Internal Revenue Manual
IRM 2.25.3 — Intranet Site and Web Server Registration Procedures
Part 2. Information Technology
Chapter 25. Managed Service for IRS Section 3. Intranet Site and Web Server Registration Procedures 2.25.3 Intranet Site and Web Server Registration Procedures Manual Transmittal September 07, 2023 Purpose (1) This transmits revised IRM 2.25.3, Integrated Enterprise Portal - Web Services, Intranet Site and Web Server Registration Procedures. Material Changes (1) This transmits procedures and guidelines for registering Intranet web sites and web servers at the IRS. Changes include: 2.25.3.1 added necessary IRM mandatory internal controls. Effect on Other Documents IRM 2.25.3, dated March 24, 2020, is superseded. Audience All Operating Divisions & Functions, Web Developers, Webmasters, and Systems Administrators are required to use this IRM. Effective Date (09-07-2023) Kaschit Pandya Acting, Chief Information Officer
Program Scope and Objectives
2.25.3.1 (09-07-2023) Program Scope and Objectives This IRM describes the process for registering Intranet sites and web servers at the IRS. Registering Intranet sites and web servers ensures that information is properly protected and inventoried at the IRS. Purpose: This transmits revised IRM 2.25.3, Intranet Site and Web Server Registration Procedures. Audience: All Operating Divisions & Functions, Web Developers, Webmasters, and Systems Administrators are required to use this IRM. Policy Owner: Chief Information Officer Program Owner: Automation Reporting and Metrics Primary Stakeholders: Information Technology (IT), Communications & Liaison (C&L). Program Goals: The Web Registration System is used to register all intranet web sites and the servers they run on.
Background
2.25.3.1.1 (09-07-2023) Background In order to enhance security and management of the IRS Intranet, all web sites and web servers residing on the IRS Intranet must be registered with Enterprise Operations (OS:IT:EO). This requirement ensures that information residing on the IRS Intranet is properly protected and inventoried and that data is not compromised.
Authority
2.25.3.1.2 (09-07-2023) Authority All IRS Intranet sites and web servers are required to be registered prior to being operational by Enterprise Operations. Failure to comply with this process will result in the exclusion of Intranet sites and web servers from the IRS Intranet.
Responsibilities
2.25.3.1.3 (09-07-2023) Responsibilities The Chief Information Officer (CIO) ultimately is responsible for this program as part of Enterprise Operations (OS:IT:EO). Automation Reporting and Metrics section is responsible for implementation, operations, maintenance, management, governance, and enhancement of the Enterprise Operations Web Registration Database and Website. Individual IRS Business Units are responsible for ensuring that their website and/or web server is registered in compliance with IRS policy.
Program Management and Review
2.25.3.1.4 (09-07-2023) Program Management and Review Program Reports: Reports include: Unauthorized Server List Active Site List Inactive Site List Decommissioned List Program Effectiveness: Program effectiveness is measured by the result of the reports and database queries when needed.
Program Controls
2.25.3.1.5 (09-07-2023) Program Controls This program uses multiple sources to establish controls. This IRM constitutes one of the controls. Other internal standards are located on the Enterprise Operations Web Registration Database available at https://webreg.web.irs.gov/WebReg/Register/Default.asp
Terms/Acronyms/Definitions
2.25.3.1.6 (09-07-2023) Terms/Acronyms/Definitions The following table defines terms relevant to this program that are used throughout this IRM section: Terms Term Definition Intranet The local, internal network Web server A computer system capable of delivering content to users via a web browser Web site A collection of files accessed through a web browser at an address, covering a particular theme or subject Webmaster The person who maintains a particular website The following table defines acronyms frequently used throughout this IRM section: Acronyms Acronym Definition IRS Internal Revenue Service IT Information Technology C&L Communication & Liaison
Related Resources
2.25.3.1.7 (09-07-2023) Related Resources For answers to frequently asked questions or a user's guide, please go to: https://webreg.web.irs.gov/WebReg/Register/Default.asp For other questions or additional information, contact Enterprise Operations at *IT EOPSWebRegUpdate
Web Registration Process
2.25.3.2 (09-07-2023) Web Registration Process In order to enhance security and management of the IRS Intranet, all web sites and web servers residing on the IRS Intranet must be registered with Enterprise Operations (OS:IT:EO). This requirement ensures that information residing on the IRS Intranet is properly protected and inventoried and that data is not compromised. ALL IRS Intranet sites and web servers are to be registered via the Enterprise Operations Web Registration Database available at https://webreg.web.irs.gov/WebReg/Register/Default.asp . Step-by-step instructions for registering Intranet sites and web servers are provided through the process at this site. This site also contains a method to validate Intranet sites and web servers that have been registered. Registration ensures that a site or server is a known entity on the Intranet, has been approved for internal use by an executive level sponsor, and that a system administrator and webmaster have been designated. All IRS Intranet sites and web servers are required to be registered prior to being operational by Enterprise Operations. Failure to comply with this process will result in the exclusion of Intranet sites and web servers from the IRS Intranet. For additional information, contact Enterprise Operations at *IT EOPSWebRegUpdate. Answers to frequently asked questions and a Registration User's Guide can be found at https://webreg.web.irs.gov/WebReg/Register/Default.asp.
Source: official text