FAC Explorer

Audit 290312

FY End
2023-06-30
Total Expended
$2.19M
Findings
8
Programs
4
Organization: University of Saint Katherine (CA)
Year: 2023 Accepted: 2024-02-13
Auditor: Capincrouse LLP

Organization Exclusion Status:

Findings

ID Ref Severity Repeat Requirement
367192 2023-001 Significant Deficiency - N
367193 2023-001 Significant Deficiency - N
367194 2023-001 Significant Deficiency - N
367195 2023-001 Significant Deficiency - N
943634 2023-001 Significant Deficiency - N
943635 2023-001 Significant Deficiency - N
943636 2023-001 Significant Deficiency - N
943637 2023-001 Significant Deficiency - N

Programs

ALN Program Spent Major Findings
84.268 Federal Direct Student Loans $1.75M Yes 1
84.063 Federal Pell Grant Program $398,511 Yes 1
84.007 Federal Supplemental Educational Opportunity Grants $22,720 Yes 1
84.033 Federal Work-Study Program $19,552 Yes 1

Contacts

Name Title Type
TY42GFJRC5Q6 Laurel Maguire Auditee
7604711316 Christopher Gordon, CPA Auditor
No contacts on file

Notes to SEFA

Title: RELATIONSHIP TO FINANCIAL STATEMENTS Accounting Policies: The accompanying schedule of expenditures of federal awards (the schedule) includes the federal grant activity of University of Saint Katherine (University) under programs of the federal government for the year ending June 30, 2023. The information in the schedule is presented in accordance with the requirements of the Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). Therefore, some amounts presented in the schedule may differ from amounts presented in, or used in the preparation of, the basic financial statements. Expenditures in the schedule are reported on the accrual basis of accounting. Such expenditures are recognized following the cost principles contained in the Uniform Guidance, wherein certain types of expenditures are not allowable or are limited as to reimbursement. Negative amounts shown on the schedule represent adjustments or credits made in the normal course of business to amounts reported as expenditures in prior years. If the University is required to match certain federal assistance, as defined by the grant agreements, no such matching has been included as expenditures in the schedule. De Minimis Rate Used: N Rate Explanation: The auditee did not use the de minimis cost rate See the Notes to the SEFA for chart/table
Title: SUBRECIPIENTS, NON-CASH ASSISTANCE, FEDERAL INSURANCE, LOANS, AND LOAN GUARANTEES Accounting Policies: The accompanying schedule of expenditures of federal awards (the schedule) includes the federal grant activity of University of Saint Katherine (University) under programs of the federal government for the year ending June 30, 2023. The information in the schedule is presented in accordance with the requirements of the Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). Therefore, some amounts presented in the schedule may differ from amounts presented in, or used in the preparation of, the basic financial statements. Expenditures in the schedule are reported on the accrual basis of accounting. Such expenditures are recognized following the cost principles contained in the Uniform Guidance, wherein certain types of expenditures are not allowable or are limited as to reimbursement. Negative amounts shown on the schedule represent adjustments or credits made in the normal course of business to amounts reported as expenditures in prior years. If the University is required to match certain federal assistance, as defined by the grant agreements, no such matching has been included as expenditures in the schedule. De Minimis Rate Used: N Rate Explanation: The auditee did not use the de minimis cost rate The University did not provide any federal funds to subrecipients nor did they receive any federal non-cash assistance, insurance, loans, or loan guarantees.

Finding Details

Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.
Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.
Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.
Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.
Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.
Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.
Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.
Finding 2023-001
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency DEPARTMENT OF EDUCATION ALN #: 84.268, 84.063, 84.007, and 84.033 Federal Award Identification #: 2022-2023 Financial Aid Year Condition: The University did not sufficiently comply with the updated requirements of GLBA. Criteria: 16 CFR 314.4 Questioned Costs: $0 Context: The University has not sufficiently documented its security risk assessment and safeguards, including data retention and deletion, implemented internal vulnerability scanning or sufficient vendor management policies and reviews. Additionally, the University has not implemented policies and procedures that support employee training, awareness, and skills, or provided a written, annual report to the board that includes all required areas based on the updated regulations. Cause: The University has limited resources and has allocated certain staff time and dollars as available to address and document compliance with the requirements of GLBA. Effect: The University has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks. Identification as repeat finding, if applicable: Not applicable Recommendation: We commend the University for the work completed on GLBA. We recommend the University continue to allocate sufficient resources to address the remaining requirements of GLBA. Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.