Skip to main content

Blocked Prohibited Technology Domains Control Standard

· 2 min read
Nick McLarty
Nick McLarty
Deputy Chief Information Security Officer
info

This control standard replaces the Blocked Countries standard that was implemented in May 2025.

In order to implement the requirements of the Texas Statewide Plan for Preventing Use of Prohibited Technology in State Agencies, the Texas A&M System has implemented a baseline minimum of blocked outbound domains. This baseline is reflected in the newly implemented system control standard SC-07(10). The baseline list of blocked domains is published by Texas Cyber Command and is available through the TX-ISAO Portal in SPECTRIM.

Any Texas A&M System networks that utilize the system-managed Cisco Umbrella service are already in compliance with this standard and will be automatically covered as this list is updated. Members may impose any additional outbound blocking rules either via Cisco Umbrella or other boundary protection systems as business needs dictate.

This update also supercedes system control standard SC-07(11). Inbound broad geography-based IP blocking is ineffective as a defense mechanism given the wide use of location masking infrastructure by malicious actors. Therefore, the system will no longer publish a Blocked Countries list as a required minimum for all members. However, blocking nuisance traffic origins can benefit network performance, and members may continue to implement any inbound blocking rules as they deem appropriate.