Summary
RMO No. 05-2024 prescribes the policies and procedures for Multi-Factor Authentication (MFA) for Virtual Private Network (VPN) access to the BIR network.
CollapseExpand
Key points
- MFA required. MFA is required for all users of the Bureau’s VPN, who are responsible for all activities under their account. A one-time password or pin is generated by a mobile application or sent to the registered BIR email address.
- Access requests. Users with existing access and those requesting new access, whether BIR employees or third party service providers, accomplish two (2) copies of the Server Network Access Request Form (SNARF) with a Network Diagram attached. They submit it to the Security Management Division (SMD), which may require other documents such as an NDA or justification letter.
- Evaluation. SMD evaluates a VPN access request only after complete documentary requirements are submitted.
- Lockout and issues. An account is locked after a maximum of three (3) consecutive invalid log in attempts. Locked accounts and forgotten passwords are logged in the BIR Service Desk System, and MFA problems are reported to SMD.
Who is affected
- BIR employees using the VPN
- Third party service providers using the VPN
Summary by Tax Resources PH. It is not a substitute for the full text of the issuance or professional advice.
Copies of BIR issuances are hosted here for reference. For the official version, check bir.gov.ph. Summaries by Tax Resources PH are not a substitute for the full text or professional advice.