Skip to main content

PL-1 Security Planning Policy and Procedures

Description​

The university develops, disseminates, and periodically reviews/updates formal, documented procedures to facilitate the implementation of the Security Planning policy and associated Security Planning controls.

Applicability​

  • This control applies to the university Chief Information Security Officer (CISO).

Implementation​

  • 1As specified in Texas Administrative Code §202.73(a), the university CISO shall report annually to the President on the adequacy and effectiveness of information security policies, procedures, and compliance with Texas Administrative Code, Chapter 202 and:

    • 1.1Effectiveness of current information security program and status of key initiatives;
    • 1.2Residual risks identified by the university risk management process; and
    • 1.3University security requirements and requests.