RMO No. 22-2024 — Prescribes the Policies and Guidelines in the use of the BIR-issued Laptop Computers. Digest | Full Text | Annex A | Annex B | Annex C

BUREAU OF IE NAL REVENUE

BUREAU OF INTERNAL REVENUE REPUBLIC OF THE PHILIPPINES DEPARTMENT OF FINANCE JUN^14 2024 TTSY

FiP29, 20242IVISION

REVENUE MEMORANDUM ORDER NO. 22.-2024

SUBJECT Policies and Guidelines in the use of the BIR-issued Laptop Computers

TO All Revenue Officials, Employees and Others Concerned

Background

To boost office productivity, employee engagement, and accessibility to various BiR information systems. the Bureau of Internal Revenue (BiR) has been issuing laptop computers (acquired by means oi purchase, lease, or donation) to authorized BiR employees over the years.

desktop computers in order to take advantage of the mobility, portability, and ease of access for a fiexible work setting for B!R employees. One of the identified immediate reforms of the bureau is to secure more laptop computers in addition to

environment in accordance with the demands of our digitai transformation. Hence, these policies and With the proper use of BIR-issued iaptop computers, the BIR can provide its employees an innovative atmosphere to improve work efficiency. This is in view of the changing needs of our data-driven

guidelines.

Objectives

This Order is issued to:

2 Ensure due diligence and observance of existing ICT security policies is practiced in the use Prescribe policies and guidelines in the use of laptop computers of the Bureau.

3. Define the responsibilities of all Bureau offices and employees concerned. of the laptop computers

Policies and Guidelines

1. All laptop computers shall be used for official purposes

2. Due diligence shall be observed while using the laptop computers in accordance with the of files and settings/configuration to the new laptop computers. existing ICT security policies and computer baseline security standard, including transferring

3. All laptop computers must be installed with endpoint security solution.

4 Only official files and authorized settings are allowed to be saved/configured to the BIR

issued iaptop computers. All unofficial files and non-standard softwarelapplication shall be

music and videos that are not work-related are prohibited. removed/deleted and shall not be installed to the BIR issued laptop computers. Photos.

Page 1 of 4

5. All officials/personnel with issued laptop computers as approved by the Commissioner are

authorized/allowed to use the laptop computers officially outside of the BiR's premises provided that access point of wi-fi network have secured configuration.

6. Use of laptop computers on a public Wi-Fi such as internet cafe, malls and other piaces with free public wi-fi connection are not allowed.

7. Connecting to home wi-fi, pocket wi-fi or mobile hotspot must ensure that access point have secured configuration in connection with Acceptable Use Policy (AUP) Section 6.8.

8. Repair/replacement of damaged unit due to negligence shall be the responsibility of the accountable user.

9. Property Number (PN) attached to the laptop computers must not be removed. In case the PN is removed or is missing it should be coordinated with the Property Division.

10. Return of laptop computer due to retirement, resignation and RTAO must be accompanied by BIR Form 0053 Return of Property Accountabilities (RPA) while transfer of laptop copy furnish the respective Revenue Data Centers (RDC) in the regions. No laptop National Office or Administrative and Human Resource Management Division (AHRMD) computers shall be transferred from one official/employee to another without proper computer to another employee of the same office must be accompanied by BIR form C052 copy furnished Network Management and Technical Support Division (NMTSD) in the Turnover of Property Accountabitities (TPA) and must be forwarded to Property Division

documentation.

11. In case of lost laptop computer, concerned official/personnel shall report the incident thru the Revenue Data Center (RDC) for Regions and District offices. NMTSD or RDC shal then BIR Service Desk and prepare Incident report (Annex A) to be submitted to Network Management and Technical Support Division (NMTSD) for National Office or respective submit a copy of the Incident Report to Property Division and Security Management Division (SMD). Concerned official/personnel shall be liable by replacing lost laptop computers with at least the same brand/model, quality or specification or higher specification.

12. Ensure removal/permanent deletion of data files and configuration is restored to original state

charger, etc.), and must be accompanied by the following documents: prior to returning or disposal of laptop computer (including accessories i.e., Carrying bag,

Memorandum to the Chief, Property Division / AHRMD stating the return of items : Gate Pass(GP}

: Certification of Obsolescence or Unserviceability from NMTSD for National Office and :BIR form 0053 Return of Property Accountabilities {RPA} RDC for Regions and District offices (in case of disposal).

