Information Security Program Plan | PM-1

MCC Information Security Program and Plans

MCC recognizes that the information security program and plans are vital to reducing information security risks.

Purpose

The Information Security Program Plan is a formal document that provides an overview of the security requirements for the MCC information security program. This family of controls describes requirements related to the Information Security Program Plan.

Scope and Roles

This policy applies to information resources owned or managed by MCC. The intended audience includes the Cybersecurity Manager.

Compliance

The Information Security Program Plan and associated controls are implemented to ensure compliance with Title 1 Texas Administrative Code (TAC) §202.70, §202.71, §202.73, §202.74, Texas Government Code §2054.133, the Texas Department of Information Resources (DIR) Security Control Standards Catalog as required by TAC §202.76.

Implementation

The MCC Information Security Plan must be approved by the Chief Information Technology Officer, in accordance with TAC §202.73.

Last updated: 5/14/2026