{"id":1624,"date":"2024-08-05T16:38:42","date_gmt":"2024-08-05T16:38:42","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1624"},"modified":"2024-09-06T13:15:26","modified_gmt":"2024-09-06T13:15:26","slug":"pl-4-rules-of-behavior","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/planning-pl\/pl-4-rules-of-behavior\/","title":{"rendered":"PL-4: Rules of Behavior"},"content":{"rendered":"\n<h1 class=\"wp-block-heading has-large-font-size\">PL-4: Rules of Behavior<\/h1>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>NIST Baseline: &nbsp;<\/strong>Low&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>Privacy Baseline:<\/strong> &nbsp;Yes&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>DIR Required By:<\/strong> &nbsp;07\/20\/2023&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>TAMUS Required By:<\/strong> 08\/01\/2022&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>Review Date: &nbsp;<\/strong>07\/31\/2024&nbsp;<\/h2>\n\n\n\n<ul class=\"wp-block-list its-nested-list\">\n<li>Use of Tarleton State University (Tarleton) resources is documented in Tarleton Standard Administrative Procedure <a href=\"https:\/\/www.tarleton.edu\/policy\/wp-content\/uploads\/sites\/142\/2022\/06\/29_01_03_T0_01.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">29.01.03.T0.01, Information Resources &#8211; Acceptable Use<\/a> and in the <a href=\"https:\/\/media.tamus.edu\/Campus_media\/isa\/DataUseAgreement-20230731.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Texas A&amp;M System Member Data Use Agreement,<\/a> which is acknowledged upon completion of the required Information Security Awareness Training course (see <a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/awareness-and-training-at\/at-1-policy-and-procedures\/\" data-type=\"page\" data-id=\"792\">Control AT-1, Security Awareness and Training Policy and Procedures<\/a>), both describe individual responsibilities and expected behavior regarding information resource usage for all authorized users.\u00a0<\/li>\n\n\n\n<li>Information resource owners, information resource custodians, and\/or designees are responsible for ensuring that all individuals needing access to information resources acknowledge that they have read, understand, and agree to abide by the rules of behavior prior to granting them access to information resources.&nbsp;<\/li>\n\n\n\n<li>Tarleton\u2019s Chief Information Security Officer (CISO) is responsible for helping ensure that content regarding rules of behavior is included in the Tarleton Standard Administrative Procedure (SAP) <a href=\"https:\/\/www.tarleton.edu\/policy\/wp-content\/uploads\/sites\/142\/2022\/06\/29_01_03_T0_01.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">29.01.03.T0.01, Information Resources &#8211; Acceptable Use<\/a> and that this SAP is updated as needed.&nbsp;<\/li>\n\n\n\n<li>The content in the Security Awareness Training shall be reviewed and updated as appropriate by Texas A&amp;M University System (TAMUS).&nbsp;&nbsp;&nbsp;\n<ul class=\"wp-block-list\">\n<li>Any changes affecting the Texas A&amp;M System Member Data Use Agreement acknowledged at the end of the Security Awareness Training must be read and re-acknowledged by all users, as applicable.&nbsp;<\/li>\n\n\n\n<li>Renewal of Security Awareness Training is required annually of all Tarleton employees and contractors\/third-party vendors, which includes the re-acknowledgment of the Texas A&amp;M System Member Data Use Agreement.&nbsp; Any exceptions to completing this required training in lieu of an alternative\/comparable training must be approved by Tarleton\u2019s CISO to ensure proper acknowledgement of the rules of behavior is obtained (See <a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/awareness-and-training-at\/at-2-literacy-training-awareness\/\">Control AT-2, Literacy Training and Awareness<\/a>).&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator alignfull has-text-color has-tarleton-purple-color has-alpha-channel-opacity has-tarleton-purple-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\"><strong>References\/Additional Resources<\/strong><\/h3>\n\n\n\n<p><a href=\"https:\/\/texreg.sos.state.tx.us\/public\/readtac$ext.TacPage?sl=R&amp;app=9&amp;p_dir=&amp;p_rloc=&amp;p_tloc=&amp;p_ploc=&amp;pg=1&amp;p_tac=&amp;ti=1&amp;pt=10&amp;ch=202&amp;rl=22#:~:text=%C2%A0(3)%20User%20Responsibilities.%20The%20user%20of%20information%20resources%20has%20the%20responsibility%20to%3A\" target=\"_blank\" rel=\"noreferrer noopener\">1 TAC \u00a7 202.22(a)(3)<\/a>&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/texreg.sos.state.tx.us\/public\/readtac$ext.TacPage?sl=R&amp;app=9&amp;p_dir=&amp;p_rloc=&amp;p_tloc=&amp;p_ploc=&amp;pg=1&amp;p_tac=&amp;ti=1&amp;pt=10&amp;ch=202&amp;rl=72#:~:text=(3)%20User%20Responsibilities.%20The%20user%20of%20information%20resources%20has%20the%20responsibility%20to%3A\" target=\"_blank\" rel=\"noreferrer noopener\">1 TAC \u00a7 202.72(a)(3)<\/a>&nbsp;&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#:~:text=Sec.%202054.5191.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20EMPLOYEES%20AND%20OFFICIALS.\" target=\"_blank\" rel=\"noreferrer noopener\">Section 2054.5191, Government Code<\/a>&nbsp;<\/p>\n\n\n\n<p>Texas A&amp;M System Member Data Use Agreement&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/www.tarleton.edu\/policy\/wp-content\/uploads\/sites\/142\/2022\/06\/29_01_03_T0_01.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Tarleton SAP 29.01.03.T0.01, Information Resources &#8211; Acceptable Use<\/a>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>PL-4: Rules of Behavior NIST Baseline: &nbsp;Low&nbsp; Privacy Baseline: &nbsp;Yes&nbsp; DIR Required By: &nbsp;07\/20\/2023&nbsp; TAMUS Required By: 08\/01\/2022&nbsp; Review Date: &nbsp;07\/31\/2024&nbsp; References\/Additional Resources 1 TAC \u00a7 202.22(a)(3)&nbsp;&nbsp;&nbsp; 1 TAC \u00a7 &#8230;<\/p>\n","protected":false},"author":1,"featured_media":580,"parent":1524,"menu_order":4,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-1624","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/brian-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"brian"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 2 years ago"},"absolute_dates":{"created":"Posted on August 5, 2024","modified":"Updated on September 6, 2024"},"absolute_dates_time":{"created":"Posted on August 5, 2024 4:38 pm","modified":"Updated on September 6, 2024 1:15 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1624","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=1624"}],"version-history":[{"count":0,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1624\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1524"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=1624"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}