- 9.9.1 Employee Criminal Investigation Management Information System Responsibilities and Procedures
- 9.9.1.1 Program Scope and Objectives
- 9.9.1.1.1 Background
- 9.9.1.1.2 Authority
- 9.9.1.1.3 Roles and Responsibilities
- 9.9.1.1.4 Program Management and Review
- 9.9.1.1.5 Program Controls
- 9.9.1.1.6 Acronyms
- 9.9.1.1.7 Related Resources
- 9.9.1.2 Input Documents
- 9.9.1.3 Procedures and Responsibilities of Criminal Investigation Employees
- 9.9.1.3.1 Special Agents
- 9.9.1.3.2 Supervisory Special Agents and Management Officials
- 9.9.1.3.3 Assistant Special Agents in Charge
- 9.9.1.3.4 Special Agents in Charge
- 9.9.1.3.5 Resident Agent in Charge
- 9.9.1.3.6 Director, Nationally Coordinated Investigations Unit
- 9.9.1.3.7 Directors, Field Operations
- 9.9.1.3.8 CIMIS Subject Matter Experts
- 9.9.1.3.9 Headquarters Criminal Investigation Management Information System Staff
- 9.9.1.3.10 Administrative Support
Part 9. Criminal Investigation
Chapter 9. Criminal Investigation Management Information System (CIMIS)
Section 1. Employee Criminal Investigation Management Information System Responsibilities and Procedures
9.9.1 Employee Criminal Investigation Management Information System Responsibilities and Procedures
Manual Transmittal
March 27, 2026
Purpose
(1) This transmits revised IRM 9.9.1, Employee Criminal Investigation Management Information System Responsibilities and Procedures.
Material Changes
(1) Updated internal controls.
(2) Removed “Compliance Support Assistant (CSA)” throughout the IRM.
(3) Removed subsection 9.9.1.3.2(2)(c) “By the Investigation Development and Support (IDS) unit;”.
(4) Subsection 9.9.1.3.4 second Note: updated to state “The Executive Director, Criminal Investigation, Global Operations.....”.
(5) Removed subsection 9.9.1.3.4(5) “The SAC will request in writing, CI-HQ approval, to initiate an investigation when an open investigation of an individual or entity already exists (i.e. “dual numbers”),
(6) Subsection 9.9.1.3.5 added “developed by the Scheme Development Center (SDC)”.
(7) Added subsection 9.9.1.3.6 “The Director of the Nationally Coordinated Investigations Unit (NCIU) is responsible for reviewing all NCIU lead packages. The Director ensures that leads meet referral criteria prior to initiating a PI and assigning the PI to a field office to be worked. The NCIU Director is responsible for following up with the field office leadership on any NCIU initiated case closures to gain insights to inform NCIU model development.”
(8) Subsection 9.9.1.3.8(3) removed “administrative Office” and added “operations”.
(9) Subsection 9.9.1.3.8(4) removed “CSA”.
(10) Subsection 9.9.1.3.9 removed “in regards” and added “regarding”.
(11) Subsection 9.9.1.3.9(1)(e) removed “in the transfer”.
(12) Updated all IRM’s, forms, and websites to quick links throughout the IRM.
(13) Editorial changes made throughout the IRM that did not result in substantive changes but contributed to clarity of the subject matter.
Effect on Other Documents
This IRM supersedes IRM 9.9.1 dated February 07, 2025.Audience
Criminal InvestigationEffective Date
(03-27-2026)
Gary A. Shapley, Jr
Deputy Chief, Criminal Investigation
for
Guy A. Ficco
Chief, Criminal Investigation
Purpose: This section is designed to describe the Criminal Investigation Management Information System database, its input documents, and the responsibilities and duties of various Criminal Investigation employees and specialty units to ensure that the database contains accurate and timely information.
Audience: All Criminal Investigation Management Information System users and management personnel.
Policy Owner: Executive Director, Advanced Analytics & Innovation.
