Submission of Forms to Secure Access to the International Transactions Reporting System (ITRS) Module

BANGKO SENTRAL NG PILIPINAS MONETARY AND ECONOMICS SECTOR MEMORANDUM NO. M -2023-92 To ALL BANKS Subject Submission of Forms to Secure Access to the lnternational Transactions Reporting System (ITRS) Module In view of the pilot testing of the ITRS as scheduled in November to December 2023, the banks are advised to accomplish the following attached forms: t. BSP Relationship Management System (BRMS) User Registration Form (URF)f and 2. Certificate Signing Request (CSR). The CSR will be accomplished only if the banks opt to use the machine-to-machine reporting. The accomplished URF and CSR forms shall be submitted via an emailto [email protected] under the Department of Economic Statistics (DES) using the following prescribed subject format and file naming convention: Su bject: lTRScspace> U R F<space>< Ba n k Name> URF Filename: ITRS-URF-<Bank Name>.pdf CSR Filename: ITRS-CSR-<Bank Name>.pdf For example, To: ESSC [email protected] Subject: ITRS URF Bank A U R F Filename: ITRS-U R F-9" n k-,q.pdf CSR Filename: ITRS-CSR-Bank A.pdf Kindly submit the accomplished and duly signed forms by Wednesday, 27 September 2023. For further queries, you may call (632) 8-708-7692. For information and compliance. 4d,n fuZ( FRANCTSCO G. DAK|LA, JR. Deputy Covernor 23 September 2023 I Existing BRMS Portal users who were granted access to the BSP Financial Institution Portal (Fl Portal) are required to submit an updated URF to secure access to the ITRS 'module. and be provided with Two-Factor Authentication Credentials and/or Digital ' Certifigate,'whichever is applicable. n6-nt223'tl

BANGKO SENTRAL NG PILIPINAS TECHNOLOGY AND DIGITAL INNOVATION OFFICE USER RECISTRATION BSP Relationship Management System t. INFORMATION (To be accompllshed bv new reslstration/replacement of existing ussr) Name of BanMnstitution Date ofRequest Bldg./Floor/ Street Complete Unit No. Address Village/subd. Barangay City/ Municipality Province Zip Code Nameof Authorized User (Last Name) (First Name) (Middle Name) Position Title of Department/ offi cel Unit/ Authorized User Group E-mail address Contact Number I. DETAILS OF REQUE ,57 TVpe of Request: x NEW USER n New registration A. Registration for: gl BSP Relationship Management System (BRMS) Portal n Agent Registry n IOD Portal N CRIMS N ORLS M IFSS Submission Portal X Others: ITFIS Weekly Fleport and/or ITRS Monthly Report M Machine-to-Machine (for Digital Certificate) n Fleplacement of Please accomplish Annex A - Certificate Signing Request (CSR) existing userr B. Existing user to be replaced: (applicable for the replacement of existing user) Name of Existing User : Email address i n EXISTING USER: Name of Existing User Email address n Update User C. Specify information to be updated: Information/Access From To D. UserAccess: M Add: ITRS Weekly Fleport and /or ITF?S Monthly Peport I Revo ke: fspec i fy a p p I i c a t i o n sys te m/m od u I e ] lSee ltem ll.A for the list of modules for reference) n Delete/Flemove E. Delete Access and User Existing User Effective Date : Note: Request must be submitted at least 3O days before the effective date. I Two-factor authentication of the existing user will be deleted/removed.

BANGKO SENTRAL NG PILIPINAS TECHNOLOGY AND DIG]TAL INNOVATION OFFICE USER REGISTRATION BSP Relationship Management System Agreement Certified by: I hereby certiff that all the information provided This is to further certifo that only electronic are true and correct and I acknowledge that I am submissions originating from the authorized user binding myself to comply with the Terms and of the lName of Bank/lnstitution] shall be Condition/Participation Agreement of the BSP accepted and recognized by the BSP Relationship Management System. Department of Economic Statistics as the official submission. Signature over Printed Name 2Signature over Printed Name of Date of Authorized User Designated signatory per Corporate Secretary I. APPROVAT OF R With existing access to other modules? (E YEs / E No) Module/s to be accessed: Remarks: E Approved fl Denied REDENTOR PAOLO M. ALECRE, JR./SENIOR DIRECTOR/ DES Signature over Printed Name of the Authorized Approver Date: ACTION/STAKEN: (applicable only for approved request) Signature over Printed Name of TDIO Administrator Signature over Printed Name of Authorized BSP Depa rtment/Office Ad m n istrator i ' Authorized official for this registration form should belong to authorized signatory for category A-3 reports per Manual of Regulations on Foreign Exchange Transactions.

