2024-002
Initial Fiscal Year End, 2024
Summary of Finding- During the audit, it was noted that the University's Gramm-Leach-Bliley Act Policy did
not fully address all of the requirements as described by 16 CFR 314.4. In addition, the application of the
comprehensive information security program was...
2024-002
Initial Fiscal Year End, 2024
Summary of Finding- During the audit, it was noted that the University's Gramm-Leach-Bliley Act Policy did
not fully address all of the requirements as described by 16 CFR 314.4. In addition, the application of the
comprehensive information security program was not effectively administered by the University during the 2024
year. An updated policy was put into place in February 2024, which addressed several of the deficiencies noted in
the existing policy, but not all.
Name and Title of Responsible Contact Person(s)- Sara Shepherd, Vice President for Finance
Corrective Action Plan Summary-The university recently reviewed the Gramm-Leach-Bliley Act Policy and
has put in place controls and practices to effectively monitor antl administer the policy. In April 2024, we hired
an IT company to help with various campus needs, including data compliance procedures and security measures.
The company has been reviewing our current policies and making recommendations to implement appropriate
safeguards to keep the university up to date and compliant. We have already installed multi-factor authentication
features for our software systems, and there are more updates to come. In July 2024, we received a notice of
compliance from the Federal Student Aid regarding our corrective action procedures for the Gramm-Leach-Bliley
Act.
Anticipated Completion Date- July 1, 2025