Program Owner: Executive Director, Advanced Analytics & Innovation.
Primary Stakeholders: All Criminal Investigation employees.
Contact Information: To make changes to this IRM email *CI-HQ-IRM.
The Criminal Investigation Management Information System is a web-based application which provides a central location for users with various levels of access to input, monitor, and report on Criminal Investigation employee information, investigative equipment, investigations, and time reporting. The Criminal Investigation Management Information System integrates various Criminal Investigation management systems composed of systems that track the status and progress of Criminal Investigation investigations, time expended by Criminal Investigation employees on investigations (Monthly Activity Reports), employee (personnel) information, and investigative equipment. Authenticated and authorized users can enter specific data for validating online transactions, processing of queries, and integrating report features. Data from this application may also be exported to other Criminal Investigation applications, as well as affiliated federal and state government agencies.
See IRM 9.1.2, Authority, for the delegated authority relating to IRM 9.9.1, Employee Criminal Investigation Management Information System Responsibilities and Procedures.
The Executive Director, Advanced Analytics & Innovation is responsible for developing, maintaining, and overseeing this IRM and ensuring compliance with current policies and procedures.
The Executive Director, Advanced Analytics & Innovation owns this IRM and is responsible for:
Providing program oversight.
Maintaining and overseeing updates to this IRM.
Ensuring consistent application of policy, procedures, and tax law while protecting taxpayers’ rights.
Ensuring this IRM provides reliable information for decision making and quality assurance.
Updating this IRM when the content is no longer accurate.
Ensuring internal control content is complete, accurate, and reviewed annually.
Incorporating interim guidance into the next revision of this IRM prior to the expiration date.
Utilizing business units efficiently and effectively to accomplish the strategies and mission of IRS and Criminal Investigation.
Reviewing and approving any updates to this IRM before they are published.
The Executive Director, Advanced Analytics & Innovation will manage this IRM’s content by:
Reviewing this IRM annually.
Updating references to forms, letters, publications, documents, notices, etc.
Updating contact information, phone numbers, email addresses, web addresses, etc.
Add or update new or amended legislation, regulations, programs, or processes,
Removing outdated or duplicated content.
Reorganizing or rewording content for clarity.
Providing other procedural, operational, and editorial changes.
The Executive Director, Advanced Analytics & Innovation will review Criminal Investigation Management Information System documentation relating to system enhancements, oversee their program, and ensure employee compliance with all applicable elements of this IRM.
The table lists commonly used acronyms and their definitions:
Acronym Definition ASAC Assistant Special Agent in Charge CI Criminal Investigation CIMIS Criminal Investigation Management Information System DFO Director, Field Operations GI General Investigation PI Primary Investigation POD Post of Duty SA Special Agent SAC Special Agent in Charge SCI Subject Criminal Investigation SDC Scheme Development Center SIA Seizure Investigative Activity SME Subject Matter Expert SSA Supervisory Special Agent
Information regarding Criminal Investigation (CI) employees, investigative equipment and motor vehicles, and criminal investigations is entered directly into the application from various source documents. Because the information is being entered by the same person who would ordinarily handle preparation of any input form(s), senior management made the decision to eliminate the extra process steps and have the employee enter the information directly into the application. In situations where support staff is providing assistance with the input of investigative information, it is expected that the lead agent or manager will provide all necessary guidance to the staff, including source documents, to ensure that accurate data is entered into Criminal Investigation Management Information System (CIMIS) in a timely fashion.
The recommended method of recording in CIMIS all special agent (SA) and investigative professional staff time expended on investigative and non-investigative activities is for the individual reporting the time to use the “Upload 5043 from Diary” activity in CIMIS. This activity was designed to allow the user, with a few simple keystrokes, to pull the pertinent data from their local Diary application file into CIMIS, thereby eliminating the need to essentially perform dual input of the data (i.e., record it first in the Diary and then record it again in CIMIS). This input method will only work for an individual uploading their personal diary file. If a manager or other designee needs to enter time reporting information from an employee’s diary into CIMIS, it will have to be done by “manual” input as described below.
