion in funding over 10 years from the Inflation Reduction Act – including $4.8 billion for business systems modernization and $25.3 billion for operations support – the IRS appears poised to make good on promises to update its aging systems, including the 60-year-old Customer Account Data Engine 2.

The tax agency has some work to do to set out timelines for decommissioning legacy systems and addressing customer experience and user needs of cloud-based systems as part of its overall modernization effort, according to a Government Accountability Office report publicly released on Tuesday.

Rep. Gerry Connolly (D-Va.), the ranking member of a House Oversight subcommittee focusing on cybersecurity and information technology, commissioned the report last year.

"The report reaffirms that the IT challenges at the IRS are substantial and it provides further detail on where we can focus our oversight," Connolly said in a statement. "First, the IRS does not even have its arms around its legacy IT problem. Legacy IT costs are still unknown, modernization plans lack timelines for the disposition of legacy systems, nearly a quarter of the agency’s software inventory is legacy software, and the effort to replace the 60-year-old Individual Master File is on hold with no definitive end in sight."

The report tried to quantify the legacy IT woes at the tax agency. According to GAO, the IRS has about 23% of its software inventory qualifies as legacy. Additionally, about 32% of that legacy inventory is four or more updates behind the current commercially available version. The IRS also tags about 8% of its hardware – servers, switches, workstations, mainframes – as legacy tech. However the IRS declined to permit GAO to include a detailed breakdown of its legacy hardware profile in the report because it was "too sensitive to publicly report."

Jeffrey Tribiano, the IRS deputy commissioner for operations support, wrote in reply to the GAO report that the IRS expects to complete a modernization plan this month to hit "the long-term goal of transforming taxpayer service, enforcement and technology with the [Inflation Reduction Act] funding Congress made available through the end of FY 2031."

The IRS also plans to look beyond its current IT cost accounting to use a new tool to provide more detail on the true costs of operating legacy systems. That data is not captured via the Technology Business Management approach to measuring IT costs – an approach that is mandated by the Office of Management and Budget.

The tax agency agreed with all nine recommendations from the report, including setting timelines for decommissioning legacy systems that play a part in all its multiple modernization programs as well as taking steps to standardize service level agreements with cloud providers and to follow governmentwide policy on securing high value assets in the cloud. 

Right now, as Tribiano noted in his reply comments, none of high-value assets owned by the IRS is hosted in a cloud environment.

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.