BANGKO SENTRAL NG PILIPINAS TECHNOLOGY AND DIGITAL INNOVATION OFFICE USER REGISTRATION BSP Relationship Management System Accomplish and Submit User Registration Form (URF): E Ia N€w User (New Regi3tration/ Download Usr Replacement of change Pasffird .g Eristing User) Accomplish Part I and Set-up Flegistration Form and Part ll.A and/or Account in the e (URF) ftom the BSP B !!o| Wbbsite BRMS Portal o r. E g Existing User (Updating of Uer o o I lnformation or t c Access/Delete or g |! Remove U*r I 3 o A v, e lPaas lr.r n gbtr.tion F.:a ! lrgad, t! Parl R€questor infornratrcl Pan 'Ii Detar!9 ol Reqsesl ! A ReErgtfatron fot a. B Exrs:rng us€r to be repla(ed E C Specrf), rnforalatrcr :c be JDdated o g I Us€! ac:es! u E Delele Acae59 and User Reminders: 1. Submit the accomplished and signed form/s to: (as applicable depending on the selected module/s to be accessed) Irlodules BSP DeoartmenuOffice EmallAddress Agent Flegistry Financial Inclusion Office (FlO) agentreg [email protected] IFSS Submission Portal Department of Su pervisory brms:[email protected] ORLS Analytics (DSA) CRIMS Credit Reporting System Unit [email protected] (cRsu) ITRS Department of Economic [email protected] Statistics Note: For any inquiries/clarification, you may send an email to the concerned BSP Department/Office. 2. User Registration Form with incomplete/inaccurate information will be returned to the requestor. 3. The new user must immediately change password and set up account in the BRMS Portal (https://brms.bsp.gov.ph/) upon receipt of the temporary password. Note: Password may contain combination of the following: . Alphanumericcharacters; . Both upper and lower case characters (e.9. a-2, A-Zl; and, . Special characters (e.9. !@#$%n{,t0+l--=\' l}tli'i<>?,Jl 4. Password must not be shared with anybody. Registered userA must be responsible in protecting the secrecy of password.

BANGKO SENTRAL NG PILIPINAS TECHNOLOGY AND DIGITAL INNOVATION OFFICE USER REGISTRATION BSP Relationship Management System TERMS AND CONDITIONS t. The BSP Relationship Management System (BRMS) is a common integrated system available to provide digital services to BSP Stakeholders. 2. The BRMS can be used for registration, licensing, reportorial, advisory, and other related services. lt is a Portal which enables participantr to do the following: a. submit report for processing; b. get report status; and c. get report status file. The requested user access is provided for the exclusive use of the participant. New participants are required to accomplish and submit the User Registration Form (URF) to request for a digital certificate/ log-in credential to authorize report submission and fac itate access/con nectivity with the system. iI 4. The BSP shall handle the Administrator function of the system. 5. The participant shall be responsible for any hardware/software upgrades required to support remote access to the system. 6. It is the participant's responsibility to ensure that only those registered users are authorized to access the system. Propagating the system configuration is considered a security breach and is a ground for the termination of the access to the system. The BSP can revoke, block, or permanently disallow the use of the system without prior notice due to reasons that may compromise internal security. The BRMS system and all information inside is the sole property of the BSP. Any unauthorized distribution, dissemination or use of any information, media, and the like, outside of its intended purpose is not allowed. 7. Subject to the participant's registration: a. The system will send a credential login request to the registered email. That email will contain a one-time link that will prompt end-user to enroll his/her password; and b. The concerned BSP Department/Office will provide instructions on how to access the system, URL, and username that participant will use. 8. The BSP shall not be held responsible for any loss, liability or damage caused by errors and mistakes of the participant or by processing failures as a consequence of machine/computer malfunctions due to fortuitous eventsforce majeure or analogous causes and shall be held free and harmless from claims, suits, costs and damages attributable thereto. Furthermore, the BSP shall not be made party to any dispute nor be held answerable for any liability in connection with, arising out ol or in relation to any transactions covered by this URF. The BSP shall be held free and harmless from claims, suits, costs, and damages attributable to the participant. 9. Each participant shall be responsible in promptly checking the correctness of the submissions and generated results of the system as well as notiffing BSP of any system errors so discovered.

BANGKO SENTRAL NG PILIPINAS TECHNOLOGY AND DIGITAL INNOVATION OFFICE USER REGISTRATION BSP Relationship Management System to. Each participant shall be responsible for providing and/or establishing its own back-up/ contingency plans to ensure that electronic instructions shall be successfully transmitted to the system in the event of failure of its primary hardware andfor computer. In case of any security breach or problem, the participant should report immediately to the concerned BSP Department/Office indicated in the URF, to trigger the investigation of the said security breach or problem and prompt corrective action can be performed. BSP has the right to disable a user account without prior notice in case of any suspected or reported incidents. 12 Each participant expressly agrees to be legally bound by the electronic instruction it sends through the system provided they comply with the terms and conditions set forth in the URF. The BSP records will be the evidence of the participant's dealings with the BSP in connection with the system. The participant agrees to the admission of the BSP records as evidence in any legal proceeding although such records are electronic, not in writing or produced by a computer. This agreement shall be governed by the laws of the Republic of the Philippines.

