Gramm-Leach-Bliley Act – Student Information Security – Significant Deficiency in Internal
Controls over Compliance – Federal Assistance Listing Number 84.063, 84.268, 84.007, 84.033, 84.379,
84.038
Recommendation: The auditors recommend the University review the compliance requirements and update o...
Gramm-Leach-Bliley Act – Student Information Security – Significant Deficiency in Internal
Controls over Compliance – Federal Assistance Listing Number 84.063, 84.268, 84.007, 84.033, 84.379,
84.038
Recommendation: The auditors recommend the University review the compliance requirements and update our written policy to ensure that it addresses all the required elements.
Action taken: The CIO, Mary Donahoo, worked in conjunction with prior CFO to create a timeline for implementation for the requirements of GLBA. The Information Technology Services (ITS) department had begun policy development pertaining to the Gramm-Leach- Bliley Act (GLBA) specific elements in 16 CFR 314.4 during fiscal year 2024 but was unable
to complete all the required implementations. The ITS department implemented, during fiscal year 2024, improvements to cyber security and minor elements of GLBA, including multifactor authentication. The action plan anticipates completion of all elements of GLBA by the end of the calendar year.
Name of Responsible Party: Mary Donahoo
Anticipated completion date: 12/31/2024