2023-002 Material Weakness: Gramm-Leach-Bliley Act (GLBA) (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268)
Criteria: In accordance with 16 CFR 314.4, a University shall develop, implement, and maintain a comprehensive information security program that is written in one or more readily accessible parts and contains administrative, technical, and physical safeguards that are appropriate to your size and complexity, the nature and scope of your activities, and the sensitivity of any customer information at issue and must contain all of the elements that are further described in 16 CFR 314.4.
Statement of Condition: During the 2023 audit, it was noted that the University’s Gramm-Leach-Bliley Act Policy did not fully address all of the requirements as described by 16 CFR 314.4. In addition, the application of the comprehensive information security program was not effectively administered by the University for the 2023 year.
Questioned Costs: Such information is not applicable for this finding since it is nonmonetary in nature.
Perspective Information: The 2023 audit included testing of the University’s Gramm-Leach-Bliley Act Policy as outlined in Part 5 of the Compliance Supplement including the application of this program for the year.
Cause and Effect: Due to oversight by the director of the program, the GLBA policy was not reviewed and updated for changes to the program as required by the Compliance Supplement.
Recommendation: The University should update their Gramm-Leach-Bliley Act Policy to be in accordance with the requirements and put in place effective controls and practices to ensure the policy is monitored in a way to ensure it is administered effectively.
View of Responsible Officials:
The University concurs with this finding. The University has begun the process of updating policies and procedures to comply with all of the latest GLBA policies. The university is currently in the process of finishing the risk assessment and will update all applicable policies and procedures to align with the GLBA requirements.
2023-003 Significant Deficiency: National Student Loan Data System (NSLDS) Report (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268 and Federal Pell Grant Program, ALN #84.063) (Repeat finding of 2022-001)
Criteria: In accordance with 34 CFR 685.309(b) and 34 CFR section 690.83(b)(2), for Direct Loans and Pell grants, respectively, once the Enrollment Reporting roster file is received from the NSLDS, the institution must update the Enrollment Reporting roster file for changes in student status, report the date the enrollment status was effective, enter the new anticipated completion date, and submit the changes to NSLDS.
Statement of Condition: During the audit, it was noted that the University incorrectly reported student enrollment status for changes in enrollment.
Questioned Costs: Such information is not applicable for this finding since it is nonmonetary in nature.
Perspective Information: The audit included a detailed testing of 40 student files, of which this significant deficiency applies to 12, indicating an error rate of 30.00%.
Cause and Effect: Due to lapses in communication between departments, in certain instances, the University failed to provide NSLDS with accurate updates to student enrollment statuses, resulting in misrepresentation within the NSLDS system.
Recommendation: The University should ensure that the correct enrollment status is reported to NSLDS.
View of Responsible Officials:
The University concurs with this finding. Student enrollment status is pulled monthly into a report and submitted to clearinghouse out of Colleague. The failure of the system to pull the correct enrollment status for changes in enrollment is noted and the Director of Financial Aid and the Registrar of the university will work in conjecture to determine why the report that pulls out of the system is not pulling accurate student enrollment status for changes in enrollment. Once fixed, we will continue to monitor by pulling a list of random sampling of students out of each monthly report to ensure that enrollment status is being reported correctly.
2023-003 Significant Deficiency: National Student Loan Data System (NSLDS) Report (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268 and Federal Pell Grant Program, ALN #84.063) (Repeat finding of 2022-001)
Criteria: In accordance with 34 CFR 685.309(b) and 34 CFR section 690.83(b)(2), for Direct Loans and Pell grants, respectively, once the Enrollment Reporting roster file is received from the NSLDS, the institution must update the Enrollment Reporting roster file for changes in student status, report the date the enrollment status was effective, enter the new anticipated completion date, and submit the changes to NSLDS.
Statement of Condition: During the audit, it was noted that the University incorrectly reported student enrollment status for changes in enrollment.
Questioned Costs: Such information is not applicable for this finding since it is nonmonetary in nature.
Perspective Information: The audit included a detailed testing of 40 student files, of which this significant deficiency applies to 12, indicating an error rate of 30.00%.
Cause and Effect: Due to lapses in communication between departments, in certain instances, the University failed to provide NSLDS with accurate updates to student enrollment statuses, resulting in misrepresentation within the NSLDS system.
Recommendation: The University should ensure that the correct enrollment status is reported to NSLDS.
View of Responsible Officials:
The University concurs with this finding. Student enrollment status is pulled monthly into a report and submitted to clearinghouse out of Colleague. The failure of the system to pull the correct enrollment status for changes in enrollment is noted and the Director of Financial Aid and the Registrar of the university will work in conjecture to determine why the report that pulls out of the system is not pulling accurate student enrollment status for changes in enrollment. Once fixed, we will continue to monitor by pulling a list of random sampling of students out of each monthly report to ensure that enrollment status is being reported correctly.
