Statement

WTAMU shall select a control baseline for Information Systems. This baseline shall allow tailoring or of controls allowing WTAMU to develop security and privacy plans that reflect the specific mission and business functions, the environments where their systems operate, the threats and vulnerabilities that can affect their systems, and any other conditions or situations that can impact the University's mission.

Applicability

This Control applies to all West Texas A&M information resources.

Implementation

The default baseline for all WTAMU information system are those controls identified as required by Texas DIR and/or the Texas A&M University System for the impact level of the information system.

WTAMU may employ standards for the cost-effective information security of information, information resources, and applications within or under University supervision that are more stringent than the standards defined in the Control Catalog if these standards:

• Contain at least the applicable standards issued by WTAMU
• Are consistent with applicable federal law, policies, and guidelines issued under state rule, industry standards, best practices, or deemed necessary to adequately protect the information held by the state agency.