SI-5: Security Alerts, Advisories, and Directives

NIST Baseline: Low 

DIR Required By:  01/20/2023 

Review Date:  08/22/2024 

  • The Tarleton State University (Tarleton) Chief Information Security Officer (CISO), or designee, is responsible for: 
    • Receiving IT security alerts and advisories from established information security resources (both internal and external sources) on an ongoing basis; 
    • Identifying and evaluating alerts and advisories for reporting security threats that may impact the university; 
    • Communicating internal security alerts, advisories, and directives as deemed necessary; 
    • Determining required response activities with established time frames that shall be specified in a directive to units; and 
    • Ensuring appropriate action, as specified in a directive, is completed by the applicable Office of Innovative Technology (OITS) staff in response to a directive. 

References/Additional Resources

SP 800-40 

1 TAC § 202.23(b)  

1 TAC § 202.73(b)  

Section 512.053, Business and Commerce Code