Statement

Access to West Texas A&M University information resources is commonly controlled by a logon ID associated with an authorized account. Proper administration of these access controls is important to ensure the integrity of University information and the normal business operation of University-managed and administered information resources.

Applicability

The intended audience for this control includes, but is not limited to, all information resource data/owners, management personnel, and system administrators.

The information resource owner or custodian is responsible for ensuring that the implementation measures described below are implemented.

Implementation

• Account managers shall have documented process to, at a minimum, disable accounts within 48 hours for any accounts meeting the following conditions:
  • account expiration
  • account is found to be in violation of University policy
  • accounts which have been inactive for 180 days
• Employee accounts shall be disabled immediately upon notification in cases of involuntary terminiation