Assurance of safety and confidentiality

– The secret key must be store on the token which must not be given to another person.

– Keep the token in a safe and secret place. In case the digital certificate of the agency/organization is stored on a token, it must be given to the document management division and kept in a locked cabinet in the agency/organization.

– The digital certificate of the agency/organization used for automatic signing must be stored on a hardware security module of General Department of Taxation.

– The token shall be used and protected in “top secret” mode according to regulations on state secrets.

– The password to the digital certificate shall be changed and protected according to regulations of tax authorities.

Article 8. Responsibility of Departments of Taxation and Sub-departments of taxation

– Manage registration, transfer, use, protection of digital certificates in accordance with this document.

+ General Department of Taxation shall provide special digital certificates for tax authorities.

+ Departments of Taxation shall provide, manage, use, withdraw public digital certificates of organizations and individuals at Departments of Taxation and Sub-departments of taxation where necessary.

– Take responsibility for the accuracy of information about subscribers.

– The document management division of each agency/organization shall manage, protect and use its digital certificate.

– Protect and use the secret key storage device in “top secret” mode according to regulations on state secrets.

– The IT department of each Department of Taxation shall receive, examine requests, manage the provision, withdrawal, and delivery of digital certificates at the Department of Taxation and Sub-departments of taxation; inspect and supervise the subscribers using digital certificates according to Article 11 of this document; protect, store, transport digital certificates in a way that ensure safety and confidentiality; provide support and instructions on issues related to digital certificates at the Department of Taxation and Sub-department of taxation; promptly report and deal with violations.

– Retain and manage relevant documents.

Article 9. Responsibility of departments and units affiliated to General Department of Taxation

– Manage registration, transfer, use, protection of digital certificates in accordance with this document.

+ General Department of Taxation shall distribute special digital certificates among tax authorities.

+ Departments and units affiliated to General Department of Taxation shall provide, manage, use, withdraw public digital certificates where necessary.

– Take responsibility for the accuracy of information about subscribers.

– The document management division of each agency/organization shall manage, protect and use its digital certificate.

– Protect and use the secret key storage device in “top secret” mode according to regulations on state secrets.

– Retain and manage relevant documents.

– The office shall submit reports on quantities of special digital certificates to be provided and withdrawn of departments and units affiliated to General Department of Taxation to Information Technology Department.

– Units affiliated to General Department of Taxation shall submit reports on quantities of special digital certificates to be provided and withdrawn to Information Technology Department.