RMO No. 67-2010: Prescribes the policies and guidelines on Information and Communication Technology (ICT) Security offenses

Key points

1. Employee responsibility. Every revenue official or employee must observe the established policies, procedures and requirements in the ICT environment and must not violate security policies or revenue issuances. Users are responsible for all activities, known or unknown, related to the use of their ID.
2. Gross Neglect of Duty. First offense is dismissal. Examples include disclosing sensitive information without prior management approval, unsecured superuser accounts, disclosing a user ID and password without consent, and failing to report violations or breaches discovered.
3. Grave Misconduct. First offense is dismissal. Examples include unauthorized access to the operating system, database, network, applications or machines, unauthorized copying of BIR software and data, installing unauthorized software, and disclosing a user ID and password even with consent.
4. Falsification of official document. First offense is dismissal. It covers unauthorized additions, modifications or deletions to printouts (reports, correspondences) and electronic files, and other analogous cases.

Who is affected

• Revenue officials and employees
• Users of BIR ICT systems