Amendment to Revenue Memorandum Order (RMO) 25-2006 on User Agreement Form for ITS, eMail and/or Internet Access

January 16, 2007 REVENUE MEMORANDUM ORDER NO. 01-07 SUBJECT : Amendment to Revenue Memorandum Order (RMO) 25-2006 on User Agreement Form for ITS, eMail and/or Internet Access TO : All Internal Revenue Personnel and Others Concerned I. Objective This Order amends the User Agreement Form (UAF) and certain provisions of RMO 25-2006. II. Amendatory Provisions A. The UAF as earlier prescribed under RMO 25-2006 is hereby modified for clarity and for better understanding thereof by the revenue personnel/others concerned accomplishing/signing said form. The duly accomplished/signed form shall be a necessary requisite in the grant of ITS, eMail and/or Internet access. (see Annex A hereof for the latest amended UAF) HICSTa B. Item B of Section II of RMO 25-2006 is hereby amended to include the following: "The required accomplishment of UAF shall be made only once. The UAF, once executed by a revenue personnel or others concerned, shall cover all his/her succeeding requests (email, internet and ITS account) for access. Revenue personnel/others concerned who may be transferred to another office need not accomplish another UAF, unless required under circumstances to be determined by the Deputy Commissioner for Information Systems Group, or her duly authorized representative." C. Item no. 1, Section II.C. of RMO No. 25-2006 (on submission of accomplished/signed UAF and applicable access/account request form) is hereby amended as follows: "Request for System Access (BIR Form/BF 0044) for ITS/server access, including re-activation of suspended account, re-setting of password, replacement of/additional job designation, etc. a. National Office UAF and BF 0044 shall be forwarded to Security Management Division-Information Planning and Quality Service (SMD-IPQS) for appropriate action. ( see Annex B hereof for BF 0044 ) b. Regional/Revenue District Office/Large Taxpayers Service UAF and BF 0044 shall be forwarded to the Revenue Data Center (RDC) having jurisdiction over the regional/revenue district office for validation/review. Correspondingly, the RDC shall endorse said request/form to Security Management Division-Information Planning and Quality Service (SMD-IPQS) for appropriate action. ( see Annex B for BF 0044 )" III. Effectivity This Order takes effect immediately. (SGD.) JOSE MARIO C. BUAG Commissioner of Internal Revenue ANNEX A USER AGREEMENT Bureau of Internal Revenue User Printed Name ____________________________________ Taxpayer Identification No. _____________________ User Designation/Position ___________________________________________________________________________ User Office (Division/Section) ________________________________________________________________________ User Contact Number _____________________________ eMail Address _____________________________________ I hereby certify that I have read and understood the BIR Information and Communication Technology/ICT Security Policies (Revenue Memorandum Order/RMO 50-2004). I agree to abide by these ICT security policies and such other ICT security policies which the BIR may deem appropriate to adopt in the future. Further, I will abide by all applicable rules/regulations (existing or those that may be issued in the future) concerning the use of the ICT systems. I understand that my violation of or non-compliance with said policies/regulations will result in, among others, revocation of my systems access privilege, warning, suspension, dismissal/termination from service/employment with the BIR and/or filing of criminal/civil suit against me. By acceptance of this condition, I agree to the following: On the use of passwords and accounts : I am prohibited from using obvious passwords and I am responsible to change my passwords every month and/or whenever the need arises. I am responsible for maintaining the confidentiality of my user ID and passwords, and for all activities relative to the use of my log-in identification and passwords. I shall not borrow or use another user's account. On the installation of software/programs : Only legal versions of copyrighted software with BIR-vendor license agreements are to be installed in my personal computer. I am prohibited from copying and/or installing software other than those officially installed, or made available in the Systems Management Office FTP server, or those with approval from BIR ICT Security Administrator. On all information/data proprietary to the BIR : I am strictly bound by the rule on confidentiality of all the data/information/records and even programs to which I am granted ICT access and as such, I shall not utilize such access on data/information/records/programs except for purposes of the legitimate performance of my designated functions and responsibilities as employee of the Bureau. All changes/modifications that I shall execute shall be in accordance with the existing revenue issuances and shall be properly documented and approved by my supervisor and head of office. It is my responsibility to coordinate with concerned BIR personnel/officials in the proper turnover of all my accountabilities, records/files relative to the use of my ITS access should I be transferred to another office and/or my service/employment from the Bureau severed for whatever reason. I am responsible for taking all reasonable precautions to ensure that BIR data/information of which I have access to are not disclosed to any unauthorized person/s or tampered with by any such unauthorized persons. At the end of my employment or contract with the BIR, I agree to turn over all data/information/records I have access to and I understand that I am not authorized to use said data/information/records for my own purpose or gain, nor am I at liberty to provide such to third parties for whatever reason, during my employment or even after such termination of my employment or contract with the Bureau. I shall notify immediately the BIR ICT Security Administrator if I suspect that my files or transactions are tampered with or modified, and take all necessary action to eliminate damage caused by such tampering or unauthorized modification. User Signature ____________________________ Date ____________________________________ Attested by: _____________________________ Head of Office (Printed Name and Signature) All violations or suspected violations of the ICT Security Policies shall be reported immediately to the Security Management Division, telephone nos. 981-7093 to 981-7096; eMail [emailprotected] ANNEX B BIR Form 0044 Request for System Access