{"id":3225,"date":"2026-06-12T21:12:56","date_gmt":"2026-06-12T21:12:56","guid":{"rendered":"https:\/\/www.tarleton.edu\/technology\/?page_id=3225"},"modified":"2026-06-12T21:21:12","modified_gmt":"2026-06-12T21:21:12","slug":"tarleton-oits-use-of-peer-to-peer-sharing-software-standard","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/technology\/tarleton-oits-use-of-peer-to-peer-sharing-software-standard\/","title":{"rendered":"Tarleton OITS Use of Peer-to-Peer Sharing Software Standard"},"content":{"rendered":"\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-7387b849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<h1 class=\"wp-block-heading\">Tarleton Office of Innovative Technology Solutions (OITS) <br>Use of Peer-to-Peer Sharing Software Standard<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Effective: February 11, 2020<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Revised:&nbsp; June 12, 2026&nbsp;<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<figure class=\"wp-block-image alignright size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/www.tarleton.edu\/technology\/wp-content\/uploads\/sites\/170\/2021\/12\/Tarleton_TonTexas.svg\" alt=\"The Tarleton State University logo\" class=\"wp-image-670\" style=\"width:159px;height:auto\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator alignfull has-alpha-channel-opacity has-vivid-cyan-blue-to-vivid-purple-gradient-background has-background is-style-wide\" \/>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Procedure Summary<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This standard describes requirements related to the&nbsp;appropriate use&nbsp;of peer-to-peer (P2P) file- sharing software.&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tarleton State University\u2019s (Tarleton or university) information resources are strategic assets which, as property of the State of Texas, must be managed as valuable state resources in accordance with <a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm\">Texas Government Code Chapter 2054<\/a>. This standard applies to Tarleton information resources that store, process, or transmit mission critical and\/or confidential information.&nbsp;&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-group word-wrap: normal is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"wp-block-paragraph\">As an institution of higher education, Tarleton permits P2P software, as long as the software is appropriately licensed, and its use does not violate any university rules or standards, Texas A&amp;M university System (TAMUS) policies or regulations, or federal\/state laws. Generally, P2P software should be used only for legitimate university business. However, as with other software, brief and occasional personal use of P2P software is allowable. Use of P2P file sharing software may require special attention&nbsp;by&nbsp;individual users&nbsp;in order to&nbsp;prevent the unintended and inappropriate distribution of files. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The assessment of potential risks and the application of appropriate mitigation measures will be determined by the information resource owner or their designee. In accordance with <a href=\"https:\/\/texas-sos.appianportalsgov.com\/rules-and-meetings?chapter=202&amp;interface=VIEW_TAC&amp;part=10&amp;title=1\">Texas Administrative Code (TAC) Chapter 202 \u2010 Information Security Standards<\/a>, each department and\/or resource owner may elect not to implement some or all of the risk mitigation measures provided in this standard based on information security risk management decisions and business functions. Such risk management decisions must be documented and reported to the designated information security officer. This standard applies to the use of all P2P software\/information resources used on Tarleton assets\/devices, involving Tarleton information sharing, and\/or on any devices using the Tarleton network (even if on a personal device). This standard will apply equally to all individuals who&nbsp;utilize&nbsp;Tarleton devices and access Tarleton information resources, including the Tarleton network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Please see the <a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/\"><\/a><a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/system-and-services-acquisition-sa\/\">Tarleton Security Controls Catalog, specifically the System and Services Acquisition (SA) family<\/a>, specifically SA-8, Security and Privacy Engineering Principles, and SA-9, External System Services, for additional information and requirements.<\/p>\n<\/div>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Procedures and Responsibilities<\/strong>&nbsp;<\/h2>\n\n\n\n<ul class=\"wp-block-list its-nested-list\">\n<li>This standard applies to all individually or&nbsp;university owned&nbsp;computing systems attached to the Tarleton network. The intended audience includes all university network users.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Any university network user using P2P file sharing software should be thoroughly familiar with the proper use,&nbsp;options&nbsp;and default settings of the&nbsp;particular P2P&nbsp;program. The user must ensure that the P2P program configuration does not allow automatic\/unintended file sharing.&nbsp;<\/li>\n\n\n\n<li>Insecurely configured file sharing programs&nbsp;may be&nbsp;cause for removal of network access from the hosting computer. This includes, but is not limited to, Windows file sharing with no password and other systems with unauthenticated and\/or unrestricted uploading and\/or downloading capabilities.&nbsp;<\/li>\n\n\n\n<li>For instances in which the department is the owner-custodian or custodian of a system using P2P software, the department&nbsp;is responsible for&nbsp;ensuring compliance with this procedure.