{"id":792,"date":"2024-04-24T16:46:57","date_gmt":"2024-04-24T16:46:57","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=792"},"modified":"2024-09-06T16:29:17","modified_gmt":"2024-09-06T16:29:17","slug":"at-1-policy-and-procedures","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/awareness-and-training-at\/at-1-policy-and-procedures\/","title":{"rendered":"AT-1: Security Awareness and Training Policy and Procedures \u00a0\u00a0"},"content":{"rendered":"\n

AT-1: Security Awareness and Training Policy and Procedures   <\/h1>\n\n\n\n
<\/div>\n\n\n\n

NIST Baseline:  <\/strong>Low <\/h2>\n\n\n\n

DIR Required By:<\/strong>  07\/20\/2023 <\/h2>\n\n\n\n

Review Date:  <\/strong>05\/08\/2024 <\/h2>\n\n\n\n
\n\n\n\n

Purpose – <\/strong> <\/h3>\n\n\n\n

Tarleton State University (Tarleton) recognizes that security awareness training policies and procedures are vital to reducing information security risks. The Security Awareness Training Policy and associated controls document the requirements for training users to understand their responsibilities under State law and System policy, and their role in protecting Tarleton\u2019s information resources by reducing information security risks.  <\/p>\n\n\n\n

\n\n\n\n

Scope and Roles –<\/strong> <\/h3>\n\n\n\n

The intended audience includes the Tarleton Chief Information Officer (CIO), Chief Information Security Officer (CISO), information resource owners, information resource custodians, and all users of Tarleton information resources.  <\/p>\n\n\n\n

\n\n\n\n

Compliance – <\/strong> <\/h3>\n\n\n\n

The Security Awareness Training Policy and associated controls are implemented to ensure compliance with the Texas Department of Information Resources (DIR) Security Control Standards Catalog as required by Title 1 Texas Administrative Code \u00a7202.76<\/a>, \u00a7202.74<\/a>, Texas Government Code \u00a72054.519<\/a>, \u00a72054.5191<\/a>, \u00a72054.5192<\/a>, and Texas A&M University System Regulation 29.01.03, Information Security<\/a>.   <\/p>\n\n\n\n

\n\n\n\n

Implementation<\/strong> <\/h3>\n\n\n\n