CM-5: Access Restrictions for Change

NIST Baseline:  Low 

DIR Required By:  07/20/2023 

Review Date:  08/31/2026

  1. Information resource owners shall define, document, approve, and enforce physical and logical access restrictions associated with changes to information resources, complying with existing Tarleton Standard Administrative Procedures, Rules, and Security Controls. 
  1. Access restrictions must be documented. 

References/Additional Resources

Tarleton IT Standards for All Users

Tarleton Information Resources – Acceptable Use Policy

Tarleton Information Technology Security Standards

Tarleton State University Rules and Standard Administrative Procedures

Tarleton Security Control Standards Catalog