{"id":1757,"date":"2024-08-06T17:49:09","date_gmt":"2024-08-06T17:49:09","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=1757"},"modified":"2024-09-06T13:22:35","modified_gmt":"2024-09-06T13:22:35","slug":"ra-2-security-categorization","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/risk-assessment-ra\/ra-2-security-categorization\/","title":{"rendered":"RA-2: Security Categorization"},"content":{"rendered":"\n<h1 class=\"wp-block-heading has-large-font-size\">RA-2: Security Categorization<\/h1>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>NIST Baseline: <\/strong>Low&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>DIR Required By:<\/strong> &nbsp;07\/20\/2023&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>TAMUS required By:<\/strong> &nbsp;08\/01\/2022&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>Review Date: &nbsp;<\/strong>07\/31\/2024&nbsp;<\/h2>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Information resource owners or their designee, in coordination with the Tarleton State University (Tarleton) Chief Information Security Officer (CISO), are responsible for determining and documenting the data classification category for each information resource under their control following the <a href=\"https:\/\/assets.system.tamus.edu\/files\/policy\/pdf\/so-Security-Standards\/DataClassProtect.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Texas A&amp;M University System (TAMUS) Data Classification and Protection Standard<\/a>. &nbsp;<\/li>\n<\/ol>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li>Information resource owners or their designee are responsible for maintaining an accurate inventory of information resources that store or process data classified as Confidential (see <a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/program-management-pm\/pm-5-system-inventory\/\">Control PM-5, System Inventory<\/a>). \u00a0<\/li>\n<\/ol>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li>The final determination of classification categories may be subject to review by the Tarleton CISO.&nbsp;<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator alignfull has-text-color has-tarleton-purple-color has-alpha-channel-opacity has-tarleton-purple-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\"><strong>References\/Additional Resources<\/strong><\/h3>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.FIPS.199\" target=\"_blank\" rel=\"noreferrer noopener\">FIPS 199<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.FIPS.200\" target=\"_blank\" rel=\"noreferrer noopener\">FIPS 200<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.SP.800-30r1\" target=\"_blank\" rel=\"noreferrer noopener\">SP 800-30<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.SP.800-37r2\" target=\"_blank\" rel=\"noreferrer noopener\">SP 800-37<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.SP.800-39\" target=\"_blank\" rel=\"noreferrer noopener\">SP 800-39<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.SP.800-60v1r1\" target=\"_blank\" rel=\"noreferrer noopener\">SP 800-60-1<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.SP.800-60v2r1\" target=\"_blank\" rel=\"noreferrer noopener\">SP 800-60-2<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/doi.org\/10.6028\/NIST.SP.800-160v1\" target=\"_blank\" rel=\"noreferrer noopener\">SP 800-160-1<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/www.cnss.gov\/CNSS\/issuances\/Instructions.cfm\" target=\"_blank\" rel=\"noreferrer noopener\">CNSSI 1253<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/www.archives.gov\/cui\" target=\"_blank\" rel=\"noreferrer noopener\">NARA CUI<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/texreg.sos.state.tx.us\/public\/readtac$ext.TacPage?sl=R&amp;app=9&amp;p_dir=&amp;p_rloc=&amp;p_tloc=&amp;p_ploc=&amp;pg=1&amp;p_tac=&amp;ti=1&amp;pt=10&amp;ch=202&amp;rl=24#:~:text=%C2%A0%C2%A0(1)%20defining%20all%20information%20classification%20categories%20except%20the%20Confidential%20Information%20category%2C%20which%20is%20defined%20in%20Subchapter%20A%20of%20this%20chapter%2C%20and%20establishing%20the%20controls%20for%20each%3B\" target=\"_blank\" rel=\"noreferrer noopener\">1 TAC \u00a7 202.24(b)(1)<\/a> &nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/texreg.sos.state.tx.us\/public\/readtac$ext.TacPage?sl=R&amp;app=9&amp;p_dir=&amp;p_rloc=&amp;p_tloc=&amp;p_ploc=&amp;pg=1&amp;p_tac=&amp;ti=1&amp;pt=10&amp;ch=202&amp;rl=74#:~:text=%C2%A0%C2%A0(1)%20defining%20all%20information%20classification%20categories%20except%20the%20Confidential%20Information%20category%2C%20which%20is%20defined%20in%20Subchapter%20A%20of%20this%20chapter%2C%20and%20establishing%20the%20controls%20for%20each%3B\" target=\"_blank\" rel=\"noreferrer noopener\">1 TAC \u00a7 202.74(b)(1)<\/a> &nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/texreg.sos.state.tx.us\/public\/readtac$ext.TacPage?sl=R&amp;app=9&amp;p_dir=&amp;p_rloc=&amp;p_tloc=&amp;p_ploc=&amp;pg=1&amp;p_tac=&amp;ti=1&amp;pt=10&amp;ch=202&amp;rl=1\" target=\"_blank\" rel=\"noreferrer noopener\">1 TAC Chapter 202 Subchapter A<\/a> &nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/dir.texas.gov\/resource-library-item\/data-classification-guide-v11\" target=\"_blank\" rel=\"noreferrer noopener\">DIR Data Classification Guide<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/assets.system.tamus.edu\/files\/policy\/pdf\/so-Security-Standards\/DataClassProtect.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">TAMUS Data Classification and Protection Standard<\/a>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>RA-2: Security Categorization NIST Baseline: Low&nbsp; DIR Required By: &nbsp;07\/20\/2023&nbsp; TAMUS required By: &nbsp;08\/01\/2022&nbsp; Review Date: &nbsp;07\/31\/2024&nbsp; References\/Additional Resources FIPS 199&nbsp; FIPS 200&nbsp; SP 800-30&nbsp; SP 800-37&nbsp; SP 800-39&nbsp; SP &#8230;<\/p>\n","protected":false},"author":1,"featured_media":580,"parent":1510,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-1757","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/brian-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"brian"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 2 years ago"},"absolute_dates":{"created":"Posted on August 6, 2024","modified":"Updated on September 6, 2024"},"absolute_dates_time":{"created":"Posted on August 6, 2024 5:49 pm","modified":"Updated on September 6, 2024 1:22 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1757","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=1757"}],"version-history":[{"count":0,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1757\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/1510"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=1757"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}