Statement

WTAMU shall select a control baseline for Information Systems. The Control baseline shall be a sets of controls assembled to address the protection needs of a WTAMU. The default baseline for all WTAMU information system are those controls identified as required by Texas DIR and/or the Texas A&M University System for the impact level of the information system.

Applicability

This Control applies to all West Texas A&M information resources.

Implementation

Controls shall be chosen that satisfy mandates imposed by laws, executive orders, directives, regulations, policies, or standards issued by the State of Texas or Texas A&M University System.

WTAMU may employ standards for the cost-effective information security of information, information resources, and applications within or under University supervision that are more stringent than the standards defined in the Control Catalog if these standards:

• Contain at least the applicable standards issued by WTAMU
• Are consistent with applicable federal law, policies, and guidelines issued under state rule, industry standards, best practices, or deemed necessary to adequately protect the information held by the state agency.