Audit 12324

FY End
2023-06-30
Total Expended
$5.71M
Findings
12
Programs
5
Organization: Kirtland Community College (MI)
Year: 2023 Accepted: 2024-01-18

Organization Exclusion Status:

Checking exclusion status...

Findings

ID Ref Severity Repeat Requirement
8985 2023-001 Significant Deficiency - N
8986 2023-001 Significant Deficiency - N
8987 2023-001 Significant Deficiency - N
8988 2023-001 Significant Deficiency - N
8989 2023-001 Significant Deficiency - N
8990 2023-001 Significant Deficiency - N
585427 2023-001 Significant Deficiency - N
585428 2023-001 Significant Deficiency - N
585429 2023-001 Significant Deficiency - N
585430 2023-001 Significant Deficiency - N
585431 2023-001 Significant Deficiency - N
585432 2023-001 Significant Deficiency - N

Programs

ALN Program Spent Major Findings
84.268 Federal Direct Student Loans $2.98M Yes 1
84.063 Federal Pell Grant Program $2.27M Yes 1
84.048 Vocational Education - Basic Grants to States: Regional Allocation $277,937 - 0
84.007 Federal Supplemental Educational Opportunity Grants $148,915 Yes 1
84.033 Federal Work-Study Program $38,324 Yes 1

Contacts

Name Title Type
HVF5N3DLM457 Chris Bowman Auditee
9892755000 Joshua Sullivan, CPA Auditor
No contacts on file

Notes to SEFA

Title: 3. ADJUSTMENTS AND TRANSFERS Accounting Policies: The accompanying schedule of expenditures of federal awards (the "Schedule") includes the federal grant activity of Kirtland Community College (the "College") under programs of the federal government for the year ended June 30, 2023. The information in this Schedule is presented in accordance with the requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). Because the Schedule presents only a selected portion of the operations of the College, it is not intended to and does not present the financial position, changes in net position or cash flows of the College. Expenditures reported on the Schedule are reported on the accrual basis of accounting, which is described in Note 1 to the College's financial statements. Such expenditures are recognized following the cost principles contained in the Uniform Guidance or other applicable guidance, wherein certain types of expenditures are not allowable or are limited as to reimbursement. Negative amounts shown on the Schedule represent adjustments or credits made in the normal course of business to amounts reported as expenditures in prior years. Pass‐through entity identifying numbers are presented where available. De Minimis Rate Used: N Rate Explanation: For purposes of charging indirect costs to federal awards, the College has not elected to use the 10 percent de minimis cost rate as permitted by §200.414 of the Uniform Guidance. The College transferred $59,665 of the 2022‐2023 Federal Work‐Study Program (84.033) award to the Federal Supplemental Educational Opportunity Grant (84.007) award, which it expended in the 2022‐2023 award year.
Title: 4. PASS-THROUGH ENTITIES Accounting Policies: The accompanying schedule of expenditures of federal awards (the "Schedule") includes the federal grant activity of Kirtland Community College (the "College") under programs of the federal government for the year ended June 30, 2023. The information in this Schedule is presented in accordance with the requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). Because the Schedule presents only a selected portion of the operations of the College, it is not intended to and does not present the financial position, changes in net position or cash flows of the College. Expenditures reported on the Schedule are reported on the accrual basis of accounting, which is described in Note 1 to the College's financial statements. Such expenditures are recognized following the cost principles contained in the Uniform Guidance or other applicable guidance, wherein certain types of expenditures are not allowable or are limited as to reimbursement. Negative amounts shown on the Schedule represent adjustments or credits made in the normal course of business to amounts reported as expenditures in prior years. Pass‐through entity identifying numbers are presented where available. De Minimis Rate Used: N Rate Explanation: For purposes of charging indirect costs to federal awards, the College has not elected to use the 10 percent de minimis cost rate as permitted by §200.414 of the Uniform Guidance. The College receives certain federal grants as subawards from non‐federal entities. Pass‐through entities, where applicable, have been identified in the Schedule with an abbreviation, defined as follows: "See the Notes to the SEFA for chart/table".

Finding Details

Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.
Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Special Tests and Provisions). Program. Student Financial Assistance Cluster; U.S. Department of Education; Assistance Listing Numbers 84.007, 84.033, 84.063, and 84.268; Award Numbers P007A212026, P007A222026, P033A222026, P063P212898, and P063P222898. Criteria. The Federal Trade Commission (FTC) states that the Gramm Leach Bliley Act "requires financial institutions to explain their information‐sharing practices to their customers and safeguard sensitive data." Condition. The most recent Gramm Leach Bliley Policy fails to address the implementation of multi‐factor authentication for anyone accessing customer information on the institution's system. Cause. The College does not have a review process in place for ensuring all safeguard policies are met in the Gramm Leach Bliley Policy. Effect. As a result of this condition, the College isn't meeting the safeguard requirements necessary to comply with the FTC. In addition, the lack of safeguard controls creates an increased risk to highly sensitive data that is possessed by the College. Recommendation. We recommend that the College implement procedures to ensure that all Gramm Leach Bliley Policies are met and verified by a second individual.View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.