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Any violation or inappropriate use of P2P file sharing software shall be reported&nbsp;in accordance with&nbsp;the <a href=\"https:\/\/www.tarleton.edu\/technology\/tarleton-oits-electronic-information-resource-complaints-standard\/\">Tarleton Electronic Information Resource Complaints Standard<\/a>.&nbsp;<\/li>\n\n\n\n<li>The use of already available Tarleton P2P sharing software should be utilized when feasible and access for external users can be requested on a case-by-case basis depending on the business\/use case. External access for collaborators on Tarleton business can be requested through an ITS Service Desk ticket and reviewed by the applicable ITS team(s). External collaborators are expected to comply with the <a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/\">Tarleton Security Controls Catalog <\/a>requirements. <\/li>\n<\/ul>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Definitions<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Confidential Information<\/strong>: information that is excepted from disclosure requirements under the provisions of applicable state or federal law, e.g. the Texas Public Information Act.&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information Resources (IR)<\/strong>: the standards, equipment, and software that are designed, employed, operated, and maintained to collect, record, process, store, retrieve, display, and transmit information or data.&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information Security Officer (ISO) \/ Chief Information Security Officer (CISO)<\/strong>: responsible for administering the information security functions within the university and reports to the information resources manager (IRM).&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Owner of an Information Resource<\/strong>: an entity responsible for a business function and for determining controls and access to information resources supporting that business function.&nbsp;&nbsp;<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Related Statutes, Policies, or Requirements<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/policies.tamus.edu\/29-01.pdf\">TAMUS Policy 29.01, Information Resources<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"http:\/\/policies.tamus.edu\/29-01-02.pdf\">TAMUS Regulation 29.01.02, Use of Licensed Software<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"http:\/\/policies.tamus.edu\/29-01-03.pdf\">TAMUS Regulation 29.01.03, Information Security<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"http:\/\/policies.tamus.edu\/29-01-04.pdf\">TAMUS Regulation 29.01.04, Accessibility of Electronic and Information Resources<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"http:\/\/policies.tamus.edu\/29-01-05.pdf\">TAMUS Regulation 29.01.05, Artificial Intelligence<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"http:\/\/policies.tamus.edu\/29-01-06.pdf\">TAMUS Regulation 29.01.06, Covered Applications and Prohibited Technologies<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/policy\/wp-content\/uploads\/sites\/142\/2022\/06\/29_01_03_T0_01.pdf\">Tarleton SAP 29.01.03.T0.01, Information Resources &#8211; Acceptable Use<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/policy\/wp-content\/uploads\/sites\/142\/2022\/06\/29_01_99_t1.pdf\">Tarleton Rule 29.01.99.T1, Information Resources<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tarleton.edu\/security-controls-catalog\/\">Tarleton Security Controls Catalog<\/a><\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Contact Office<\/strong>&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Office of Innovative Technology Solutions&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AVP and CIO of Innovative Technology Solutions&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">254-459-5685&nbsp;<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Tarleton Office of Innovative Technology Solutions (OITS) Use of Peer-to-Peer Sharing Software Standard Effective: February 11, 2020 Revised:&nbsp; June 12, 2026&nbsp; Procedure Summary&nbsp; This standard describes requirements related to the&nbsp;appropriate &#8230;<\/p>\n","protected":false},"author":94,"featured_media":580,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-fullwidth.php","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","_wds_title":"","_wds_metadesc":"","_wds_focus-keywords":"","_wds_meta-robots-adv":"","_wds_meta-robots-noindex":false,"_wds_meta-robots-nofollow":false,"_wds_meta-robots-index":false,"_wds_meta-robots-follow":false,"_wds_autolinks-exclude":false,"_wds_canonical":"","_wds_redirect":"","_wds_opengraph":[],"_wds_twitter":[],"footnotes":""},"class_list":["post-3225","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/technology\/author\/jgeorge\/","display_name":"jgeorge"},"relative_dates":{"created":"Posted 3 days ago","modified":"Updated 3 days ago"},"absolute_dates":{"created":"Posted on June 12, 2026","modified":"Updated on June 12, 2026"},"absolute_dates_time":{"created":"Posted on June 12, 2026 9:12 pm","modified":"Updated on June 12, 2026 9:21 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/pages\/3225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/users\/94"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/comments?post=3225"}],"version-history":[{"count":4,"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/pages\/3225\/revisions"}],"predecessor-version":[{"id":3231,"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/pages\/3225\/revisions\/3231"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/technology\/wp-json\/wp\/v2\/media?parent=3225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}