Texas Executive Order GA-48 mandates that public institutions of higher education, including the University of Texas at San Antonio (UTSA), implement specific cybersecurity measures to protect infrastructure from foreign threats. The directive requires agencies to prohibit the use of prohibited technologies—specifically those linked to countries identified as security risks—on state-issued devices and networks to ensure the integrity of sensitive data.
What Is Texas Executive Order GA-48?
Governor Greg Abbott issued Executive Order GA-48 in December 2022 to address growing concerns regarding cybersecurity risks posed by foreign-owned software and hardware. According to the Office of the Texas Governor, the order specifically targets platforms that harvest significant amounts of data, such as TikTok, which is owned by the Chinese company ByteDance Ltd.
The order requires state agencies to:
- Prohibit the download or use of prohibited technologies on any state-issued device.
- Implement network-based restrictions to prevent the use of these platforms on agency-provided internet services.
- Develop and implement policies to ensure ongoing compliance with these security standards.
How Does This Affect UTSA Infrastructure?
As a component of the University of Texas System, UTSA must adhere to state-level cybersecurity directives. The implementation of GA-48 means that the university’s IT department is tasked with maintaining the security of institutional infrastructure by restricting access to software or applications deemed a security threat by the Texas Department of Public Safety (DPS) and the Texas Department of Information Resources (DIR).
According to UTSA’s official information security policies, these measures are part of a broader effort to safeguard research data, student records, and administrative communications. Users on the UTSA network may find that certain applications or websites are blocked when using university-managed Wi-Fi or hardware.
Why Cybersecurity Compliance Matters for Universities
Public universities are prime targets for cyber espionage due to the vast amounts of intellectual property, sensitive research, and personal data they hold. Following the implementation of GA-48, the Texas Department of Information Resources released a model security plan to assist agencies in identifying high-risk software.
This approach contrasts with earlier, less restrictive policies where individual departments often managed their own software approvals. By centralizing these prohibitions under the authority of the Governor’s office, the state aims to create a uniform defense perimeter. For students and faculty at UTSA, this means that personal devices used on campus may be subject to different rules than university-issued laptops, which are strictly governed by these state mandates.
Compliance and Future Security Measures
UTSA continues to update its internal policies to align with evolving state guidance. Members of the university community are encouraged to review the UTSA Office of Information Security website for the most current list of restricted applications and guidance on securing personal devices.
Failure to comply with these directives can lead to the revocation of network access or other disciplinary actions, as the university is legally required to verify the integrity of its infrastructure under Texas law. As the threat landscape shifts, the university’s IT teams are expected to remain in constant communication with state regulators to adjust security protocols accordingly.
Related reading