RMO No. 59-2019 — Prescribes the policies and guidelines for disabling of USB ports and DVD drives of all BIR desktop computers/workstations

REPJBLI OF THE PYELIPPIES

DEPARTMENT OF FINANCE BUREAU OF INTERNAL REVENUF

November 19. 2019

Revenue memorandum Order no._59-2019

Subject POLICIES AND GUIDELINES IN DISABLING OF USE PORTS AND DVD DRIVES OF ALL BIR DESKTOP COMPUTERSWORKSTAtiONS

TO ALL INTERNAL REVENUE OFFICIALS, EMPLOYEES AND OTHERS CONCERNED

OBJECTIVES:

Prescribe the policies and guidelines for disabling ports for USB-based memory sticks,flash/thumb/jump/keyand DVD drives of all BIR desktop computers/workstations to secure important BIR assets (i.e. desktop and data)

2 Comply with the requirements of Republic Act No. 10173, otherwise known as the Data Privacy Act.

3. Prevent data from being deliberately or inadvertently moved outside the BIR network

and/or premises where it can potentially be accessed by unauthorized resources

Avoid the proliferation of viruses or other maiwares that can potentially harm the BiR assets.

I POLICIES AND GUIDELINES

A. USB ports and DVD Drive (saving/writing capacity) of all BIR desktop

computers/workstations whether leased or owned shall be disabled except USB ports for printer, mouse and keyboard connection.

B. The DVD Drive components of desktop computers/workstations shall be for reading

capacity/use only.

C. The desktop computers of the following revenue officials shall be exempted from disabling of USB ports until the use of Network Attached Storage (NAS) is in place:

1. Commissioner of Internal Revenue

12. Assistant Chiefs 10. Assistant Revenue District Officers 11.1 13. Section Chiefs 3. Chief of Staff of the OCIR and ODC!Rs 2. Deputy Commissioners 5. Head Revenue Executive Assistants 6. Regional Directors 8. Revenue Data Center (RDC) Heads 9. Revenue District Officers 4. Assistant Commissioners 7. Assistant Regional Directors Division Chiefs BUREAU OF INTERNAL REVENUE ReCords Mgt. DIVIsION nnTiN DEC O 9.2019 ID:N A.M. L

Page 1 of 2

D. The Network Management and Technica! Suppori Division (NMTSD)! Computer Operations Network and Engineering Division of Revenue Data Center (CONED- RDC) shall: Configure/disabie USB ports ana DVD arive of BIR computers/workstations.

2. Ensure and monitor that all UsB ports and DVD arives are disabled in desktop

computers/workstations

3. Maintain and monitor that anti-virus and anti-maiware have been installed and

regulariy updated in the desktop computers/workstations exempted from disabling of USB Ports and DVD drive.

HH. EFFECTIVITY

This Order shall take effect immediately

Aoo

Commissioner of Internal Revenue CAeSAr R. DuLAY

031158

RHDEAUDE TNTERNAL REVENUE

F nTYT

DEC 0 9. 2019 10:n A.M A

2 3 RECORDS MGT. DIVISION

G4

Page 2 of 2