Cybersecurity Controls Standards Catalog

The Texas A&M University-Corpus Christi (TAMU-CC) Cybersecurity Controls Standards Catalog establishes the minimum standards and controls for university information security in accordance with the state's Information Security Standards for Institutions of Higher Education found in Title 1, Chapter 202, Texas Administrative Code (TAC 202).

The purpose of this Controls Catalog is to provide TAMU-CC information owners and users with specific guidance for implementing security controls conforming to security control standards currently required in the Texas Department of Information Resources (DIR) Security Control Standards Catalog, Version 1.3.

Each control group is organized under its two-letter group identification code and title, and adopts the numbering format of the DIR Security Control Standards Catalog.

Revision History

Last Updated: February 21, 2025

Previous Versions:

  • June 29, 2023
  • May 31, 2022
  • March 25, 2021
  • September 16, 2019

Exceptions

The information resource owner is responsible for ensuring that the protection measures in the Cybersecurity Controls Standards Catalog are implemented. Based on risk management considerations and business functions, the information resource owner may request to exclude certain protection measures mandated by a control in favor of an alternate mitigation.

Use the IT Policy Exception Request form to request an exception to any security control. Once submitted and processed by the Office of Information Security, an approval or denial will be submitted back to the requestor.