Summary

  • In its 29 September 2026 final audit, the Treasury Inspector General for Tax Administration found that the IRS's third Procurement Hub contract cost $4.5 million, lacked clear engineering milestones and was awarded without sufficient Hub-specific market research. The IRS paid the full amount in October 2025; $651,000 of the contract covered engineering services.
  • At a September 2025 access snapshot, 959 of 1,017 Hub users had not used the IRS's required entitlement system for the Hub. The Procurement Office announced a sunset on 21 September 2026 and ended access two days later. A move of the Hub's functions to an existing platform was a goal for 31 December, not a completed migration in the audit.

A tool to defend spending got a very fast purchase

The IRS needed a way to answer Treasury's recurring questions about contract cuts. Spreadsheets pulled from several systems had produced inconsistent weekly reports. In April 2025 the agency bought the Procurement Hub through an existing purchasing agreement; in May it began using the tool to combine three data sources and record its “Defend the Spend” decisions. That use had a clear operational purpose. The controls around the tool moved at a different speed.

The first two vendor orders were $250,000 each, covering six months of introductory pricing. The third, covering September 2025 to September 2026, jumped to $4.5 million and added artificial-intelligence capabilities. By then the original contract-rationalization campaign had finished, according to TIGTA's report page and audit. The IRS still wanted to explore the Hub for acquisition planning. TIGTA found no sufficiently relevant market research for that larger, different purchase. The research the IRS cited concerned an earlier Criminal Investigation analytics requirement.

The $4.5 million agreement combined a software licence with $651,000 in engineering work. It did not set clear milestones or deliverables for the engineering portion. The IRS paid the full contract price at the start in October 2025, explaining that licence fees are paid upfront. TIGTA accepted that logic for the licence, then drew the line at prepaid engineering: without milestones, the agency had less leverage to test progress or recover value if work fell short. The value of any unfinished engineering remains unmeasured; signed acceptance records would establish it.

The access story followed the same institutional shortcut. Of 1,017 employees with Hub access in September 2025, 959 had not used the IRS Business Entitlement Access Request System for the Hub. The 58 who had used it shared an entitlement that failed to distinguish 17 user groups and their actual permissions. Audit logs showed 903 of the 1,017 had not used the Hub from April through September; those inactive accounts had not been disabled under the agency's 120-day rule. Those counts describe different tests on a dated population. They expose a design that granted access before the normal checks could say who needed what.

TIGTA also found that adding the Hub to an existing analytics platform changed the information and mission handled there, yet the IRS had not sent an updated risk-authorization package to the approving official. IRS staff called the Hub a pilot. The auditors pointed out that a pilot carrying new data and duties still changes the system boundary. In May 2026, the IRS established new entitlement categories and required users to reapply or lose access. A July count of 171 access entitlements was reported; one person could hold more than one.

The agency's procurement office announced the Hub's sunset on 21 September 2026 and terminated access on 23 September, before TIGTA issued the final audit. The IRS set a goal of moving the functions to an existing platform by 31 December. The public audit stops at the December migration target; an acceptance record naming the receiving platform and start date would establish completion. The next document that matters is an accepted replacement with its own authorised boundary, access register and service milestones. Buying the next tool quickly would be an oddly faithful tribute to the last one.

Sources