IRS Makes Plans with Private Sector to Curb Future Cyber Attacks

John Koskinen, Commissioner of the IRS, announced yesterday in a press conference that his agency is making plans to join forces with states and the entire private tax industry to combat cyber tax criminals like the ones who recently accessed taxpayer data through the “Get Transcript” application of the IRS website.  It’s the whole “it takes a village” concept applied to the ongoing battle to protect sensitive information on the internet. Government and industry plan to share information in ways they have never done before.

As a tax relief attorney, I don’t know a lot about computers and information technology.  If the top level guys at the IRS are IT ninjas, I’m probably a yellow belt noodle maker.  But commingling of IRS and private sector data makes me nervous, if that’s what they’re talking about doing.  I understand the desire to cooperate on this monumental task of stopping international cyber-criminal syndicates, but I feel like a little separation between public and private sector computer systems is healthy.  It seems to my naive mind that the more connected they are, in the event of a large-scale hack, the more likely we all go down together.

Here are a few nice words from Koskinen’s press conference:

[A]ny organization in the public or private sectors with IT systems and sensitive data faces a battle that seems to grow every day. The nation’s tax system is no different….No single organization can go it alone….None of us has a silver bullet to defeat this enemy….Working together we can achieve results that none of us, working alone, could accomplish.

Such an American thing to do, don’t you think?  Everyone joining forces and working together to defeat a common enemy and prevent a crisis.  I hope this is a step in the right direction and not just the IRS telling us what we want to hear.  The upside to all this for the IRS is that the next time their systems are compromised, maybe they can share the blame with businesses and states.

IRS Claims Lerner's Emails are Unrecoverable

The IRS scandal involving the disparate treatment by the IRS of certain tax exempt organizations (or their applications for tax exempt status) still has life.  The government committees responsible for investigating the IRS “targeting scandal,” as it has come to be known, wanted to see Lois Lerner’s emails, and last week the IRS responded that they are unable to recover her emails, apparently due to the fact that her computer crashed in 2011 and the IRS did not make a practice of preserving all emails on their servers.

Experts find it hard to believe that the IRS lost the files innocently and that they cannot be recovered.  From a legal standpoint, it is common knowledge that you don’t delete emails anytime there is a potential for litigation; in fact, you do whatever you can to preserve them.  From a tech standpoint, it is difficult to believe that the emails could have simply disappeared, even if the IRS was not conscientiously backing up data at the time.  The idea that files are never really 100% gone when you delete them has some truth to it.

From a layperson point of view, it appears that we’re witnessing some sort of cover-up.  It just doesn’t pass the “smell test.”  I feel like my 10-year-old would be able to sit down at Lerner’s computer and at least find something.  But if not, in this day and age, computer geeks are a dime a dozen.  Why can’t we just hire the world’s smartest forensic geek at the FBI or CIA and be done with this?

However, as much as the experts and the general public do not believe the emails were lost inadvertently, I have to admit that the facts as we know them do not sound too far fetched to me.  From the viewpoint of a tax attorney who deals with the IRS every day, it seems plausible that the IRS really would not save or properly back-up the emails.  There’s no way the IRS could possibly save everything.  And as for Lerner’s computer crashing, well that kind of thing happens constantly at IRS service centers all around the country.  Sometimes when I’m talking with an IRS representative on the phone, I try to imagine the computer their working on and, in my mind, it usually has a 3.5″ floppy disc drive and a behemoth monitor that is twice as deep as it is wide.

IRS Violating Software License Terms

The IRS is using some computer software that it hasn’t paid for, and is paying for other programs its employees aren’t even using, according to a new TIGTA audit released Tuesday that said the tax agency could be violating copyright laws.

The Treasury Inspector General for Tax Administration found serious problems with IRS software license management practices, many of which could be remedied if they would simply keep better records.  Read the full report here.

Software licenses are typically written in such a way that the software may be shared only on a certain number of computers.  The IRS appears to be doing what so many other private parties tend to do: sharing software on more systems than is allowed by a license.  And then they have also been doing what few people in their right mind would do: paying for licenses that they aren’t using.  This is a signature IRS move if I have ever seen one!