TIGTA: IRS Passwords at Risk


Investigators posing as IRS computer help desk personnel were able to persuade 60% of Service employees they contacted to change their password to one the investigator suggested, a violation of IRS computer security rules. The findings by the Treasury Inspector General for Tax Administration (TIGTA) echoed those of a similar test by TIGTA in 2001, when 71% of employees contacted breached password security. In a retest in 2004, only 35% of employees contacted did so. In the latest check, only eight of the 102 employees approached reported the request as suspicious; such reporting is a requirement under IRS computer security protocols. The IRS will remind employees of potential threats and conduct its own, more extensive test during fiscal 2008.

SPONSORED REPORT

Why cybercriminals are targeting CPAs

This free report expands on the most commonly found scams, why education and specialized IT knowledge help to lessen security vulnerabilities, and why every firm should plan carefully for how it would respond to a breach.

PODCAST

How tax reform — and Excel — are changing the CPA Exam

Mike Decker, the vice president of examinations at the AICPA, discusses changes being made to the exam as a result of tax reform — and about how Excel will now be available for use on the test.