Corrective Action Plans

Finding 2023-001 Personnel Responsible for Corrective Action: Senior Vice President, Student Experience – Joseph Sallustio Anticipated Completion Date: March 2024 Corrective Action Plan: The University has completed its implementation of Anthology, a student information system, during the 2023-2024 fiscal year. The new system has several built in features that are supplemented with internal controls to ensure financial aid is awarded correctly. The system automatically awards the student at full-time, the awards are then confirmed through a review process before sending out the award notification, and again before payment. The system compares the full-time award status with the actual enrollment and if they do not match the student will fail for payment and we will revise the award.

The University concurs with the above mentioned finding that, while University processes defined to address GLBA are in place, the Information Security Policy does not specifically address Gramm-Leach-Bliley Act (GLBA) security criteria. It is now understood that the defined processes that address and support GLBA security criteria need to be put into a format that is published for access by the UCM community. UCM has commenced the process to create and publish the written information security program that addresses all required elements of the GLBA.

Cause and potential effect as presented in the Summary of Findings and Questioned Costs: The University's internal controls for determining that a loan disbursement notification was sent for each disbursement made was not operating effectively. Accordingly, the University did not send a loan notification for disbursements within the required timeframe nor with the required information. Narrative Explanation: The general Financial Aid Award letter-directing the student to view their Loan Disbursement information was insufficient to meet the requirement. While the students have direct access to their student accounts that show disbursement activity and the institution has posted to their website the required terms of loan disbursements, the federal direct loan disbursement notification was not sent to the student or parent within the required 30 days before or 30 days after the disbursement was credited to the student's account and did not include the necessary information regarding the student's right or parent's right to cancel per 34 CFR section 668.165. Corrective action: The Student Financial Aid office reached out to our software vendor Ellucian Colleague and similar peer institutions to create a Loan Disbursement Notification notice. Effective immediately, all term disbursements will receive Loan Disbursement Notification notices. The Financial Aid Transmittal process (FATR) is run each week on Tuesday morning. The notices will be emailed weekly using a date range from the last financial aid transmittal date to the current date. Should more than one FATR be run in a week’s time, the notices would increase in frequency and intensity. The documents will be archived in batches within our current Document Imaging System by date. Additionally, a section on the Student Financial Aid website will be dedicated to the Disbursement Information, including Loan Notifications and Right to Cancel Loan procedures. MUSC is currently in the process of implementing a new Student Information System with a go live date scheduled for February 2025. During implementation we will configure the new SIS to automatically send the Loan Disbursement notifications to the students when their funds have been credited to the student’s accounts. You may direct questions to me at freelan@musc.edu or by telephone at 843-792-4364.

Disbursement notification has been added to the responsibilities of the current staff member.

The application was submitted to Department of Education with our BankMobile link on 1/29/2024. The Department of Education has not updated our information yet.

2023-002. Finding: Student Enrollment Reporting– Both Campuses Response: The campuses have implemented processes to prevent further errors in enrollment reporting, despite the disconnects and system problems that have been observed. Corrective Action Plan: SIUC has implemented a process where in each time an NSLDS roster is received (twice a month), it is run against a list of Title IV aid students to identify any that are not on the roster in order to remedy the omission as soon as possible. The current course of action at SIUE is to monitor students per term who are up for graduation but are not enrolled for the full semester. Students who are up for graduation will be enrolled in UNIV 500 for the remainder of the term after completing requirements earlier in the semester in which they are graduating. This would be in line with our Continuous Enrollment Policy 1L16. While this is currently a manual process, SIUE continues to look for ways to systematically indicate the student is withdrawn in later part of term in which they are graduating, or to withdraw the student from the later part of the term. Contact Person: Rachel Frazier (SIUC) and Patrick Sears (SIUE) Anticipated completion date: December 2023 (SIUC) and Spring 2024 (SIUE)

