{"id":2517,"date":"2025-04-25T15:51:24","date_gmt":"2025-04-25T15:51:24","guid":{"rendered":"https:\/\/www.tarleton.edu\/technology\/?page_id=2517"},"modified":"2025-04-25T15:53:28","modified_gmt":"2025-04-25T15:53:28","slug":"tarleton-oits-email-use-standard","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/technology\/tarleton-oits-email-use-standard\/","title":{"rendered":"Tarleton OITS Email Use Standard"},"content":{"rendered":"\n
\n
\n

Tarleton Office of Innovative Technology Solutions (OITS)
Email Use Standard<\/h1>\n\n\n\n

Effective: February 11, 2020<\/p>\n\n\n\n

Revised:  April 25, 2025 <\/p>\n<\/div>\n\n\n\n

\n
\"The<\/figure>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\n
\n\n\n\n
<\/div>\n\n\n\n

Procedure Summary<\/strong> <\/h2>\n\n\n\n

Tarleton State University\u2019s (Tarleton or university) information resources are strategic assets which, as property of the State of Texas, must be managed as valuable state resources in accordance with Texas Government Code Chapter 2054<\/a>. Since a large portion of Tarleton business is conducted using email, it is important that email services function in an efficient and reliable manner. This standard, therefore, addresses expected standards for university email usage. <\/p>\n\n\n\n

\n

This standard provides information regarding the use of email through university owned information resources. The purpose of the implementation of this standard is to provide a set of measures that will mitigate information security risks associated with email use. There may also be other or additional measures that will provide appropriate mitigation of the risks. The assessment of potential risks and the application of appropriate mitigation measures are to be determined by the information resource owner or their designee. In accordance with Texas Administrative Code (TAC) Chapter 202 \u2010 Information Security Standards<\/a>, each department and\/or resource owner may elect not to implement some or all of the risk mitigation measures provided in this standard based on information security risk management decisions and business functions. Such risk management decisions must be documented and reported to the designated information security officer. <\/p>\n\n\n\n

This standard administrative procedure (SAP) applies to any Tarleton employee, third-party vendor, student, guest, or visitor that may use any university information resource that has the capacity to send, receive and\/or store email. <\/p>\n\n\n\n

Please see the Tarleton Security Controls Catalog, specifically the Access Control (AC)<\/a>, System and Communications Protection (SC)<\/a>, and Assessment, Authorization, and Monitoring (CA)<\/a> families, for additional information and requirements.<\/p>\n<\/div>\n\n\n\n

<\/div>\n\n\n\n

Procedures and Responsibilities<\/strong> <\/h2>\n\n\n\n