PL-1 Security Planning Policy and Procedures
Overview
The West Texas A&M Information Security Controls Catalog establishes the minimum standards and controls for University information security in accordance with the state's Information Security Standards for Institutions of Higher Education found in Title 1, Chapter 202, Texas Administrative Code (TAC 202).
Purpose
The ISO and IRM shall report annually to the President on the adequacy and effectiveness of information security policies, procedures, and compliance with Texas Administrative Code, Chapter 202. The report shall also include the status and effectiveness of initiatives undertaken, as well as the results of the University Risk Assessments.
Scope
The scope of these regulations and procedures are applicable to all information resources owned or operated by WTAMU. All users are responsible for adhering to this policy. If needed or appropriate, information regarding roles, responsibilities, management commitment, and coordination among organizational entities are embedded within these procedures.
Regulations and Procedures
The State of Texas Department of Information Resources (DIR) has chosen to adopt a select number of Security Planning Controls as established within the NIST SP 800-53 control family guidelines identified by the DIR Security Control Standards Catalog. WTAMU has written, documented security policies and procedure in place.