As an alternative to using the “Upload 5043 from Diary” activity, a Form 5043, the Criminal Investigation Monthly Activity Report, that has either been printed from an employee’s diary or prepared manually, may be used as an input form when entering SA or investigative professional staff time into the system through the “Add New 5043” manual input activity.
The recommended method of recording in CIMIS mileage and usage information for the government-owned vehicles (GOV) in the CI fleet is to use the “Upload Vehicle Log from Diary” activity in CIMIS. This activity was designed to allow the user, with a few simple keystrokes, to pull the pertinent data from the vehicle log in their local Diary application file into CIMIS, thereby eliminating the need for administrative support staff to be involved. This input method will only work for an individual uploading their personal diary file. If a manager or other designee needs to enter vehicle usage information from an agent’s diary into CIMIS, it will have to be done by “manual” input as described below.
As an alternative to using the “Upload Vehicle Log from Diary” activity, an CI GOV Usage Report that has either been printed from an agent’s diary or prepared manually may be used as an input form when entering vehicle usage into the system through the “Add New Vehicle Log” manual input activity.
Entry of necessary information to create a new CI employee or non-CI employee profile in CIMIS can be done from any reliable data source(s), see the CIMIS Reference Materials SharePoint site for more information.
Source documentation regarding investigation updates should be gathered, analyzed, and prepared so that the data is input on the same day the investigative action takes place but no later than five calendar days following the investigative action. In this case, the five calendar days “timeliness rule” specifically refers to inputting status updates on Subject Criminal Investigations (SCI) approved for work in CIMIS. However, it is imperative that all investigative information is input in a timely manner.
Monthly activity time expended by all CI SAs and investigative professional staff should be uploaded or input no later than the second workday of the subsequent calendar month to allow for that time to be included in the monthly data snapshot. Employees needn’t wait until the last minute (i.e., the first or second workday) to upload/input their time because monthly activity time can be recorded in CIMIS for future dates and subsequently updated if necessary.
Source documentation regarding personnel updates is to be gathered and submitted to update the employee profile, as soon as the change occurs (e.g., change in grade and/or position, move to a new post of duty (POD), transfer or detail to another assigned CI office/group, completion of training, new room or phone numbers, etc.).
Monthly GOV usage and mileage should be uploaded or input into CIMIS no later than the 2nd workday of the subsequent month.
The responsibility for the accuracy of the database rests with each CI employee. The following subsections describe those responsibilities and the corresponding procedures.
SAs are responsible for updating CIMIS when an investigative action takes place for immediate review and approval by their manager. At management discretion, or in the event that the SA is off the CI network and cannot log into CIMIS in a timely manner, the SA will gather, analyze, and submit to designated support staff (i.e., Subject Matter Expert (SME), Tax Fraud Investigative Aide (TFIA), etc.) the source documentation needed to input the investigative action into CIMIS. See 9.9.1.4.8 through 9.9.1.4.10 for further descriptions of designated support staff and their responsibilities.
SAs are responsible for inputting their monthly activity into CIMIS, either through the “Upload 5043 from Diary” activity or by entering the information manually through the “Add New 5043” activity, so that it is in the database no later than the second workday of the subsequent month. This policy helps ensure that management and headquarters (HQ) staff have the most accurate data available to them when running reports against the monthly snapshot.
SAs are responsible for inputting their monthly GOV usage and mileage, either through the “Upload Vehicle Log to CIMIS” activity or by entering the information manually through the “Add New Vehicle Log” activity, so that it is in the database no later than the second workday of the subsequent month.
When an SA request approval to initiate an investigation of a subject who resides in another field office’s territory, the SA will prepare a memorandum for their Special Agent in Charge’s (SAC) signature requesting concurrence of the other field office’s SAC to authorize an investigation of the subject.
