IRS 1075 is More Than Data Encryption and Software Protocols

IRS 1075 refers to the publication issued by the Internal Revenue Service (IRS) that mandates the measures, processes, checks and commitments to be deployed by anyone who receives or processes data from the IRS.

Contrary to the general impression of the public, IRS 1075 stipulations extend far beyond encryption and other digital processes. These regulations are comprehensive in nature, and among the key stipulations are requirements for physical security of data centers and other facilities handling IRS data.

Some of the key directions in this regards include:

1. Earmarking restricted areas with signage, and demarcating the same from non-restricted areas with a physical barrier.
2. Access control to the data processing and storing facilities, transmission lines and information systems, using various means, including manual keys, electronic locks, door monitor and more. The regulations require that the number of entrances be kept at a minimal and that an employee monitor the main entrance to the facility to ensure access only to authorized employees.
3. Maintaining an authorized access list updated regularly and logging the time in and time out of all visitors. The stipulations also require authenticating visitors before access to such restricted areas.
4. Location of safeguard Information systems components to minimize potential damage from physical harm, environmental hazards and unauthorized access.
5. Detailed specifications for the construction of security room including quality of materials to be used and storage containers, safes and vaults, complete with guidelines to control and safeguard keys and combinations.
6. Having intrusion detection equipment in place such as magnetic windows, door sensors, motion detectors, alarms and more to detect breeches of the perimeter and set off an alarm.

Compliance procedures and policies can never be underestimated, no matter how trivial it may seem on first sight. As the adage goes, a chain is only as strong as its weakest link.

Alex Carroll

Managing Member at Lifeline Data Centers

Alex, co-owner, is responsible for all real estate, construction and mission critical facilities: hardened buildings, power systems, cooling systems, fire suppression, and environmentals. Alex also manages relationships with the telecommunications providers and has an extensive background in IT infrastructure support, database administration and software design and development. Alex architected Lifeline’s proprietary GRCA system and is hands-on every day in the data center.