ANNEX A BANGKO SENTRAL NG PILIPINAS CERTTFTCATE StcNtNG REQUEST l. The following details are to be provided in the creation of Certificate Signing Request (CSR): Country: Philippines Organization: Name of Bank/l nstitution Organization Unit: Bank Code / Participation Code Common Name: FQDN of website: Example: abc.bank.com ll. CSR shall be in .CSR or.ARM format. lll. The authorized personnel listed in the User Registration Form shall manage the below processes involving Digital Certificate: a. Sending of CSR to Bangko Sentral ng Pilipinas (BSP) b. Acknowledging receipt of Digital Certificates (server Certificate, lntermediate Certificate Authority and Root Certificate Authority) from BSP c. Installation and usage of Digital Certificates Definition of Terms: Certificate Signing Request (CSR) - a message sent from an applicant to a certificate authority of the public key infrastructure in order to apply for a digital identity certificate Fully Qualifi ed Domain Name - sometimes also referred to as an absolute (FQDN) domain name, is a domain name that specifies its exact location in the tree hierarchy of the Domain Name System (DNS) - if no domain name is registered, choose a name that will identifo the organization/client bank Certificate Authority (CA) - an entity that stores, signs, and issues digital certificates. A digital certificate certifies the ownership of a public key by the named subject of the certificate.

Guidelines in Filling the User Registration Form (URF) and Certificate Signing Request (CSR) A. For registration of a new user or replacement of an existing user: l. Fill out Section l. Flequestor Information. t. INFORMATION flo br rccomolbhrd h nm rrolrtndon/rrplrcrrnrnt of rxlriltng uaarl Name of BanMnstitutlon Date ofReqqest BldglFlootl Street Compl€te llhit Na Address Village/Subd. Barangay city/Municipality Province zip code Nameof Authorized User (Last Name) (First Name) (Middle Name) Posation Title of DepartmenVoffice/UniV Authorized Us€t GrouD E-mail address contact Numb€r 2. Under ll. Details of Flequest, select "New User" or "Existing User," whichever is applicable. lrip Managemont s!6tem (BRMs) Portal Flcgistry loD Portel = Agent cFltMs = - oFl|--s = lFss El submissaon Portal I ottrers, g M.chineto-Machinc {for Digital certafic.te) Fbrse fff,ffrplish Anwx A - C&tfrcat- SttnliS F€ue-<r iL-sF-r B. Erirtinge" to be re|'Lcod, {rpplic.bl& fot lf,rG .epl-c-mcnt of txirtih<t us.r t Name of Existang tJsl Email addies3 Nam€ of Existang Usr Em.il .dd.rss gl A'dd. E Flewke :-. ctelctc./F.omow Affitandt r" Existinq uscr N&a Rq@st mfi & suffifrd at rctt rc &JF ffi tk ffi &E 3. For New User: a. Click "New Registration" or "Fleplacement of existing user," whichever is appl ica ble. Classification : GEN ERAL

b. Select "IFSS Submission Portal" and "Others: ITRS Weekly Fleport and/or ITRS Monthly Report." A Reglstratlonfon aSSP Relationship Management System (BRMS) Portal n Agent Registry ! IOD Portal n cRtMs tr ORLS E IFSS Submission Portal E Others ITRS Weekly Raoort and/or ITRS Monthly Report c. lf the bank will use Machine-to-Machine submission, tick also the "Machine-to-Machine (for DigitaI Certificate) and accomplish Annex A - Certificate Signing Request. : Elnaachine-to-Machine (for Digital Certificate) Flease accomplist'z Annex A - Certificate Sigtning Reguest (€SR) d. For replacement of existing user, fill out B. Existing user to be replaced B. Exlstlng userto be replaced: (applicable ior the replacement of existing user) Name of Existing User : Email address : B. For updating of credentials of an existing user (i.e., with existing BRMS credentials to access and report in the IFSS Submission PortaD: l. Fill out the information of the existing user (l ) who will be given access to the ITRS Weekly or Monthly Module; or (z}whose access to the said module will be removed. Classification : GEN ERAL 2

2. lf the existing BRMS-ITRS Module user will update his/her information, fill out C. Speciff the information to be updated. C, Spocl|yln{bnrntlonto bo upddcd: Srorrl To 3. lf the existing BRMS user will be given access to the ITFIS Weekly or Monthly Fleport Module, select Add: ITRS Weekly Report and /or ITRS Monthly Report. lf access of the existing user to the module will be revoked, select Flevoke and provide details. D. UserAccerg: [l ldd: ITPS Weekly Qeprt and/or ITp.S Monthly Pepart f Flevoke: fspec i 6t app lication system tryt od u le I Item llA br the list of modules for reference 4. lf the existing user will be given access to "Machine-to-Machine (for Digital Certificate), accomplish Annex A - Certificate Signing Ftequest. 5. lf the access of an existing user to the BRMS will be removed, select Delete/Remove Existing User and specif,i the effectivity date. I Delete/Remove E. DalGtGAcclsBandUsar Existing User Effective Date : Note: F?eguest must be submlttd at least 50 daSc fufore the et'l*tlve date. Classification : GEN ERAL 3