{"id":1127,"date":"2024-07-16T21:49:57","date_gmt":"2024-07-16T21:49:57","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1127"},"modified":"2026-08-31T20:59:37","modified_gmt":"2026-08-31T20:59:37","slug":"cm-5-access-restrictions-for-change","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/configuration-management-cm\/cm-5-access-restrictions-for-change\/","title":{"rendered":"CM-5: Access Restrictions for Change"},"content":{"rendered":"\n<h1 class=\"wp-block-heading has-large-font-size\">CM-5: Access Restrictions for Change<\/h1>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>NIST Baseline: &nbsp;<\/strong>Low&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>DIR Required By: &nbsp;<\/strong>07\/20\/2023&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>Review Date: \u00a0<\/strong>08\/31\/2026<\/h2>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Information resource owners shall define, document, approve, and enforce physical and logical access restrictions associated with changes to information resources, complying with existing Tarleton Standard Administrative Procedures, Rules, and Security Controls.\u00a0<\/li>\n<\/ol>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li>Access restrictions must be documented.&nbsp;<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator aligncenter has-text-color has-tarleton-purple-color has-alpha-channel-opacity has-tarleton-purple-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\">References\/Additional Resources<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/technology\/tarleton-it-standards-for-all\/\">Tarleton IT Standards for All Users<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/policy\/wp-content\/uploads\/sites\/142\/2022\/06\/29_01_03_T0_01.pdf\">Tarleton Information Resources \u2013 Acceptable Use Policy<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/technology\/iops\/\">Tarleton Information Technology Security Standards<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/policy\/\">Tarleton State University Rules and Standard Administrative Procedures<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/\" target=\"_blank\" rel=\"noreferrer noopener\">Tarleton Security Control Standards Catalog<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>CM-5: Access Restrictions for Change NIST Baseline: &nbsp;Low&nbsp; DIR Required By: &nbsp;07\/20\/2023&nbsp; Review Date: \u00a008\/31\/2026 References\/Additional Resources Tarleton IT Standards for All Users Tarleton Information Resources \u2013 Acceptable Use Policy &#8230;<\/p>\n","protected":false},"author":1,"featured_media":580,"parent":1390,"menu_order":5,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-1127","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/brian-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"brian"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 1 week ago"},"absolute_dates":{"created":"Posted on July 16, 2024","modified":"Updated on August 31, 2026"},"absolute_dates_time":{"created":"Posted on July 16, 2024 9:49 pm","modified":"Updated on August 31, 2026 8:59 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1127","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=1127"}],"version-history":[{"count":3,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1127\/revisions"}],"predecessor-version":[{"id":2764,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1127\/revisions\/2764"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1390"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=1127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}