{"id":3209,"date":"2026-05-29T17:23:56","date_gmt":"2026-05-29T17:23:56","guid":{"rendered":"https:\/\/www.tarleton.edu\/technology\/?page_id=3209"},"modified":"2026-05-29T17:27:40","modified_gmt":"2026-05-29T17:27:40","slug":"tarleton-oits-security-awareness-and-training-standard","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/technology\/tarleton-oits-security-awareness-and-training-standard\/","title":{"rendered":"Tarleton OITS Security Awareness Training Standard"},"content":{"rendered":"\n
\n
\n

Tarleton Office of Innovative Technology Solutions (OITS)
Security Awareness Training Standard<\/h1>\n\n\n\n

Effective: February 11, 2020<\/p>\n\n\n\n

Revised:  May 29, 2026 <\/p>\n<\/div>\n\n\n\n

\n
\"The<\/figure>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\n
\n\n\n\n
<\/div>\n\n\n\n

Procedure Summary<\/strong> <\/h2>\n\n\n\n

Understanding the importance of information security and individual responsibilities and accountability pertaining to information security are paramount to achieving organization security goals. This can be accomplished with a combination of general information security awareness training and targeted, product-specific training. The security awareness and training information should to be ongoing and updated as needed.  <\/p>\n\n\n\n

Tarleton information resources are strategic assets which, as property of the State of Texas, must be managed as valuable state resources in accordance with Texas Government Code Chapter 2054<\/a>. The purpose of this standard is to describe the requirements for ensuring that each user of university information resources receives adequate training related to information security issues. This standard applies to all users of Tarleton State University information resources, including, but not limited to: full-time employees (faculty and staff), student workers, third-party contractors, vendors, Tarleton Today teachers, etc.. <\/p>\n\n\n\n

\n

The assessment of potential risks and the application of appropriate mitigation measures will be determined by the information resource owner or their designee. In accordance with Texas Administrative Code (TAC) Chapter 202 \u2010 Information Security Standards<\/a>, each department and\/or resource owner may elect not to implement some or all of the risk mitigation measures provided in this standard based on information security risk management decisions and business functions. Such risk management decisions must be documented and reported to the designated information security officer.<\/p>\n\n\n\n

Please see the <\/a>Tarleton Security Controls Catalog, specifically the Awareness and Training (AT) family<\/a>, for additional information and requirements.<\/p>\n<\/div>\n\n\n\n

<\/div>\n\n\n\n

Procedures and Responsibilities<\/strong> <\/h2>\n\n\n\n