{"id":1753,"date":"2024-08-06T17:38:28","date_gmt":"2024-08-06T17:38:28","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1753"},"modified":"2024-09-06T19:16:35","modified_gmt":"2024-09-06T19:16:35","slug":"ra-1-risk-assessment-policy-and-procedures","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/risk-assessment-ra\/ra-1-risk-assessment-policy-and-procedures\/","title":{"rendered":"RA-1: Risk Assessment \u2013 Policy and Procedures"},"content":{"rendered":"\n

RA-1: Risk Assessment \u2013 Policy and Procedures<\/h1>\n\n\n\n
<\/div>\n\n\n\n

NIST Baseline: <\/strong>Low <\/h2>\n\n\n\n

Privacy Baseline:  <\/strong>Yes <\/h2>\n\n\n\n

DIR Required By:<\/strong>  07\/20\/2023 <\/h2>\n\n\n\n

Review Date: \u00a0<\/strong>07\/31\/2024\u00a0<\/h2>\n\n\n\n
\n\n\n\n

Purpose –<\/strong> <\/h3>\n\n\n\n

The Risk Assessment Policy and associated controls describe the requirements for identifying, analyzing, and managing information security risks associated with Tarleton State University (Tarleton) information and information resources.  <\/p>\n\n\n\n

\n\n\n\n

Scope and Roles –<\/strong> <\/h3>\n\n\n\n

This policy applies to information resources owned or managed by Tarleton. The intended audience includes all involved in hiring and personnel management, the Tarleton Chief Information Officer (CIO), Chief Information Security Officer (CISO), and information resource owners and custodians. <\/p>\n\n\n\n

\n\n\n\n

Compliance –<\/strong> <\/h3>\n\n\n\n

Risk Assessment controls are implemented to ensure compliance with Title 1 Texas Administrative Code (TAC) \u00a7202.75<\/a>, \u00a7202.74<\/a>, and the Texas Department of Information Resources (DIR) Security Control Standards Catalog as required by TAC \u00a7202.76<\/a> and Texas A&M University System (TAMUS) Regulation 29.01.03, Information Security<\/a>.  <\/p>\n\n\n\n

\n\n\n\n

Implementation – <\/strong> <\/h3>\n\n\n\n