Management Response and Corrective Action Plan: The College runs weekly reports from the Ellucian Colleague system to identify students with CFlags and comment codes for loan limits. While reviewing the report if a student has comment codes for loan limits, the staff member running the reports will research and assign the issue to the appropriate Financial Aid Assistant Director to adjust the loan accordingly. For the student identified, the loan limit was calculated incorrectly in the Colleague system and the student was awarded a federal direct loan that exceeded their maximum total aggregate outstanding loan debt by $2,500. It is our belief this was not an issue of identifying the CFLAG, it was human error with reduction of loans. To correct the issue this student was awarded institutional aid to cover the amount loans were reduced. To confirm that no other student’s were impacted by a similar issue, a CFLAG full audit report was run for 2022. The report was reviewed to determine if there were any other students that had an aggregate loan limit issues. It was confirmed that this student was the only issue. The Office of Financial Aid will be enhancing the rules in our Colleague system to prevent disbursement if the Loan Limit CFlag has not been fully resolved. Staff will also be trained to not solely rely on Colleague’s Loan information and to seek verification of loan limits directly from NSLDS. OFA member that reviews loan limits will need to include the students NSLDS record in the students folder, confirmation of and loan amounts, and detailed description of adjustments. A monthly audit will occur by an Associate Director or the Director to confirm accruary and completeness. Scheduled Date of Completion: 4/15/2024 Contact person responsible: Katrina Bennett, Director of Financial Aid

Finding: The College’s internal controls over compliance of special tests regarding the Gramm-Leach Bliley Act (GLBA) were not operating effectively in 2023 as the College did not have a comprehensive information security program in compliance with the Safeguards Rule prepared by June 9, 2023. The College is required to have a completed and approved information security program available on or before June 9, 2023. The College did not complete and review the information security program until fall 2023. The controls over GLBA compliance were not operating effectively to be in compliance as of June 9, 2023. Subsequent to year end, management finalized and approved the security program. We recommend the College ensure that individuals responsible for completion and review of the information security program are aware of the program requirements and complete the assessment annually with documented review prior to fiscal year-end. Corrective Action: Management agrees and has implemented necessary procedures and management oversight to meet the requirements.

Student Financial Assistance Cluster – Assistance Listing No. 84.063, 84.268 Recommendation: The University should review its policies and procedures on reporting of enrollment status changes to NSLDS to ensure that all status changes are being reported accurately to be in compliance with regulations. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Typically this sort of error does not occur with the NSC and its handling of transmitted data. However, the Registrar’s Office will check enrollment transmissions approximately two weeks following submissions, to affirm proper handling of transmitted data. Name(s) of the contact person(s) responsible for corrective action: Marita Hurst, Registrar Planned completion date for corrective action plan: April 1, 2024

Student Financial Assistance Cluster – Assistance Listing No. 84.063, 84.007, 84.268, 84.379, 84.033, & 84.038 Recommendation: We recommend the University review all R2T4 calculations to ensure the correct net disbursed amounts are entered for all Title IV aid. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The Financial Aid Director will utilize the R2T4 Calculator on COD to determine the correct amount of earned aid when a student withdraws completely. Additional attention will make sure the adjustments are made in Banner & COD in an accurate manner. Name(s) of the contact person(s) responsible for corrective action: Sean Hudson, Interim Director of Financial Aid Planned completion date for corrective action plan: Corrective action plan has already been implemented.

Student Financial Assistance Cluster – Assistance Listing No. 84.063, 84.268 Recommendation: We recommend the University evaluate its procedures and policies around reporting to the COD to ensure that student information is reported accurately and timely. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Currently, some files are being transferred automatically between COD & Cabrini by IT and some are being transferred manually by staff. Going forward all files will be transferred manually by the Financial Aid Director on a daily basis to ensure completion. Name(s) of the contact person(s) responsible for corrective action: Sean Hudson, Interim Director of Financial Aid Planned completion date for corrective action plan: April 1, 2024

Student Financial Assistance Cluster – Assistance Listing No. 84.268 Recommendation: We recommend the University evaluate its procedures and a policy around packaging Title IV based on need. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Staff will be retrained on packaging requirements and the importance of monitoring for over-award situations. The Financial Aid Director will also work with IT to make sure reporting mechanisms are set up to identify potential overawards for timely investigation and review. Name(s) of the contact person(s) responsible for corrective action: Sean Hudson, Interim Director of Financial Aid Planned completion date for corrective action plan: April 30, 2024

Student Financial Assistance Cluster – Assistance Listing No. 84.268 Recommendation: The University should ensure all necessary employees receive proper training, support, and time to follow the University’s policies and federal requirements related to monthly reconciliations. There should be a process to maintain all reconciliations to support these were performed as required monthly. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: A monthly schedule will be established and staff assigned to the task of monthly reconciliation will be trained in the federal requirements. This training will include a review of where such files are to be retained. Name(s) of the contact person(s) responsible for corrective action: Sean Hudson, Interim Director of Financial Aid Planned completion date for corrective action plan: May 15, 2024

