PIA Approval Date: September 8, 2008
Requested Operational Date: ISRP has been operational since September 1999.
ISRP System Overview:
The Integrated Submission and Remittance Processing (ISRP) system is a major application designed to capture, format and forward information related to tax submissions and remittances in electronically readable formats to downstream IRS systems. ISRP is owned and operated by the Wage and Investment (W&I) Business Unit (BU) and is comprised of two main functions which include Submission Processing, and Remittance Processing.
System of Record Number(s):
Treasury/IRS 24.030, Individual Master File
Treasury/IRS 24.046 Business Master File
Treasury/IRS 36.003 General Personnel and Payroll records.
Treasury/IRS 34.037 Audit Trail
Data in the System
- Describe the information (data elements and fields) available in the system in the following categories:
- Taxpayer: The ISRP System provides for the capture of tax information, e.g., Name, Address, SSN, etc from paper tax documents, (Forms 1040, 1040A, 1040EZ ,1120, etc) for forwarding to downstream IRS systems for processing.
- Employee: The Operator Statistics (OPSTATS) database contains individual operator performance data (data entry keystroke count), some of which is used for incentive pay determination for the key entry operators. This database contains no tax information.
- Audit Trail Information (Including employee login info): Standard audit trail info is collected at employee login and used as mandated by IRS security IRM
- Other: None
- Describe/identify which data elements are obtained from files, databases, individuals, or any other sources.
Note: The sources of information in the system are taxpayer submitted paper tax forms (e.g., 1040, 1040EZ, Schedules A), checks, and remittance related vouchers.
- IRS
- First Four Characters of Last Name
- First 3 Numbers of Street Address
- Last 2 Numbers of Zip Code
- Taxpayer Identification Number/Employers Identification Number (TIN/EIN)
- Filing Status
- Tax Period
- Taxpayer
- Name
- Address
- TIN
- All the information required on the various IRS tax forms (g., Form 1040 and Form 1040A, etc) and the information contained on individual, business and remittances.
- Employee -Key entry operator Log-in identification, number of keystrokes and documents.
- Other Federal Agencies (L.ist Agency) - None
- State and Local Agencies (list Agency) - None
- Other third party sources (Describe) - None
- Is each data item required for the business purpose of the system? Explain.
Yes. The purpose of the system is to capture all paper tax information data for further processing by other IRS systems.
- How will each data item be verified for accuracy, timeliness, and completeness?
Data from the paper tax information documents is keyed-in and re-keyed for comparison by the entry operators. Also various system checks validate the data for accuracy, timeliness and completeness to include zero balance for math fields, city state zip code match and E-EIF entity file index check.
- Is there another source for the data? Explain how that source is or is not used.
No. There are no other sources for the data.
- Generally, how will data be retrieved by the user?
Taxpayer data is retrieved via the user workstations that are a part of the ISRP domain which is a closed network and located in a secure and restricted area at each of the seven IRS campuses.
- Is the data retrievable by a personal identifier such as name, SSN, or other unique identifier?
Yes. Document Locator Number (DLN) and Taxpayer Identification Number (TIN).
Access to the Data
- Who will have access to the data in the system (Users, Managers, System Administrators, Developers, Others)?
ISRP has identified the following users and their permissions:
| Role |
Permissions |
| Domain Administrators |
Full Control |
| Workstation Administrators |
Full Control |
| Supervisory Operator (SOP) |
Read/Write/Delete |
| Entry Operator (EOP) |
Read/Write/Delete |
| Quality Review Operator (QR) |
Read/Write/Delete |
| Transport Operator (TO) |
Read/Write/Delete |
| Batch Scheduler (BS) |
Read/Write/Delete |
| Correction Operator (CO) |
Read/Write/Delete |
- How is access to the data by a user determined and by whom?
Access to the data by a user is determined by the individual’s position description (PO). Only the individuals who have a valid requirement and need-to-know will be granted access to the ISRP System. All users must have an approved Form 5081 to have access to the data. Access to the data within the application is restricted. Users are restricted to only those pieces of the application to which they need access by permissions.
A user’s access to the data terminates when the user no longer requires access to ISRP.
Contractors do not have access to the data.
- Do other IRS systems provide, receive, or share data in the system? If YES, list the system(s) and describe which data is shared. If NO, continue to Question 12.
ISRP receives data from the Master File system (MITS-21). The data received is listed in 1A above.
ISRP outputs data to the Unisys Mainframe (MITS-23) at ECC-MTB or ECC-MEM depending upon the ISRP campus.
In addition, ISRP outputs electronic remittance data to the RTR system and to the Custodial Detail Database (CDDB) (MITS-21).
- Have the I RS systems described in Item 10 received an approved Security Certification and Privacy Impact Assessment?
Yes.
Master File (MITS-21)
- Certification & Accreditation (C&A) - September 28, 2007
- Privacy Impact Assessment (PIA) - May 1, 2007
Unisys Mainframe (MITS-23)
- Certification & Accreditation (C&A) - September 28, 2007
- Privacy Impact Assessment (PIA) - May 1, 2007
RTR
- Certification & Accreditation (C&A) - May 18, 2007
- Privacy Impact Assessment (PIA) - August 18, 2006
- Will other agencies provide, receive, or share data in any form with this system?
No. Other agencies will not provide, receive, or share data with ISRP.
Administrative Controls of Data
- What are the procedures for eliminating the data at the end of the retention period?
Per IRM 3.24, ISRP retains data for only five days and after output to downstream IRS systems, the data is then automatically purged (i.e., deleted). This includes reports, and operator statistics.
- Will this system use technology in a new way? If "YES" describe. If "NO" go to Question 15.
No. ISRP is not using technologies in ways that the IRS has not previously employed.
- Will this system be used to identify or locate individuals or groups? If so, describe the business purpose for this capability.
The ISRP system is not used to identify or located individuals or groups.
- Will this system provide the capability to monitor individuals or groups? If yes, describe the business purpose for this capability and the controls established to prevent unauthorized monitoring.
No. The ISRP system is not used to monitor individuals or groups.
- Can use of the system allow IRS to treat taxpayers, employees, or others, differently? Explain.
No. Use of the system can not allow IRS to treat taxpayers, employees, or others, differently.
- Does the system ensure "due process" by allowing affected parties to respond to any negative determination, prior to final action?
No. The ISRP system does not examine taxpayer data for positive or negative determinations.
- If the system is web-based, does it use persistent cookies or other tracking devices to identify web visitors?
N/A -ISRP is not a web-based system.
|
