Section 1.08: Designation of High-Risk Travel Destinations

Section 1.08: Designation of High-Risk Travel Destinations

  1. Travel Risk Management Advisory Committee (TARMAC).
    1. The University shall establish a systemwide Travel and Risk Management Advisory Committee (TARMAC).
      1. TARMAC Responsibilities and Authorities.
        1. TARMAC has authority to designate High-Risk Destinations and set criteria used in designating High-Risk Destinations.
        2. High-Risk Destinations designated by TARMAC and/or High-Risk Designations meeting the criteria set by TARMAC shall have systemwide applicability.
        3. Each Campus/UMPO has the authority to designate additional High-Risk Destinations for applicability to their respective Campus/UMPO.
          1. Campuses may delegate this responsibility to the Campus Travel Risk Review Committee.
        4. Each Campus/UMPO has the authority to allow Travel to a High-Risk Destination when the campus Travel Risk Approver has approved such Travel. See Section 1.08(d).
        5. TARMAC does not have the authority to approve or deny requests for Travel to a High-Risk Destination; the authority to approve or deny requests to High-Risk Travel Destinations resides with the respective campus/UMPO Travel Risk Approver of Traveler.
        6. TARMAC may share travel risk information and resources among members.
      2. TARMAC Membership
        1. TARMAC membership at a minimum must include representatives from each of the following:
          1. Amherst Campus (2)
          2. Boston Campus (2)
          3. Dartmouth Campus (2)
          4. Lowell Campus (2)
          5. Chan Medical School Campus (2)
          6. UMPO - President’s Office Operations (1)
          7. UMPO - Office of the General Counsel (2)
          8. UMPO - Enterprise Risk Management (1)
          9. UITS Information Security (1)
          10. Campus CISO (1)
        2. Only members of Campus/UMPO Risk Review Committees can serve as their respective TARMAC Campus/UMPO representative.
        3. TARMAC membership shall designate a Chairperson.
        4. TARMAC shall designate a TARMAC member to be responsible for ensuring High Risk Destinations and associated criteria are made available to University Travelers.
        5. TARMAC shall meet quarterly.
          1. TARMAC may set an alternate schedule with agreement of a majority of the membership.
          2. As needed, TARMAC may request through the TARMAC Chairperson and at the TARMAC Chairperson’s discretion that TARMAC convene.
          3. The TARMAC Chairperson can add destinations to the High-Risk Destination list if such destinations objectively meet the criteria set forth by the TARMAC.
  2. Designation of High-Risk Destinations.
    1. TARMAC shall set criteria for designation of High-Risk Destinations.
      1. Criteria shall be made available to University Travelers.
    2. TARMAC, in consultation with UITS and Campus Chief Information Security Officers, shall set criteria for designation of Elevated Cyber Security Risk Destinations.
      1. Criteria shall be made available to University Travelers.
    3. Using designated criteria, TARMAC shall designate High-Risk Destinations and Elevated Cyber Security Risk Destinations.
      1. Information on such Destinations shall be made available to University Travelers.
  3. Campus Travel Risk Review Committee.
    1. Each Campus/UMPO shall designate a Campus Travel Risk Review Committee for the respective Campus/UMPO.
    2. Responsibilities and Authorities.
      1. Campus Travel Risk Review Committee is responsible for reviewing requests by prospective Traveler(s) from the respective Campus/UMPO for University Travel to or through High-Risk Destinations.
      2. Campus Travel Risk Review Committee is authorized to make recommendations to the Travel Risk Approver on the approval, denial or modifications to the requested Travel.
    3. Committee Membership.
      1. Each Campus/UMPO has the authority to designate the membership of their respective Campus Travel Risk Review Committee.
        1. Each Campus Travel Risk Review Committee should include at least three members.
          1. Each Campus/UMPO should ensure the membership of their respective Campus Travel Risk Review Committee includes individuals/disciplines that can address the risks specific to the respective Campus/UMPO.
        2. Each Campus/UMPO Travel Risk Review Committee may consult with additional subject matter experts from their respective Campus or with the TARMAC as the Campus deems appropriate.
  4. Campus Travel Risk Approver.
    1. Each Campus/UMPO shall designate a Travel Risk Approver to approve or deny Travel to High-Risk Destinations by their respective Campus/UMPO Travelers.
      1. A Campus/UMPO may delegate the role of the Travel Risk Approver to their respective Campus Travel Risk Review Committee.
    2. Role and Authorities of Travel Risk Approver.
      1. The Travel Risk Approver is authorized to approve, deny or require modifications to Travel to High-Risk Destinations.
      2. Travel Risk Approver should evaluate the recommendations of the Campus Travel Risk Review Committee prior to making a decision.
        1. In cases where an expedited decision is required because of extenuating circumstances which exclude convenience, the Travel Risk Approver may decide without first consulting the Travel Risk Review Committee.