Shared Responsibility Model

The Enterprise Compute Environment follows a shared responsibility model, where both the technical management team and account owners contribute to maintaining a secure, compliant, and cost-effective environment. While the technical team provides the platform, tools, and governance, account owners are responsible for monitoring resource consumption, maintaining data security, applying patches, and adhering to university policies.

Key Responsibilities for Enterprise Compute Environment Account Holders

• Cost Management — Use Kion to track expenses, set up billing alerts, and review monthly charges.
• Data Management & Compliance — Classify data using the TAMU Data Classification Tool, implement appropriate backups, and provide necessary Data Use Agreements for Confidential or Critical data.
• Security & Configuration Controls — Follow TAMU Security Control CM-3, keep systems patched, and comply with all security protocols. Participate in annual risk assessments.
• Data Retention & Monitoring — Inform ECE-MT of specific data retention needs and use their support for compliance monitoring and change controls.
• HIPAA Compliance — If handling HIPAA-protected data, adhere to the Business Associate Agreement (BAA) and any additional requirements.

Next Steps

• Contact the technical team at enterprise-compute@tamu.edu to set up your consultation.
• Visit our FAQ page for additional information.

For more about Shared Responsibility Models, visit:
Understanding the Shared Responsibilities Model in Cloud Services (isaca.org)