Texas A&M University
Computer Security Policy

December 9, 1994

Table of Contents

• Introduction
• Computer Security Policy
  • Policy Applicability
  • Policy Statements
  • Policy Administration
  • Management Responsibility
  • Administrative Data Ownership
  • Non-Administrative Data Ownership
  • Data Owner Responsibilities
  • Data Custodian Responsibilities
  • Data User Responsibilities
  • Electronic Mail Privacy
  • Auditor Access
• Appendix A - Terms and Definitions
• Appendix B - Security Access Warning Message
• Appendix C - Password Management
  • Password Selection
  • Password Handling
• Appendix D - Disaster Recovery
  • Data Backup
  • Alternate Data Backup
  • Contingency Planning
• Appendix E - Personnel Security and Security Awareness
  • Employee Requirements
  • Positions in Sensitive Locations or of Special Trust or Responsibility
  • Security Awareness and Training
  • Acknowledgment of Rights and Responsibilities
  • Hiring and Termination Procedures
• Appendix F- FAMIS Security Statement of Responsibility (Omitted)
• Appendix G - SIMS Security Statement of Responsibility (Omitted)
• Appendix H- BPP Security Statement of Responsibility (Omitted)
• Appendix I - CIS Computer Ethics Statement (Omitted)
• Appendix J- Computer Security Rules, Regulations, and Laws
• Appendix K- Filing Complaints About Computer Generated Harassment or Discrimination
• Appendix L - Computer Application Development Controls
• Appendix M - Computer Security Policy Summary Statement