IRS systems leave taxpayer data at risk, audit finds

The agency has developed security policies, but incomplete implementation results in weak access controls that expose sensitive data to internal threats, GAO says.