2023-002 Material Weakness: Gramm-Leach-Bliley Act (GLBA) (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268)
Criteria: In accordance with 16 CFR 314.4, a University shall develop, implement, and maintain a comprehensive information security program that is written in one or more readily accessible parts and contains administrative, technical, and physical safeguards that are appropriate to your size and complexity, the nature and scope of your activities, and the sensitivity of any customer information at issue and must contain all of the elements that are further described in 16 CFR 314.4.
Statement of Condition: During the 2023 audit, it was noted that the University’s Gramm-Leach-Bliley Act Policy did not fully address all of the requirements as described by 16 CFR 314.4. In addition, the application of the comprehensive information security program was not effectively administered by the University for the 2023 year.
Questioned Costs: Such information is not applicable for this finding since it is nonmonetary in nature.
Perspective Information: The 2023 audit included testing of the University’s Gramm-Leach-Bliley Act Policy as outlined in Part 5 of the Compliance Supplement including the application of this program for the year.
Cause and Effect: Due to oversight by the director of the program, the GLBA policy was not reviewed and updated for changes to the program as required by the Compliance Supplement.
Recommendation: The University should update their Gramm-Leach-Bliley Act Policy to be in accordance with the requirements and put in place effective controls and practices to ensure the policy is monitored in a way to ensure it is administered effectively.
View of Responsible Officials:
The University concurs with this finding. The University has begun the process of updating policies and procedures to comply with all of the latest GLBA policies. The university is currently in the process of finishing the risk assessment and will update all applicable policies and procedures to align with the GLBA requirements.
2023-003 Significant Deficiency: National Student Loan Data System (NSLDS) Report (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268 and Federal Pell Grant Program, ALN #84.063) (Repeat finding of 2022-001)
Criteria: In accordance with 34 CFR 685.309(b) and 34 CFR section 690.83(b)(2), for Direct Loans and Pell grants, respectively, once the Enrollment Reporting roster file is received from the NSLDS, the institution must update the Enrollment Reporting roster file for changes in student status, report the date the enrollment status was effective, enter the new anticipated completion date, and submit the changes to NSLDS.
Statement of Condition: During the audit, it was noted that the University incorrectly reported student enrollment status for changes in enrollment.
Questioned Costs: Such information is not applicable for this finding since it is nonmonetary in nature.
Perspective Information: The audit included a detailed testing of 40 student files, of which this significant deficiency applies to 12, indicating an error rate of 30.00%.
Cause and Effect: Due to lapses in communication between departments, in certain instances, the University failed to provide NSLDS with accurate updates to student enrollment statuses, resulting in misrepresentation within the NSLDS system.
Recommendation: The University should ensure that the correct enrollment status is reported to NSLDS.
View of Responsible Officials:
The University concurs with this finding. Student enrollment status is pulled monthly into a report and submitted to clearinghouse out of Colleague. The failure of the system to pull the correct enrollment status for changes in enrollment is noted and the Director of Financial Aid and the Registrar of the university will work in conjecture to determine why the report that pulls out of the system is not pulling accurate student enrollment status for changes in enrollment. Once fixed, we will continue to monitor by pulling a list of random sampling of students out of each monthly report to ensure that enrollment status is being reported correctly.
2023-003 Significant Deficiency: National Student Loan Data System (NSLDS) Report (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268 and Federal Pell Grant Program, ALN #84.063) (Repeat finding of 2022-001)
Criteria: In accordance with 34 CFR 685.309(b) and 34 CFR section 690.83(b)(2), for Direct Loans and Pell grants, respectively, once the Enrollment Reporting roster file is received from the NSLDS, the institution must update the Enrollment Reporting roster file for changes in student status, report the date the enrollment status was effective, enter the new anticipated completion date, and submit the changes to NSLDS.
Statement of Condition: During the audit, it was noted that the University incorrectly reported student enrollment status for changes in enrollment.
Questioned Costs: Such information is not applicable for this finding since it is nonmonetary in nature.
Perspective Information: The audit included a detailed testing of 40 student files, of which this significant deficiency applies to 12, indicating an error rate of 30.00%.
Cause and Effect: Due to lapses in communication between departments, in certain instances, the University failed to provide NSLDS with accurate updates to student enrollment statuses, resulting in misrepresentation within the NSLDS system.
Recommendation: The University should ensure that the correct enrollment status is reported to NSLDS.
View of Responsible Officials:
The University concurs with this finding. Student enrollment status is pulled monthly into a report and submitted to clearinghouse out of Colleague. The failure of the system to pull the correct enrollment status for changes in enrollment is noted and the Director of Financial Aid and the Registrar of the university will work in conjecture to determine why the report that pulls out of the system is not pulling accurate student enrollment status for changes in enrollment. Once fixed, we will continue to monitor by pulling a list of random sampling of students out of each monthly report to ensure that enrollment status is being reported correctly.