{"id":1219,"date":"2024-07-17T18:17:15","date_gmt":"2024-07-17T18:17:15","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1219"},"modified":"2026-09-03T16:49:19","modified_gmt":"2026-09-03T16:49:19","slug":"ir-6-incident-reporting","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/incident-response-ir\/ir-6-incident-reporting\/","title":{"rendered":"IR-6: Incident Reporting"},"content":{"rendered":"\n<h1 class=\"wp-block-heading has-large-font-size\">IR-6: Incident Reporting<\/h1>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>NIST Baseline: &nbsp;<\/strong>Low&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>Privacy Baseline:<\/strong> &nbsp;Yes&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>DIR Required By: &nbsp;<\/strong>07\/20\/2023&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>TAMUS Required By:<\/strong> &nbsp;08\/01\/2022&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>Review Date: \u00a0<\/strong>09\/03\/2026<\/h2>\n\n\n\n<ul class=\"wp-block-list its-nested-list\">\n<li>Anyone may report illegal, disruptive, or suspicious activity impacting Tarleton State University (Tarleton) information resources at any time to the Office of Innovative Technology Solutions (OITS) Helpdesk through e-mail (<a href=\"mailto:helpdesk@tarleton.edu\" target=\"_blank\" rel=\"noreferrer noopener\">helpdesk@tarleton.edu)<\/a> or telephone (<a href=\"tel:254-968-9885\" target=\"_blank\" rel=\"noreferrer noopener\">254-968-9885<\/a>).&nbsp;<\/li>\n\n\n\n<li>Known or suspected security incidents must be reported immediately to either:&nbsp;\n<ul class=\"wp-block-list\">\n<li>Tarleton OITS Helpdesk: (254)968-9885 or <a href=\"mailto:helpdesk@tarleton.edu\" target=\"_blank\" rel=\"noreferrer noopener\">helpdesk@tarleton.edu<\/a>, or&nbsp;<\/li>\n\n\n\n<li>Tarleton OITS Security Team: <a href=\"mailto:ITsecurity@tarleton.edu\" target=\"_blank\" rel=\"noreferrer noopener\">ITsecurity@tarleton.edu<\/a>.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>The Tarleton Chief Information Security Officer (CISO) has reporting responsibilities to the Texas Department of Information Resources (DIR) for security incidents that are assessed to:&nbsp;\n<ul class=\"wp-block-list\">\n<li>Propagate to other university or state systems;&nbsp;<\/li>\n\n\n\n<li>Result in criminal violations that shall be reported to law enforcement; or&nbsp;<\/li>\n\n\n\n<li>Involve the unauthorized disclosure or modification of confidential information, e.g., sensitive personal information as defined in Texas Business and Commerce Code <a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/BC\/htm\/BC.521.htm\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a7521.002(a)(2)<\/a> and other applicable laws that may require public notification.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>If the security incident is assessed to involve suspected criminal activity (e.g., violations of Texas Penal Code <a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/PE\/htm\/PE.33.htm\" target=\"_blank\" rel=\"noreferrer noopener\">Chapter 33<\/a> or <a href=\"https:\/\/statutes.capitol.texas.gov\/docs\/PE\/htm\/PE.33A.htm\" target=\"_blank\" rel=\"noreferrer noopener\">Chapter 33A<\/a>), the security incident shall be investigated, reported, and documented in a manner that restores operation promptly while meeting the legal requirements for handling of evidence in accordance with 1 Texas Administrative Code <a href=\"https:\/\/texas-sos.appianportalsgov.com\/rules-and-meetings?$locale=en_US&amp;interface=VIEW_TAC_SUMMARY&amp;queryAsDate=08%2F31%2F2026&amp;recordId=228881\">\u00a7477.73(b)<\/a>.\u00a0\u00a0\u00a0<\/li>\n\n\n\n<li>The Tarleton CISO will ensure reporting to Texas A&amp;M University System (TAMUS) Cybersecurity Operation Center when specific requirements are met for reporting incidents to TAMUS so that any required notifications of an incident can be made to any additional TAMUS Offices.&nbsp;<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator aligncenter has-text-color has-tarleton-purple-color has-alpha-channel-opacity has-tarleton-purple-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\">References\/Additional Resources<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/texas-sos.appianportalsgov.com\/rules-and-meetings?$locale=en_US&amp;interface=VIEW_TAC_SUMMARY&amp;queryAsDate=08%2F31%2F2026&amp;recordId=228881\">1 TAC \u00a7477.73(b)\u00a0\u00a0<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/BC\/htm\/BC.521.htm#521.053:~:text=Sec.%20521.053.%20%20NOTIFICATION%20REQUIRED%20FOLLOWING%20BREACH%20OF%20SECURITY%20OF%20COMPUTERIZED%20DATA.\" target=\"_blank\" rel=\"noreferrer noopener\">Section 512.053, Business and Commerce Code<\/a>&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.1125\" target=\"_blank\" rel=\"noreferrer noopener\">Section 2054.1125, Government Code<\/a>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>IR-6: Incident Reporting NIST Baseline: &nbsp;Low&nbsp; Privacy Baseline: &nbsp;Yes&nbsp; DIR Required By: &nbsp;07\/20\/2023&nbsp; TAMUS Required By: &nbsp;08\/01\/2022&nbsp; Review Date: \u00a009\/03\/2026 References\/Additional Resources 1 TAC \u00a7477.73(b)\u00a0\u00a0 Section 512.053, Business and Commerce &#8230;<\/p>\n","protected":false},"author":1,"featured_media":580,"parent":1404,"menu_order":6,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-1219","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/brian-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"brian"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 6 days ago"},"absolute_dates":{"created":"Posted on July 17, 2024","modified":"Updated on September 3, 2026"},"absolute_dates_time":{"created":"Posted on July 17, 2024 6:17 pm","modified":"Updated on September 3, 2026 4:49 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=1219"}],"version-history":[{"count":1,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1219\/revisions"}],"predecessor-version":[{"id":2853,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1219\/revisions\/2853"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1404"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=1219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}