Physical and Environmental Protection Policy and Procedures | PE-1

Physical & Environmental Protection Policy

MCC recognizes that physical and environmental protection policies and procedures are vital to reducing information security risks.

Purpose

MCC information resource facilities include data centers, and server rooms.

The Physical and Environmental Protection Policy and associated controls describe the requirements for managing risks associated with physical access to these facilities.

Scope and Roles

This policy applies to information resources owned or managed by MCC. The intended audience includes the Cybersecurity Manager, Information Resource Owners and Custodians.

Compliance

Physical and Environmental Protection controls are implemented to ensure compliance with the Texas Department of Information Resources (DIR) Security Control Standards Catalog as required by Title 1 Texas Administrative Code §202.76.

Implementation

• The Cybersecurity Manager of their designee is responsible for ensuring that this policy and supporting procedures are periodically reviewed and updated. 

Last updated: 5/27/2026