Statement

The University has long-term and short-term planning initiatives in place to adequately ensure information security and data privacy is a top priority.

Applicability

This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, custodians, and users of information resources.

Implementation

The CIO is responsible for budgeting and capital planning for information technology, which will include allocating proper resources for information security and data privacy. The information security officer and/or the data privacy officer will prepare requests for new services or products based on risk management decisions and forward them to the CIO for consideration and/or approvals.