Cybersecurity Guidelines for FSTI Providers
a. Personal Identity Information Retention Period:
Employment Records: Duration of employment + 7 years
Customer Records: Duration of the customer relationship + 5 years.
Conditions: - Ensure retention period compliance with the applicable laws. - Implement secure deletion of personal identity information after the retention period unless required for ongoing legal proceedings.
b. Financial Records Retention Period:
Tax Records:
Audit Records:
General Accounting Records:
Retain for 7 years from the date of filing.
Retain for 7 years from the completion of the audit.
Retain for 7 years
Conditions: - Ensure retention periods comply with the applicable tax regulations and other relevant regulations. - Store and protect financial records with strong access controls.
32
Made with FlippingBook. PDF to flipbook with ease