SA-2 Allocation of Resources
Description
Resource allocation for information security includes funding for the initial information system or information system service acquisition and funding for the sustainment of the system/service.
Applicability
The University is responsible for ensuring that all requirements of this Control are satisfied.
Implementation
In accordance with Texas Administrative Code 202.70, Responsibilities of the Institution Head [TAC 202.70], TAMU-CC University is responsible for:
- Determines information security requirements for the information system or information system service in mission/business process planning;
- Determines, documents, and allocates the resources required to protect the information system or information system service as part of its capital planning and investment control process; and
- Establishes a discrete line item for information security in organizational programming and budgeting documentation.
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019