{"id":1067,"date":"2024-07-16T20:37:55","date_gmt":"2024-07-16T20:37:55","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1067"},"modified":"2024-09-06T21:42:37","modified_gmt":"2024-09-06T21:42:37","slug":"ac-20-use-of-external-systems","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/access-control-ac\/ac-20-use-of-external-systems\/","title":{"rendered":"AC-20: Use of External Systems"},"content":{"rendered":"\n

AC-20: Use of External Systems<\/h1>\n\n\n\n
<\/div>\n\n\n\n

NIST Baseline:  <\/strong>Low <\/h2>\n\n\n\n

DIR Required By:<\/strong> 07\/20\/2023 <\/h2>\n\n\n\n

Review Date:  <\/strong>04\/17\/2024 <\/h2>\n\n\n\n
    \n
  1. Before use, external information resources that access, process, store or transmit data controlled by Tarleton State University (Tarleton), must be approved by the Tarleton CISO or their designee. See Control SA-4, Acquisition Process<\/a>, and Control SA-9, External System Services<\/a>, for additional information\u00a0<\/li>\n<\/ol>\n\n\n\n
      \n
    1. Personally owned devices that connect to the Tarleton email system, network, and other information resources must be kept up to date\/patched, and use a password, passcode, or another form of authentication to prevent unauthorized access to the device. <\/li>\n<\/ol>\n\n\n\n
        \n
      1. The information resource owner, or designee shall establish terms and conditions for contracting with external information resource providers. <\/li>\n<\/ol>\n\n\n\n
        \n\n\n\n

        References\/Additional Resources<\/strong><\/h3>\n\n\n\n

        Tex. Gov\u2019t Code Section 2054.138<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"

        AC-20: Use of External Systems NIST Baseline:  Low  DIR Required By: 07\/20\/2023  Review Date:  04\/17\/2024  References\/Additional Resources Tex. Gov\u2019t Code Section 2054.138 <\/p>\n","protected":false},"author":1,"featured_media":580,"parent":871,"menu_order":20,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-1067","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/brian-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"brian"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 2 years ago"},"absolute_dates":{"created":"Posted on July 16, 2024","modified":"Updated on September 6, 2024"},"absolute_dates_time":{"created":"Posted on July 16, 2024 8:37 pm","modified":"Updated on September 6, 2024 9:42 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=1067"}],"version-history":[{"count":0,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1067\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/871"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=1067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}