Description

The University determines, documents, and allocates as part of its capital planning and investment control process, the resources required to adequately protect information resources.

Applicability

  • The University is responsible for ensuring that all requirements of this Control are satisfied.

Implementation

  • 1

    In accordance with Texas Administrative Code ยง202.70, the University is responsible for:

    • 1.1

      Determining information security requirements for information resources or service in the business process planning;

    • 1.2

      Determining, documenting, and allocating the resources required to protect information resources or services as part of the capital planning and investment control process: and

    • 1.3

      Establishing a discrete line item for information security in university programming and budgeting documentation.