PL-11: Baseline Tailoring

NIST Baseline: Low

The agency head may employ standards for the cost-effective information security of information, information resources, and applications within or under the supervision of that state agency that are more stringent than the standards the Texas Department of Information Resources (DIR) prescribes under this section if the more stringent standards:
- Contain at least the applicable standards issued by the department; and/or
- Are consistent with applicable federal law, policies, and guidelines issued under state rule, industry standards, best practices, or deemed necessary to adequately protect the information held by the state agency.