Department should improve its information technology security, continue developing its information security program, and enhance the physical security of taxpayer information.