Reports

Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.

Ensure that the ELC coaches comply with existing agency requirements related to the independent verification and validation of all ELC artifacts.

Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.

Prioritize remediation efforts on the two noncompliant SADI system servers that have weighted noncompliance scores of less than 90 percent.

Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.

Ensure that only authorized approving authorities provide status updates and grant final approval of ELC artifacts during required milestone reviews.

Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.

Establish a formal process, which includes routine updates, to identify primary and proxy approvers for all ELC artifacts.

The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.

The Chief Information Officer should ensure that systems supported by the CSPs have an approved IRS ATO prior to a system’s deployment.

The Chief Privacy Officer should establish a process that complies with Office of Management and Budget requirements regarding the selection, implementation, assessment, and continuous monitoring of privacy controls.

The Chief Privacy Officer should establish a process that complies with Office of Management and Budget requirements regarding the selection, implementation, assessment, and continuous monitoring of privacy controls.

The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.

The Chief Privacy Officer should ensure that formal documentation is created that shows that all the privacy controls applicable to the SADI system are properly selected, implemented, and assessed.

The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.

The Chief Information Officer should ensure that the Cybersecurity function validates that all required NIST physical and environmental protection and media protection controls are implemented.

The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.

The Chief Information Officer should ensure that the IRS prioritizes completing the processes that will validate newly built servers being placed into the production environment meet minimum compliance requirements and initiate vulnerability scanning and remediation during the server build process.

Ensure that all CTC Update Portal and SADI system associated POA&Ms (listed in Appendix II) are completed timely based on IRS-defined timelines and processes.