13. Cancellation of property accountability shall be made through the issuance of a Receipt of Returned Items (RRI) from Property Division.

RUREAU OF INTERNAL REVENUE NNTTTYTN [5h14 2 Page :2 of 4

CJ RECORDS MGT. DVISION

IREAUOF INTERM VENUE

W Roles and Responsibilities 14 28

A. Concerned BIR Employee/User of Laptop Computers LP.. :Y

1. Sign/accept the Property Acknowledgement Receipt (PAR), Inventory Custodian Slip Property Transfer Report (PTR) or (ITR) if issued in the Regional/District Office. (ICS) and/or Inventory Transfer Report (ITR) if issued in the BIR National Office and

2. Submit signed Acceptable Use Policy (AUP) to Security Management Division (SMD) or respective Revenue Data Center (RDC) after issuance of laptop.

3. Ensure that the laptop computer is in good working condition and all accessories are compiete.

4. Strictly follow all BIR ICT security policies.

5. in case the iaptop computer needs to be used outside BIR office premises, the user must Premises). log-in to the personal home profile. Instructions for the configuration procedure are stated in Annex B (Configuration to be able to use Laptop Computers Outside of BIR

6. Ensure removall permanent deletion of files and configuration is restored to original state, thru the assistance of Technical Support Personnel, upon return or disposal of Iaptop computer.

7. Return to NMTSD/ RDC for leased laptops. Return to Property Division for BIR owned

laptops

8. In case of loss, replace lost laptop computers with at least the same brand/model, quality or specification or higher specification.

9.Request NMTSD or RDC to clean-up in case of malware infection or security threat.

B. NMTSD and RDC Technical Support Personnel

1. Provide technical support within their area of jurisdiction.

2. Ensure that all official softwarelapplications and security tools (i.e., endpoint security solution, MDM, anti-malware, patch update, etc.) are initially and properly installed/configured by NMTSD and subsequently by concerned RDCs/Regional computers. For applications not officially used in BiR, concerned user must first secure Technical Support following the standard procedure in the configuration of BIR issued

ctearance from SMD before proceeding with the installation.

3. Configure the following settings: Email, internet, network connection, etc. of the new laptop computers following the standard naming convention for computer name and computer description.

Configure settings to enable connection to wi-fi outside of BIR prermises (Procedure in creating standard user account to be provided by NMTSD) Configure wall paper with BIR logo of the Standard User Account.

Page 3 of 4

4. In case of reported security threat from user, thoroughly check/inspect the laptop computer for any malware infections or security threat before reconnecting to BIR network.

5. In case of reported lost laptop computer, NMTSD/concerned RDC shall immediately

implement security protocols, i.e., block access to the laptop, wipe out content of the laptop upon approval of request to wipe out data / block access to BIR issued laptop computers (Annex C) supported by an incident report.

6. Receive returned leased laptop computers at the end of the Leasing Contract and prepare documents needed for the turnover of laptop computers to contractor.

7. Ensure that all data and official software are removed/wiped out from the laptop computers at the end of the Leasing Contract or upon return to Network Management

and Technical Support Division for leased laptop computer and Property Divisior for procured.

C. Property Division IAHRMD

1. Issuance of iaptop computers to designated employees must be acknowledged through

a Property Acknowledgement Receipt (PAR), Inventory Custodian Slip (ICS) and/or Report (PTR) or (ITR) if issued in the Regional/District Office. Inventory Transfer Report (ITR) if issued in the BIR National Office and Property Transfer

2.Ensure updated inventory of all issued laptop computers and provide copy to NMTS:D.

3. Dispose unserviceable laptop computers following the standard policies in place in the Leasing Contract, return to Network Management and Technical Support Division in retirement of asset for donated and procured laptop computers while for the end of

coordination with Property Division.

N REPEALING CLAUSE

and/or amended accordingly All other issuances and/or portion thereof that are inconsistent herewith are hereby revcked

ROME MASUI.JR Commissioner of Internal Revenue

G4

BUREAU OF INTERNALREVENUE hY 2o NANYY

RECOROSMSTDIVISION Page 4 of 4