PL-4: Rules of Behavior

NIST Baseline:  Low 

Privacy Baseline:  Yes 

DIR Required By:  07/20/2023 

TAMUS Required By: 08/01/2022 

Review Date:  07/31/2024 

  • Use of Tarleton State University (Tarleton) resources is documented in Tarleton Standard Administrative Procedure 29.01.03.T0.01, Information Resources – Acceptable Use and in the Texas A&M System Member Data Use Agreement, which is acknowledged upon completion of the required Information Security Awareness Training course (see Control AT-1, Security Awareness and Training Policy and Procedures), both describe individual responsibilities and expected behavior regarding information resource usage for all authorized users. 
  • Information resource owners, information resource custodians, and/or designees are responsible for ensuring that all individuals needing access to information resources acknowledge that they have read, understand, and agree to abide by the rules of behavior prior to granting them access to information resources. 
  • Tarleton’s Chief Information Security Officer (CISO) is responsible for helping ensure that content regarding rules of behavior is included in the Tarleton Standard Administrative Procedure (SAP) 29.01.03.T0.01, Information Resources – Acceptable Use and that this SAP is updated as needed. 
  • The content in the Security Awareness Training shall be reviewed and updated as appropriate by Texas A&M University System (TAMUS).   
    • Any changes affecting the Texas A&M System Member Data Use Agreement acknowledged at the end of the Security Awareness Training must be read and re-acknowledged by all users, as applicable. 
    • Renewal of Security Awareness Training is required annually of all Tarleton employees and contractors/third-party vendors, which includes the re-acknowledgment of the Texas A&M System Member Data Use Agreement.  Any exceptions to completing this required training in lieu of an alternative/comparable training must be approved by Tarleton’s CISO to ensure proper acknowledgement of the rules of behavior is obtained (See Control AT-2, Literacy Training and Awareness). 

References/Additional Resources

1 TAC § 202.22(a)(3)   

1 TAC § 202.72(a)(3)  

Section 2054.5191, Government Code 

Texas A&M System Member Data Use Agreement 

Tarleton SAP 29.01.03.T0.01, Information Resources – Acceptable Use