PVFA Research & Institute Technology Control Plan Overview (PVFA_RITCP)
A Research & Institute Technology Control Plan (RITCP) is a formalized process we have for PVFA Researchers. It is designed to empower researchers to have the necessary flexibility to conduct thier research while documenting compliance with TAMU, State and Federal policies and procedures. Our process is modeled after a Technology Control Plan which is required for CUI Research Projects.
General Information
Scope
Only Devices that are 100% dedicated to your research program or institute can be added to a TCP. Your office computer that supports the academic function of your job is not eligible for this process.
Process
At the beginning of each fiscal year each Principal Investigator will be sent a laserfiche form to fill out on behalf of your Research Group which walks you through the process for that fiscal year.
We strongly suggest setting up a meeting with us so we can discuss the process/options in more detail and answer any questions/concerns you may have
1. The first choice is how you want your Research Program managed, you have the following overall plan choices:
- TechnologyServices - PVFA Operated TCP
- Shared - R/I Operated TCP
- Shared - 3rd-party-partner Operated TCP
2. Answer the subsequent questions and provide supplimental documentation to complete form
3. Your plan will be routed to Technology Services - PVFA to review the Technical Components of the plan
- Your request may be routed back to you if additional information is needed
4. Your plan will be routed to your Section Chair to review the Business Justification need and give final Approval
5. Once approved you will receive a final notice from laserfiche for your records
Plan Details
TechnologyServices - PVFA Operated TCP
This is the default plan all assets start under until one of the other plans are chosen.
Under this arrangement, management is performed entirely by PVFA IT staff according to existing academic policies and procedures, offering the path of least resistance for conducting your research. The primary benefits include zero effort required by you and turnkey compliance, as Technology Services handles all configurations, patching, and system updates to guarantee full alignment with institutional security controls. Furthermore, standard support from a dedicated IT team significantly reduces the administrative and technical burden on the researcher.
However, this convenience comes at the cost of flexibility. To maintain this environment, researchers must adhere to standardization, utilizing only supported OS versions and hardware models that fit within the existing PVFA IT infrastructure. Additionally, governance is more rigid, and users operate with restricted access, typically utilizing Just-In-Time admin rights with minimal control over underlying system-level settings.
The Operating Procedures outline how Technology Services-PVFA manages college infrastructure and services.
Make sure you Read and Understand the Roles and Responsibilities (RACI) for this plan: TechnologyServices-PVFA RACI
Shared - R/I Operated TCP
By choosing this option, the Researcher or Institute group gains full control over their entire technological environment, including custom workstations, servers, and software. This path offers the maximum freedom of total customization, allowing you to utilize your preferred OS and specialized hardware while maintaining root access to tune and optimize the setup for specific research needs. Furthermore, it enables rapid deployment, as equipment is delivered directly to you upon approval, allowing you to begin work immediately without waiting for Technology Services intervention.
However, this autonomy shifts the significant management burden from the institution to the individual. Because Technology Services provides limited support, you must be prepared to troubleshoot your own systems and manage all technical documentation independently. Most importantly, you assume sole responsibility for compliance and security, which includes ensuring the environment meets all university policies and performing a mandatory annual risk assessment.
Enforcement
Coming soon Details here about what we do when PI does not complete remediations in a timely manner.
Make sure you Read and Understand the Roles and Responsibilities (RACI) for this plan: TechnologyServices-PVFA RACI
Shared - 3rd-party-partner Operated TCP
Through this collaborative approach, your group will consult with Technology Services-PVFA and a third-party vendor to develop a custom-tailored plan specifically designed for your research requirements. This path offers a highly innovative way to facilitate your work, providing specialized support and professional expertise that is fine-tuned to your unique goals. Because the model is fully expandable, it can accommodate a wide range of advanced requests, including custom software development, unique configurations or accessibility documentation.
While highly effective, this option involves a direct cost as a paid service and requires consistent interaction, as you must remain involved in the process to set the strategic direction and monitor the vendor's output. Additionally, the success of this model depends on maintaining a clear partnership between your research team, Technology Services and the external consultants to ensure all institutional standards are met.
Make sure you Read and Understand the Roles and Responsibilities (RACI) for this plan: TechnologyServices-PVFA RACI