Idle Time in Servers

November 11, 1998 REVENUE MEMORANDUM ORDER NO. 05-99 SUBJECT : Idle Time in Servers TO : All Integrated Tax Systems (ITS)/Internal Administration System (IAS) Users I. OBJECTIVES 1. To provide security to data in the Bureau's servers. 2. To make efficient use of the Bureau's resources. cdll II. POLICIES 1. Users shall log off all unnecessary connections to the Bureau's servers. 2. Employees shall take all necessary precautions to ensure the security of logged on sessions. III. GUIDELINES AND PROCEDURES 1. Idle logons, defined as sessions with no activity whatsoever, whether background processing or keyboard utilization, shall be logged off by users. 2. An idle time of thirty (30) minutes shall apply to logons to the Bureau's servers (e.g., bir-cdf, bir-mla, bir-qcy, bir-ceb, bir-ltd, bir-mis, bir-appl). Unless justified, logons idle beyond the thirty-minute threshold shall be considered as security infractions. 3. The following shall not be covered by the idle time threshold: a. Systems Administrator accounts b. Database Administrator accounts c. Batch Architecture Administrator accounts d. Network Administrator accounts e. Help Desk accounts f. Security monitoring accounts q. Performance monitoring accounts 4. Users shall ensure that password-protected screen savers, when available, are activated before leaving computers unattended. Per Revenue Memorandum Order 44-98 (Security Requirements in the Technical Computing Environment), a. Users are ultimately responsible for all activities, known or unknown, related to the use of their ID. b. Users shall not use any other user's account with or without that user's permission. IV. EFFECTIVITY This order takes effect immediately. (SGD.) BEETHOVEN L. RUALO Commissioner