Contact Person(s): Grace Tulafono-Asi, Information Officer Sonny Leomiti, Vice President of Administration and Finance Explanation and specific reasons for disagreement with the audit finding or that corrective action is not required (if applicable): No disagreement Corrective actions taken/planned:...
Contact Person(s): Grace Tulafono-Asi, Information Officer Sonny Leomiti, Vice President of Administration and Finance Explanation and specific reasons for disagreement with the audit finding or that corrective action is not required (if applicable): No disagreement Corrective actions taken/planned: The College has designated the Chief Information Officer (CIO) and on the following Items were completed in September 2022: a.ASCC Data / Information Security Program b.Risk Assessment that addresses (1) Employee training and management; (2) Information systems, including network and software design, as well as information processing, storage, transmission and disposal; and (3) detecting, preventing and responding to attacks, intrusions, or other systems failures. The risk assessment identified action items to resolve findings and controls that are put in place in the meantime. Action Items and controls are reviewed and updated monthly. In November 2022, The Federal Student Aid (FSA) Cyber Compliance Team confirmed that ASCC has satisfied the minimum information security requirements under Gramm-Leach-Bliley Act (GLBA) and closed its. The next annual complete Risk Assessment will be completed in August 2023, and ASCC will continue to complete a Risk Assessment annually to stay in compliance with GLBA. Anticipated completion of the corrective action is expected by October 2023.