Information Security Guidelines
Show AI Summary
Taxpayer information confidentiality: mandates committees, classification, access controls and incident reporting to protect sensitive tax data.
Confidentiality of taxpayer information is enforced through an Information Security Committee (ISC) and a Chief Information Security Officer (CISO), with mandated Local Information Security Committees (LISCs) at cadre-controlling levels to implement an Information Security Policy and Procedures (ISPP). Information must be classified into prescribed categories and protected by domain-specific controls-physical security, personnel security, identity and access management, and security monitoring and incident management-supported by adoption matrices, reporting, audits, user records, training, and breach investigation and escalation procedures.