Statement

WTAMU information systems must identify specific user actions that can be performed on the information asset without identification or authentication consistent with organizational mission and business functions.

Applicability

This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, custodians, and users of information resources.

Implementation

• WTAMU information systems shall require identification and authentication using University provided accounts prior to any actions being permitted.
• Any exceptions to the above should be documented and approved by the ISO prior to implementation.
• Public university websites and public kiosk where no need for individual accountability is necessary are excluded from these requirements.