{"id":3219,"date":"2026-06-01T21:44:37","date_gmt":"2026-06-01T21:44:37","guid":{"rendered":"https:\/\/www.tarleton.edu\/technology\/?page_id=3219"},"modified":"2026-06-01T21:44:38","modified_gmt":"2026-06-01T21:44:38","slug":"tarleton-oits-server-hardening-standard","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/technology\/tarleton-oits-server-hardening-standard\/","title":{"rendered":"Tarleton OITS Server Hardening Standard"},"content":{"rendered":"\n
\n
\n

Tarleton Office of Innovative Technology Solutions (OITS)
Server Hardening Standard<\/h1>\n\n\n\n

Effective: February 11, 2020<\/p>\n\n\n\n

Revised:\u00a0 June 1, 2026\u00a0<\/p>\n<\/div>\n\n\n\n

\n
\"The<\/figure>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\n
\n\n\n\n
<\/div>\n\n\n\n

Procedure Summary<\/strong> <\/h2>\n\n\n\n

Servers are relied upon to deliver data in a secure, reliable fashion. There must be assurance that data integrity,\u00a0confidentiality\u00a0and availability are\u00a0maintained. One of the required steps to\u00a0attain\u00a0this assurance is to ensure that the servers are installed and\u00a0maintained\u00a0in a manner that prevents unauthorized access, unauthorized use, and disruptions in service.\u00a0\u00a0\u00a0\u00a0<\/p>\n\n\n\n

Tarleton State University\u2019s (Tarleton or university) information resources are strategic assets which, as property of the State of Texas, must be managed as valuable state resources in accordance with Texas Government Code Chapter 2054<\/a>. <\/p>\n\n\n\n

\n

The purpose of this standard is to describe the requirements for installing a new server in a secure fashion and\u00a0maintaining\u00a0the integrity of the server and application software. In addition, this standard provides a set of measures that will mitigate information security risks associated with server hardening.\u00a0The assessment of potential risks and the application of appropriate mitigation measures will be determined by the information resource owner or their designee. In accordance with Texas Administrative Code (TAC) Chapter 202 \u2010 Information Security Standards<\/a>, each department and\/or resource owner may elect not to implement some or all of the risk mitigation measures provided in this standard based on information security risk management decisions and business functions. Such risk management decisions must be documented and reported to the designated information security officer. The intended audience includes, but is not limited to, computing system managers and administrators who manage university information resources that store or process mission critical and\/or confidential information.\u00a0\u00a0\u00a0<\/p>\n\n\n\n

Please see the <\/a>Tarleton Security Controls Catalog<\/a>, for additional information and requirements.<\/p>\n<\/div>\n\n\n\n

<\/div>\n\n\n\n

Procedures and Responsibilities<\/strong> <\/h2>\n\n\n\n