Country-Based Access Restriction Procedures

Objective:

The purpose of this procedure is to restrict access to Texas State Technical College (TSTC) resources based on geographic locations to enhance security measures and safeguard sensitive information.

Scope:

This procedure applies to all employees, contractors, vendors, students, and any other entities requiring access to Texas State Technical College (TSTC) resources from foreign countries.

Standard Statements:

Country Access Restriction: Access to Texas State Technical College (TSTC) resources from foreign countries is restricted by default. Only authorized countries, as per this procedure, will be granted access.

Authorized Countries: Access to Texas State Technical College (TSTC) resources from countries outside the authorized list requires either:

  • A valid and approved vendor contract that explicitly permits access from the respective foreign country.

  • Active military personnel, duly identified and authorized, who need access for official purposes.

Approval Process:

  • Requests for access from non-authorized countries must be submitted to the Office of Information Technology.

    • Requests should include the rationale, specific requirements, and duration of access needed.

    • Approval for access will be evaluated on a case-by-case basis by designated personnel.

Monitoring and Compliance:

  • The Security or IT department will monitor access logs regularly to ensure compliance with this procedure.

  • Any unauthorized access attempts will be promptly investigated, and appropriate actions will be taken.

Exceptions:

  • Exceptions to this procedure may be granted in exceptional circumstances, subject to approval by senior management from the Office of Information Technology.

Review and Updates:

This procedure will be reviewed periodically, at least biennially, to ensure its effectiveness and relevance.

Updates or modifications to this procedure will be made as necessary to address evolving security risks or changes in business requirements.

Responsibilities:

The Security or IT department is responsible for implementing and enforcing this procedure.

Enforcement:
Failure to comply with this procedure may result in actions taken pursuant to Statewide Operating Standard HR 2.4.1 Employee Corrective Action (Disciplinary Action)

Print Article