# IRS Enhances Cybersecurity Program

The Treasury Inspector General for Tax Administration (TIGTA) reported that the Internal Revenue Service's (IRS) cybersecurity program remains "not effective" for fiscal year 2026, despite some improvements in risk identification, protection, and detection capabilities. The IRS continues to face critical vulnerabilities that expose taxpayer data to potential cyber threats. IRS leadership, including CIO Kaschit Pandya and Commissioner Daniel Werfel, acknowledge these challenges and are committed to strengthening governance, continuous monitoring, and remediation efforts to improve cybersecurity posture.

- **Why this matters:** Procurement professionals should anticipate increased demand for cybersecurity solutions and services as the IRS seeks to address persistent vulnerabilities and enhance its security framework.
- The IRS's focus on improving governance documentation and program artifacts indicates opportunities for vendors specializing in compliance, risk management, and continuous monitoring tools aligned with NIST standards.
- Contractors should prepare for potential solicitations aimed at modernizing IRS cybersecurity infrastructure and supporting ongoing remediation efforts.
- Organizations providing cybersecurity consulting and implementation services may find strategic entry points as the IRS prioritizes safeguarding sensitive taxpayer information.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** September 18, 2026

### Government Entities
- Internal Revenue Service (IRS)
- Treasury Inspector General for Tax Administration (TIGTA)
- National Institute of Standards and Technology (NIST)

### Key Quotes
> The IRS will continue enhancing its governance documentation and program artifacts to improve traceability and transparency.
> — Kaschit Pandya, Chief Information Officer

### Sources
- [Despite upgrades, IRS cyber program still ‘not effective,’ watchdog says | FedScoop](https://fedscoop.com/irs-cybersecurity-fisma-tigta-report) - FedScoop
- [IRS Security Program 'Not Effective' In 2026, TIGTA Says - Law360 Tax Authority](https://www.law360.com/articles/2527474/irs-security-program-not-effective-in-2026-tigta-says) - law360.com