The Internal Revenue Service’s current safeguards do not go far enough to mitigate risks to taxpayer information, the Government Accountability Office said Monday.