Supervisory Special Agents (SSA) and management officials are responsible for establishing employee access to the live database by working with the CIMIS SME/User Administrator to first register the employee as a CIMIS user in the Business Entitlement Access Request System (BEARS) system and then create an appropriate user profile in CIMIS.
SSAs review and approve all requests for a primary investigation (PI) with the exception of those initiated/developed:
By the Nationally Coordinated Investigations Unit (NCIU).
By the Scheme Development Center (SDC).
With the charges for 18 USC 1956 and/or 18 USC 1957.
With the charges for Title 31.
The SSA, or their designee, will conduct a 100% review of all information entered into CIMIS for the initiation request of all SCIs. This review shall constitute the mandated initial “CIMIS Accuracy Review” and should be recorded as such in CIMIS. Although Accuracy Reviews generally only involve twelve key fields of data, the initial managerial review must cover 100% of the entries. Once all data has been verified and is accurate, the SSA will forward to the SAC (through the ASAC if appropriate) if they decide that approval is warranted.
The SSAs will review all discontinued investigations. The SSAs have the authority to approve discontinued PIs if they have been delegated that authority in their field office; however, they are not authorized to discontinue a PI if it involves a money laundering investigation. Additionally, the SSAs are not authorized to discontinue general investigations (GI) or SCIs.
The SSAs have the authority to approve discontinued PIs that were evaluated in their group and which were originally numbered as a PI in the NCIU or SDC.
The SSAs and management officials have the option to approve Form 5043 or allow the SA to upload the information directly into CIMIS.
ASACs are to review all PI and SCI requests to initiate investigations. The authority to approve the initiation of PIs and SCIs, including 18 USC 1956 and/or 18 USC 1957 investigations or Title 31 investigations, may be delegated to the ASAC. This delegated authority should be recorded and stored in the field office files.
Correspondingly, ASACs have the authority to approve discontinued PIs or SCIs, if they have been delegated the authority to approve them in their field office. The ASAC is not authorized to discontinue SCIs, if they involve 18 USC 1956 and/or 18 USC 1957 investigations or Title 31 investigations.
SACs approve and date initiating requests for all types of investigations, as well as seizure investigative activity (SIA). The approval date the SAC enters for the investigation in CIMIS is the authorized, or “approved for work”, date of the investigation. The authority to approve PIs and SCIs including Title 18 and Title 31 investigations may be redelegated to the ASAC. The authority to approve GIs and SIAs may not be redelegated.
The SAC, or their designee ASAC, has approval authority for investigations based upon alleged violations of 18 USC 1956 and/or 18 USC 1957 or alleged violations of Title 31.
The SAC has the authority to authorize the discontinuance of all types of criminal investigations.
The SAC will be responsible to ensure that investigations are numbered only on individuals and entities alleged to have violated statutes under the jurisdiction of CI.
The SAC will request concurrence to authorize an investigation of a subject who resides in another field office's territory. This concurrence memorandum will be made part of the investigation's administrative file.
The SAC is responsible for the accuracy of the employee and user profiles and to assure the profiles are updated as needed. At a minimum, on an annual basis, employee and user profiles will be reviewed and certified as accurate.
The Resident Agent in Charge (RAC) is responsible for reviewing all questionable refund program (QRP) and return preparer program (RPP) schemes developed by the Scheme Development Centers (SDCs) to ensure that they meet referral criteria prior to initiating a PI and assigning the PI to a field office to be worked. The RAC is responsible for following up with the field office to ensure that the evaluation time frames are being followed.
The Director, NCIU is responsible for reviewing all NCIU lead packages. The Director ensures that leads meet referral criteria prior to initiating a PI and assigning the PI to a field office to be worked. The NCIU Director is responsible for following up with the field office leadership on any NCIU-initiated case closures to gain insights to inform NCIU model development.
The DFO must approve all SCIs and SIA involving sensitive individuals and entities such as clergy, politicians, attorneys, and accountants. See IRM 9.4.1, Investigation Initiation.
