{"resourceId":"irs-ai-portfolio","versions":[{"version":"legacy/2026-08-27/irs-ai-portfolio","resource":{"id":"irs-ai-portfolio","title":"A large AI portfolio exposes inventory and workforce control gaps","organization":"U.S. Internal Revenue Service","sector":"Tax administration","geography":"United States","publishedAt":"March 24, 2026","sourceName":"IRS: Actions Needed to Address Skills Gaps, Information Quality, and Strategic Management","sourceLabel":"GAO-26-107522","sourceUrl":"https://files.gao.gov/reports/GAO-26-107522/index.html","evidenceClass":"government-audit","outcomeClass":"mixed","topics":["knowledge-work","infrastructure","data-security","governance-procurement","accessibility-workforce","operating-model"],"finding":"GAO reviewed how the IRS manages a fast-growing AI portfolio spanning operational tools, voice bots, chatbots, and development-stage use cases.","sledRelevance":"As portfolios grow, SLED leaders need an inventory connecting each use case to an owner, lifecycle status, data, risk tier, controls, and performance evidence.","evidence":"The IRS reported 126 use cases by June 2025, with about one-third operational. Eleven voice bots and two chatbots handled nearly 25 million sessions during the 2025 filing season; GAO also found inventory lag, mislabeling, and workforce gaps.","architectureImplications":"Make the use-case inventory a living system of record tied to architecture review, dependencies, production status, monitoring, and retirement.","governanceImplications":"Assign portfolio ownership, inventory-quality controls, workforce planning, outcome reporting, and deadlines for correcting lifecycle records.","securityPrivacyImplications":"Link each use case to its data classification, privacy impact, authorization boundary, model monitoring, and incident owner.","caveats":"The federal tax environment differs from SLED operations, and session volume does not demonstrate answer quality or citizen benefit."}},{"version":"enrichment/2026-09-05T02:33:27.019Z/irs-ai-portfolio","resource":{"id":"irs-ai-portfolio","title":"A large AI portfolio exposes inventory and workforce control gaps","organization":"U.S. Internal Revenue Service","sector":"Tax administration","geography":"United States","publishedAt":"March 24, 2026","publicationDate":"2026-03-24","eventDate":null,"sourceName":"IRS: Actions Needed to Address Skills Gaps, Information Quality, and Strategic Management","sourceLabel":"GAO-26-107522","sourceUrl":"https://files.gao.gov/reports/GAO-26-107522/index.html","evidenceClass":"government-audit","outcomeClass":"mixed","topics":["knowledge-work","infrastructure","data-security","governance-procurement","accessibility-workforce","operating-model"],"finding":"GAO reviewed how the IRS manages a fast-growing AI portfolio spanning operational tools, voice bots, chatbots, and development-stage use cases.","sledRelevance":"As portfolios grow, SLED leaders need an inventory connecting each use case to an owner, lifecycle status, data, risk tier, controls, and performance evidence.","evidence":"The IRS reported 126 use cases by June 2025, with about one-third operational. Eleven voice bots and two chatbots handled nearly 25 million sessions during the 2025 filing season; GAO also found inventory lag, mislabeling, and workforce gaps.","architectureImplications":"Make the use-case inventory a living system of record tied to architecture review, dependencies, production status, monitoring, and retirement.","governanceImplications":"Assign portfolio ownership, inventory-quality controls, workforce planning, outcome reporting, and deadlines for correcting lifecycle records.","securityPrivacyImplications":"Link each use case to its data classification, privacy impact, authorization boundary, model monitoring, and incident owner.","caveats":"The federal tax environment differs from SLED operations, and session volume does not demonstrate answer quality or citizen benefit.","streamIds":["state-government","local-government"],"roles":{"sales":"Interpretation — Customer problem: a growing AI inventory can lose contact with deployed systems and available workforce capacity. Stakeholders: portfolio management, enterprise architecture, program owners, risk, privacy, and workforce planning. Discovery: which records lack owners or correct lifecycle states; how is production reconciled to the inventory; and who measures service outcomes? Value hypothesis: a maintained system of record may improve management decisions and expose unmet control or skill needs. Potential engagement: inventory reconciliation and operating-model assessment before automation. GAO's findings of lag, mislabeling, and workforce gaps justify those questions. Unsupported claims: the federal tax setting does not prove the same gaps locally, and nearly 25 million bot sessions do not establish accurate answers, citizen benefit, or cost savings.","engineering":"Interpretation — Fit: improve the existing portfolio record rather than assume a new AI platform is needed. Architecture and integration: link each use case to architecture review, dependencies, environment, lifecycle state, monitoring, and retirement records. Prerequisites: authoritative system lists, accountable owners, and definitions distinguishing experiments from operational services. Constraints: inventory lag and inconsistent labels can undermine any automation built on them. Security: record data classification, privacy assessment, authorization boundaries, model monitoring, and incident ownership without exposing sensitive system details broadly. Proposed validation: trace a sample of inventory entries to deployed configurations and source records, and trace deployed AI systems back to entries; measure mismatches and verify corrections before relying on portfolio reporting.","delivery":"Interpretation — Work: reconcile the inventory, assign missing owners, correct lifecycle states, assess skill gaps, and establish a recurring update process. Dependencies: program cooperation, architecture and operations records, and workforce-planning capacity. Ownership: a portfolio owner sets record-quality rules; service owners attest their entries; operations and privacy teams maintain control and incident details. Skills and adoption: train contributors in status definitions and evidence requirements, using real misclassification examples. Governance checkpoints: initial reconciliation, deployment/change approval, and periodic retirement review. Proposed acceptance: sampled records match operational reality, discrepancies have dated remediation owners, and every operational sample identifies monitoring and incident responsibility. Risks include stale manual attestations, counting pilots as production, and reporting session volume without quality or outcome evidence."},"retrievedAt":null,"enrichedAt":"2026-09-05T02:33:27.019Z","enrichmentBasis":"archived evidence"}}]}