The development of standard identification cards under the governmentwide Homeland Security Presidential Directive 12 initiative is supposed to help provide security in a cost-efficient manner. But the Internal Revenue Service, the lead for the Treasury Department’s implementation of HSPD-12, wasted $3.5 million on unnecessary hardware, software and services in its early efforts because of poor management and oversight, the Treasury Inspector General for Tax Administration (TIGTA) said.
“As the lead bureau for Treasury, IRS is charged with ensuring the funds are spent prudently,” said Michael Phillips, deputy IG for audit, in the report posted Dec. 20.
Under HSPD-12, agencies so far were to have verified and/or completed background investigations and issued identification cards for all employees with fewer than 15 years of service. By October 2008, agencies must do the same for federal workers with more than 15 years’ service. Treasury has estimated that it would cost $421 million over 14 years to build and maintain an HSPD-12 system, including enrollment, card printing with encryption of personal data, systems infrastructure and card maintenance. It has committed $30 million to the HSPD-12 initiative to date.
The TIGTA investigation evaluated IRS’ HSPD-12 activities from the beginning of the program in 2005 through May 2007. As a result of the audit, IRS switched in May from its stand-alone approach to the managed services available through the General Services Administration to acquire the smart cards.
In its evaluation of IRS activities at the time, TIGTA found that the IRS project team did not manage contracts for the program effectively. Statements of work were too general to hold contractors accountable for work performed, and IRS paid vendors without verifying that work was performed, according to TIGTA. For example, IRS spent $837,616 to purchase 18 public-key infrastructure servers that were not used for the program and were not needed until sometime in the future of the program.
IRS had hired Booz Allen Hamilton, Mitre and Presidio to develop and implement the HSPD-12 requirements. TIGTA found that the statements of work for Mitre’s task order were adequate but those for the other two were not well-defined. IRS also used existing contracts with Booz Allen Hamilton to perform work related to the HSPD-12 program and charging those existing contracts for HSPD-12 work. The products were identified too generally to track and manage, the report states.
One of the problems was that IRS did not prepare a formal business case for the HSPD-12 program, which is one of its established governance procedures. The IRS HSPD-12 project management office did prepare an internal business case, but it did not comply with IRS’ business case requirements and was not submitted to the Treasury HSPD-12 governance committees, the report states. As a result, the governance committees did not have sufficient information with which to make critical management decisions for the program.
Digg
De.licio.us
Slashdot
Technorati
