{"id":1451,"date":"2024-07-24T17:39:00","date_gmt":"2024-07-24T17:39:00","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1451"},"modified":"2024-09-06T20:38:55","modified_gmt":"2024-09-06T20:38:55","slug":"mp-1-media-protection-policy-and-procedures","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/media-protection-mp\/mp-1-media-protection-policy-and-procedures\/","title":{"rendered":"MP-1: Media Protection \u2013 Policy and Procedures"},"content":{"rendered":"\n

MP-1: Media Protection \u2013 Policy and Procedures<\/h1>\n\n\n\n
<\/div>\n\n\n\n

NIST Baseline:  <\/strong>Low <\/h2>\n\n\n\n

Privacy Baseline:<\/strong>  Yes <\/h2>\n\n\n\n

DIR Required By:  <\/strong>07\/20\/2023 <\/h2>\n\n\n\n

Review Date:  <\/strong>07\/24\/2024<\/h2>\n\n\n\n
\n\n\n\n

Purpose –<\/strong> <\/h3>\n\n\n\n

The Media Protection Policy and associated controls document the minimum standards required to protect the data stored or processed by Tarleton State University (Tarleton). All information resources that process, store, transmit, or otherwise impact the confidentiality, integrity, or accessibility of Tarleton data must meet the Media Protection Policy and security controls. Media includes both electronic media (e.g., hard drives, mobile devices including portable storage media such as USB memory sticks and portable computing and communications devices (e.g., laptop computers, tablets, smartphones, digital cameras, audio recording devices) and non-electronic media (e.g., paper).  <\/p>\n\n\n\n

\n\n\n\n

Scope and Roles –<\/strong> <\/h3>\n\n\n\n

This policy applies to information resources owned or managed by Tarleton. The intended audience includes all individuals involved in the handling of media that stores or processes data at Tarleton.  <\/p>\n\n\n\n

\n\n\n\n

Compliance –<\/strong> <\/h3>\n\n\n\n

Media Protection controls are implemented to ensure compliance with the Texas A&M University System (TAMUS) Records Retention Schedule;<\/a> Texas Government Code \u00a7441.187, Destruction of State Records<\/a>; Texas Administrative Code \u00a76.97, Final Disposition of Electronic State Records by Transfer to State Archives or Destruction<\/a>; the Texas Department of Information Resources (DIR) Security Control Standards Catalog as required by Title 1 Texas Administrative Code \u00a7202.76<\/a>; and TAMUS Regulation 29.01.03, Information Security<\/a>. <\/p>\n\n\n\n

\n\n\n\n

Implementation – <\/strong> <\/h3>\n\n\n\n