Attempts to screen Training about proper procedures individual returns on Multi-factor authentication to limit access to system. the basis of surname, Encrypt of tax return data stored in system sex, race, etc., rather than tax liability. c. Privacy problems could arise in the inquiry of data, and recommended corrective actions, are as follows: Problem Controls Unauthorized access Strong authentication of all people making inquiries via to taxpayer the web site something other than social security information on web numbers preferably multi-factor, not just passwords. – site Encryption of all tax return data while in storage Encryption of all traffic to/from the web site Unauthorized Training on how to properly authenticate taxpayers who release of make telephone inquiries information in Strong authentication of taxpayers making telephone response to inquiries telephone inquiry Disclosure of Training on how to paper documents prior to taxpayer disposal information through Training on how to wipe or erase media that contained improper disposal tax return information prior to disposal of old (CMA Examination, adapted) Case 9-2 Generally Accepted Privacy Principles Obtain the practitioner’s version of Generally Accepted Privacy Principles from the web site (). You will find it located under professional resources and then information technology. Use it to answer the following questions:
Attempts to screen individual returns on the basis of surname, sex, race, etc., rather than tax liability. Training about proper procedures Multi-factor authentication to limit access to system. Encrypt of tax return data stored in system c. Privacy problems could arise in the inquiry of data, and recommended corrective actions, are as follows: Problem Controls Unauthorized access to taxpayer information on web site Strong authentication of all people making inquiries via the web site something other than social security numbers – preferably multi-factor, not just passwords. Encryption of all tax return data while in storage Encryption of all traffic to/from the web site Unauthorized release of information in response to telephone inquiry Training on how to properly authenticate taxpayers who make telephone inquiries Strong authentication of taxpayers making telephone inquiries Disclosure of taxpayer information through improper disposal of old Training on how to paper documents prior to disposal Training on how to wipe or erase media that contained tax return information prior to disposal (CMA Examination, adapted) Case 9-2 Generally Accepted Privacy Principles Obtain the practitioner’s version of Generally Accepted Privacy Principles from the web site (). You will find it located under professional resources and then information technology. Use it to answer the following questions:
rais12_SM_Ch09.docx