The Texas Department of Information Resources (department) adopts amendments to 1 TAC Chapter 202, §§202.2, 202.21, 202.23, 202.71, and 202.73, concerning Information Security Standards, to clarify and update the processes and policies of current practices. The rules are adopted without changes to the proposal as published in the November 20, 2015, issue of the Texas Register (40 TexReg 8078).

In 1 TAC §202.2, an exception was created for public junior colleges. This amendment is necessary to align the definition with Texas Government Code §2054.0075.

In 1 TAC §202.21(b)(4), department staff recommended amendments to language to clarify existing policies and best practices.

In 1 TAC §202.23(b)(1)(A), department staff added language specifying that reports made to the department must be in the form and manner specified by the department. The adopted language clarifies current policies and procedures.

In 1 TAC §202.71(b)(4), department staff recommended amendments to language to clarify existing policies and best practices.

In 1 TAC §202.73(b)(1)(A), department staff added language specifying that reports made to the department must be in the form and manner specified by the department. The adopted language clarifies current policies and procedures.

The changes to the chapter apply to state agencies, local government and institutions of higher education. The assessment of the impact of the proposed changes on institutions of higher education was prepared in consultation with the Information Technology Council for Higher Education in compliance with §2054.121(c), Texas Government Code.

Eddie Block, Chief Information Security Officer, has determined that during the first five-year period following the amendments to 1 TAC Chapter 202, §§202.2, 202.21, 202.23, 202.71, and 202.73, there will be no fiscal impact on state agencies, institutions of higher education and local governments.

Mr. Block has further determined that for each year of the first five years following the adoption of the amendments to 1 TAC Chapter 202, §§202.2, 202.21, 202.23, 202.71, and 202.73 there are no anticipated additional economic costs to persons or small businesses required to comply with the amended rules.

No comments were received in response to the notice of proposed rulemaking.

The amendments to existing rule are adopted pursuant to §2054.052(a), Texas Government Code, which authorizes the department to adopt rules as necessary to implement its responsibilities under Chapter 2054, Texas Government Code; and §2059.053, Texas Government Code, which authorizes the department to adopt rules related to network security.

No other code, article or statute is affected by this adoption.