Audit 390178

FY End
2025-08-31
Total Expended
$10.11M
Findings
4
Programs
8
Organization: Jamestown Community College (NY)
Year: 2025 Accepted: 2026-03-04
Auditor: BONADIO & CO LLP

Organization Exclusion Status:

Checking exclusion status...

Findings

ID Ref Severity Repeat Requirement
1176355 2025-001 Material Weakness Yes P
1176356 2025-001 Material Weakness Yes P
1176357 2025-001 Material Weakness Yes P
1176358 2025-001 Material Weakness Yes P

Programs

Contacts

Name Title Type
NQRLEYNNEWK4 Karen Fuller-Markham Auditee
7163381034 Karen Lynch Auditor
No contacts on file

Notes to SEFA

The accompanying schedule of expenditures of federal awards (the Schedule) includes the federal award programs of Jamestown Community College (the College) for the year ended August 31, 2025 and has been prepared in accordance with accounting principles generally accepted in the United States of America. The information in this schedule is presented in accordance with the requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). Because the schedule presents only a selected portion of the College’s operations, it is not intended to and does not present the financial position, revenue, expenses, and changes in net position of the College.
Expenditures reported on the Schedule are reported on the accrual basis of accounting. Such expenditures are recognized following the cost principles contained in the Uniform Guidance, wherein certain types of expenditures are not allowable or are limited as to reimbursement. Differences between amounts included in the schedule and amounts reported to funding agencies for these programs result from report timing.
Where the College receives funds from a government entity other than the federal government (pass-through), the funds are accumulated based on the Assistance Listing (AL) number advised by the pass-through grantor. Identifying numbers, other than the AL numbers, which may be assigned by pass-through grantors are not maintained in the College's financial system. The College has identified certain pass-through identifying numbers and included them in the schedule of expenditures of federal awards, as available.
The College has elected not to use the 10% de minimis indirect cost rate as allowed under the Uniform Guidance.

Finding Details

Finding 2025-001 – Student Financial Assistance Cluster Federal Agency – U.S. Department of Education Grant Period – Year ended August 31, 2025 Compliance Requirement – N. Gramm-Leach-Bliley Act–Student Information Security Criteria – Institutions participating in Title IV programs are required to comply with various laws and regulations as part of their signed Program Participation Agreement (PPA), including but not limited to, the Federal Trade Commission’s Gramm-Leach-Bliley Act (GLBA) Safeguards Rule (Title 16, Chapter I, Subchapter C, Part 314). Condition – The College has not performed a formal risk assessment of their technology environment. In addition, the College’s management indicated that the majority of the elements required are in place; however, they are not formally documented. This includes policies related to vendor management, user access, transmission and destruction of student data, change management, and a formal inventory of where student data is stored, collected and transmitted. per the 2025 Compliance Supplement. Cause – The College has experienced significant changes in administration with additional vacancies and turnover in the technology and finance departments. Along with budget constraints the ability to complete a risk assessment and formal documentation of the IT policies and procedures has been delayed. Effect – The College was not in compliance with the Department of Education’s requirements for GLBA. Recommendation – The College should review the GLBA safeguarding rules and as soon as practical implement and document the controls necessary for compliance with the rule, this would include the completion of a documented, thorough, and standardized risk assessment. As part of this process, IT policies should be updated and documented to align with the College’s current IT environment and be formally approved and implemented throughout the College. Management response - Over the past year, the College experienced significant changes in leadership, including vacancies and turnover within the finance and technology departments. As a result, finalizing the remaining GLBA documentation has been delayed. Some of the required work has already been completed operationally, and we are committed to finalizing the written policies and procedures in the coming months.