Skip to main content

PM-6 Information Security Measures of Performance

Description​

Information Security Measures of Performance include assessments of risk, identification of corrective actions, and mitigation efforts to secure University information resources.

Applicability​

  • Texas Administrative Code Chapter202 assigns responsibility for the protection of information resources to the President of the University. For the purposes of this Control, the authority and responsibility regarding the university’s compliance with TAC 202 have been delegated by the President to the Chief Information Officer (CIO).

Implementation​

  • 1The CIO or designee shall develop, monitor, and report on the results of information security measures of performance within:

    • 1.1The annual Risk Management Plan required in Standard Administrative Procedure 29.01.03.M0.01, Security of Electronic Information Resources; and
    • 1.2The biennial review of the University’s information security program for compliance with Texas Administrative Code, Chapter 202 (See Control CA-2).