Awareness and Training Policy and Procedures | AT-1

Security Awareness Training Policy

MCC recognizes that security awareness training policies and procedures are vital to reducing information security risks.

Purpose

The Security Awareness Training Policy and associated controls document the requirements for training users to understand their responsibilities under State law and System policy, and their role in protecting MCC Information Resources by reducing information security risks.

Scope and Roles

The intended audience includes the Cybersecurity Manager and all users of MCC Information Resources.

Compliance

The Security Awareness Training Policy and associated controls are implemented to ensure compliance with the Texas Department of Information Resources (DIR) Security Control Standards Catalog as required by Title 1 Texas Administrative Code §202.76, §202.74, Texas Government Code §2054.519, §2054.5191, and §2054.5192.

Implementation

The Cybersecurity Manager or their designee is responsible for ensuring that this policy and supporting procedures are periodically reviewed and updated.

Last updated: 5/13/2026