{"id":1183,"date":"2024-07-17T16:53:15","date_gmt":"2024-07-17T16:53:15","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1183"},"modified":"2026-09-02T19:10:45","modified_gmt":"2026-09-02T19:10:45","slug":"ia-1-identification-and-authentication-policy-and-procedures","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/identification-and-authentication-ia\/ia-1-identification-and-authentication-policy-and-procedures\/","title":{"rendered":"IA-1: Identification and Authentication \u2013 Policy and Procedures"},"content":{"rendered":"\n

IA-1: Identification and Authentication \u2013 Policy and Procedures<\/h1>\n\n\n\n
<\/div>\n\n\n\n

NIST Baseline:  <\/strong>Low <\/h2>\n\n\n\n

DIR Required By:  <\/strong>07\/20\/2023 <\/h2>\n\n\n\n

Review Date: \u00a0<\/strong>09\/02\/2026<\/h2>\n\n\n\n
\n\n\n\n

Purpose – <\/strong> <\/h3>\n\n\n\n

The Identification and Authentication Policy and associated controls describe the requirements for identifying users and protecting access to information resources.   <\/p>\n\n\n\n

\n\n\n\n

Scope and Roles –<\/strong> <\/h3>\n\n\n\n

This policy applies to information resources owned or managed by the Tarleton State University (Tarleton).  The intended audience includes the Tarleton Chief Information Officer (CIO), Chief Information Security Officer (CISO), and information resource owners and custodians. <\/p>\n\n\n\n

\n\n\n\n

Compliance –<\/strong> <\/h3>\n\n\n\n

Identification and Authentication controls are implemented to ensure compliance with the Texas Cyber Command (TXCC) as required by Title 1 Texas Administrative Code\u00a0\u00a7477.74<\/a>,\u00a0\u00a7477.76<\/a>, the\u00a0Texas Department of Information Resources (DIR) Security Control Standards Catalog<\/a>, and Texas A&M University System Regulation 29.01.03, Information Security<\/a>.\u00a0\u00a0\u00a0<\/p>\n\n\n\n

\n\n\n\n

Implementation –  <\/strong> <\/h3>\n\n\n\n