I:rit'*lIi-t - -)i Tl-il ]'ii:Lil'I'i-.!.

:',
;)EPAI'.1. jr4tr ]riT t-)F lrii'i --' J'i CE

EUF'-E-4"U CF IliTEIl]iAL RF'\'EI{LIE

NcvernDer 1g ?C1g

IqEV=r.IUE MEMCRANDUMi CRD=R NO , 51- 7D /q

Subiect POLTCIES AND GUIDELINES !N DISABLING OF USE PORTS AND DVD

DRIVES OF ALL BIR DES}(TCP CCMPIJTERS/WCRKSTATIONS

To ALL INTERNAL REVENUE OFFIC!A!.S, EMPLOYEES AND OTHERS

CONCERNED

I
t. OBJECTIVES:

1. Prescribe the policies and guidelines for disabling ports for USB-based memory
sticks, flash/thumb/jump/key and DVD drives BIR desktop of all
computers/workstations to secure important BIR assets (i.e. desktop and data).

Z. Comply with the requirements of Republic Act No. 10173, otherwise known as the
Data Privacy Act.

3. Prevent data from being deliberately or inadvertently moved outside the BIR network
andior premises where it can potentially be accessed by unauthorized resources.

4. Avoid the proliferation of viruses or other malwares that can potentially harm the BIR
assets.

It. POLIGIES AND GUIDELINES

A. USB ports and DVD Drive (saving/writing capacity) of all BIR desktop
computers/workstations whether leased or owned shall be disabled except USB
ports for printer, mouse and keyboard connection'

B. The DVD Drive components of desktop computerslworksiations shall be for reading

capacityiuse only.

C. The desktop computers of the following revenue officials shall be exempted from
disabling of USB ports until the use of Network Attached Storage (NAS) is in place:

1. Commissioner of lnternal Revenue

2. Deputy Commissioners
BUREAU of .tN NAL REVE NUE
3. Chief of Staff of the OCIR and ODCIRS Irl\-l-

4. Assistant Commissioners
5. Head Revenue Executive Assistants
lD.'n /f. t4,
6. Regional Directors DS0 ul,f
7 . Assistant Regional Directors
B. Revenue Data Center (RDC) Heads RECORDS MGT. DIVISIO N
B
9. Revenue District Officers
10. Assistant Revenue District Ofticers
11 . Division Chiefs
' 12. Assistant Chi€fs
13 Section Chiefs

Page 1 of 2
 D. Tne Ne:worli l/ranagemen'i ano Teghnicai Suplci Dii,isicn (NM-I'SD)/ Cornputer
Cperations Neiwoi'k and Engineei'ing Divisioir or Revenue Data Center (CONED-
RDC) shali:
',. Configureidrsabie US3 pcns anc DVD orive of BIR. ccrrputei's/wcrkstaiicns.
Ensure and mo;riioi'tlral Bli USts poi'ts an,i DVD orirres are drsableo in desl<iop
ccrnpuierslwcr[<staii cns

Maintain and monitor that anti-virus and anti-malware have been installed and
reguiai'l5r updateci in ihe desktop ccmputers/wcrkstaiions exempteci from
ciisabling of USts Ports and DVD drive.

Iir
=FFECTIVITY
This Crder shall take eftect innmediately

trCAESAR R,. DULAY

Commissioner of lnternal R,evenue
031158

t[ffieNuE

IVISION
ilEdoR-qs MGT'

G4

Page 2 af 7