The IRS did not complete all corrective actions recommended in our prior review.
The IRS did not implement effective compliance reviews to ensure IDRS business divisions [3] were complying with IDRS security report requirements.