{"id":818,"date":"2024-04-24T17:28:36","date_gmt":"2024-04-24T17:28:36","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=818"},"modified":"2024-09-06T21:35:23","modified_gmt":"2024-09-06T21:35:23","slug":"au-1-policy-and-procedures","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/audit-and-accountability-au\/au-1-policy-and-procedures\/","title":{"rendered":"AU-1: Audit and Accountability Policy and Procedures"},"content":{"rendered":"\n

AU-1: Audit and Accountability Policy and Procedures<\/h1>\n\n\n\n
<\/div>\n\n\n\n

NIST Baseline:  <\/strong>Low <\/h2>\n\n\n\n

Privacy Baseline:<\/strong>  Yes <\/h2>\n\n\n\n

DIR Required By:  <\/strong>07\/20\/2023 <\/h2>\n\n\n\n

Review Date:  <\/strong>05\/08\/2024 <\/h2>\n\n\n\n
\n\n\n\n

Purpose – <\/strong> <\/h3>\n\n\n\n

The Audit and Accountability Policy and associated controls document the requirements for ensuring there are adequate event and transaction logs to account for, respond to, and minimize the impact of incidents that can impact Tarleton State University (Tarleton) information resources.  <\/p>\n\n\n\n

\n\n\n\n

Scope and Roles –<\/strong>  <\/h3>\n\n\n\n

This policy applies to information resources owned or managed by Tarleton. The intended audience includes the Tarleton Chief Information Officer (CIO), Chief Information Security Officer (CISO), information resource owners, information resource custodians, and all users of Tarleton information resources. <\/p>\n\n\n\n

\n\n\n\n

Compliance – <\/strong> <\/h3>\n\n\n\n

Audit and Accountability controls are implemented to ensure compliance with the Texas Department of Information Resources (DIR) Security Control Standards Catalog as required by Title 1 Texas Administrative Code \u00a7202.76<\/a> and Texas A&M University System Regulation 29.01.03, Information Security<\/a>.\u00a0\u00a0\u00a0<\/p>\n\n\n\n

\n\n\n\n

Implementation – <\/strong> <\/h3>\n\n\n\n