The CIMIS-SME in each field office is the primary point of contact for CIMIS issues within that field office. The SME will be the only individual with the ability to correct erroneous status code entries for investigations, as well as the ability to correct employees’ historical employee position and monthly activity report records. Additionally, the SME will be granted the permissions to perform normal editing of nearly all of the investigative and time reporting data that is originally entered by SAs or administrative professional staff. The CIMIS-SME is to be the contact point for field office information requests.
The SME will also function as the principal User Administrator for CIMIS in their respective field office or DFO office. This duty entails advising potential users and their managers on what permissions to request; creating and editing user profiles with the appropriate roles; deactivating user profiles when applicable; and running user profile reports on an annual basis, or as needed by management to assist with BEARS recertification.
The CIMIS-SME will also be responsible for conducting CIMIS accuracy reviews. Annually, the CIMIS-SME must perform accuracy reviews on a sample basis – 25 percent of total SCIs (open and pipeline) in each group. It is suggested that the CIMIS-SME perform these reviews in conjunction with group operations reviews. For each sampled investigation, the review should cover, at a minimum, the following 12 CIMIS entries:
Taxpayer Identification Number (TIN),
CI Program Area,
Grand Jury Code,
Industry,
Occupation,
Source,
Fraud Schemes/Criminal Activities,
Provable Money Laundering Amount (if applicable),
Other Agencies,
Total Criminal Deficiency (if applicable),
Conditions of Probation (COP) expiration date (if applicable),
COP terms met (if applicable).
For each SCI reviewed, the CIMIS-SME is to review the source documents in Total Inventory Management System (TIMS) and/or the hardcopy files (with the TFIA, SA, or SSA, if necessary) to verify the 12 fields. The CIMIS documentation is not to be used for verification. Depending on the outcome, an expanded review (beyond 25 percent) can be undertaken, if necessary.
The CIMIS-SME will also be responsible for reviewing the aforementioned 12 fields for accuracy upon closing or discontinuance of all investigations, which will include verifying the information against the Special Agent’s Report (SAR), indictment, plea agreement, and/or Judgement & Commitment Order (JCO).
Following each review, the CIMIS-SME or SSA will make an entry in the “Accuracy Review” section under “Review Comment”, listing the type of review conducted (i.e., Initial, 25 percent Sample, or Closing) and a brief mention of whatever corrections resulted from the review. If desired, further annotation can be made in the Accuracy Review activity to specify the documents reviewed in verifying the information (Integrated Data Retrieval System (IDRS) information, referral, grand jury documentation, SAR, JCO, etc.). In lieu of listing in the "Review Comment" all of the documentation reviewed, a statement can be made to refer to the TIMS folder for further information.
The CIMIS staff at HQ are available to answer questions regarding the preparation and input of investigative equipment, as well as personnel and Form 5043 information into CIMIS. The HQ-CIMIS staff, as data administrators, may make corrections and solve problems. Some CIMIS activities can only be done by the HQ-CIMIS staff, including but not limited to, the following areas:
The establishment or realignment of a group or branch.
The establishment or relocation of POD.
The establishment or realignment of field offices.
The shutdown of a POD.
The transfer of an investigation from one field office to another. This action must have the approval of both SACs involved.
Enable the numbering of dual investigations. The system will display a message to alert the agent when initiating an investigation if an open investigation already exists on an individual or entity. The HQ-CIMIS staff, upon receiving authorization from the DFO of the requesting SAC Office will make the appropriate entries in CIMIS.
Reactivate/reinstate CI employee profiles when occurring in a different organization from where they were terminated.
Handle ad hoc reporting and specialized data requests.
Add and/or modify tracking information reference values in the database (e.g., violations, fraud scheme/criminal activities, skills, etc.).
Employees in various professional staff positions may assist SAs and SSAs in updating CIMIS records regarding ongoing investigations, active equipment, and monthly time activity. The accuracy and timeliness of the CIMIS entries remain the responsibility of the SSA and SA.