Department of Education Student Financial Assistance Cluster – Assistance Listing No. 84.063, 84.007, 84.268, 84.379 & 84.033 Recommendation: We recommend that the University ensure proper support and approval is maintained for all Title IV drawdowns. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Approval is documented via email and retained in department files prior to completion of a Title IV drawdown. Name(s) of the contact person(s) responsible for corrective action: Lynda Buzzard, Vice President, Finance & Administration Planned completion date for corrective action plan: Corrective action plan has already been implemented.

Condition: The College utilizes a third-party service provider for Perkins Loan servicing. Federal regulations require the institution to perform due diligence on the third-party servicer to ensure they are following federal regulations. The College did not perform their due diligence for fiscal year 2023. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action in Response to Finding: The College typically receives its third-party servicer’s compliance report to meet our due diligence obligations. For Fiscal Year 2023, the third-party servicer’s compliance report was delayed and was not received in time for the College’s audit deadlines. In future years, we will request the compliance report by December 31. We will then develop a cost-effective alternative plan for performing due diligence over the third-party servicer if the compliance report is not received by that date. Name of the contact person responsible for corrective action: Amy Ingalsbe, Student Accounts Manager Planned completion date for corrective action plan: December 31, 2024

Condition: During testing of underlying enrollment information, we identified the following: • One student’s status change was not submitted to the NSLDS within 60 days. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action in Response to Finding: The College will coordinate with their third-party servicer to identify the underlying cause and identify remediation to prevent this reporting error going forward. Name of the contact person responsible for corrective action: Phillip Apodaca, Registrar Planned completion date for corrective action plan: June 30, 2024

Condition: One of forty students tested was under-awarded Pell grant funds. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action in Response to Finding: The College developed a task within Financial Aid software that will flag locked Pell awards for review. Name of the contact person responsible for corrective action: Erica Shafer, Associate Director, Financial Aid Systems & Compliance Co-Interim Director of Financial Aid, and Abby Wilson, Financial Aid Counselor. Planned completion date for corrective action plan: November 15, 2023

TOCC RESPONSE TO 2023-001 (Significant Deficiency) Tohono O'odham Community College’s written information security program will be amended immediately to require multi-factor authentication for Jenzabar, the College’s data management system, and for PowerFAIDS, the student financial aid software. Multi-Factor Authentication, now available through Jenzabar’s “Jenzabar 1” upgrade, which is in the cloud, and which TOCC transitioned to in January and February 2024, will be implemented by June 30, 2024. Multi-factor authentication for Jenzabar will be set up using the Microsoft Hybrid Identity Services within the Microsoft Azure Cloud Architecture. In addition, not later than June 30, 2024, PowerFAIDS software, currently the “desktop” edition, will be transitioned to the cloud-based product that accommodates MFA. Dean for Sustainability Dr. Mario Montes-Helu, is responsible for implementation of this plan.

Department of Education 2023-014 Return of Title IV Funds, Assistance Listing No. 84.063, 84.268 Condition: The return of funds was calculated improperly. Auditors’ Recommendation: During CLA testing of Special Tests and Provisions. CLA noted that the university was not in compliance with federal financial aid regulations when a recipient of Title IV grant or loan assistance withdraws from an institution during a payment period or period of enrollment in which the recipient began attendance, the institution must determine the amount of Title IV grant or loan assistance that the student earned as of the student’s withdrawal date (34CFR section 668.22). We recommend the university review the R2T4 requirements and implement procedures to ensure the R2T4 calculations are using the correct amount of term days and are accurately completed. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to the finding: The R2T4 process has been updated to include placing the requirement for exit counseling as a condition for submission of the withdrawal form. An additional notification will be sent after the R2T4 process has been completed. Name(s) of the contact person(s) responsible for corrective action: Ozie Ratcliff – Director of Financial Aid Planned completion date for a corrective action plan: The updated process will begin on 3/25/2024. If the Department of Education has questions regarding this plan, please contact Ozie Ratcliff at 601-979-3347.

Department of Education 2023-012 Direct Loan Exit Counseling Student Financial Aid Cluster – Assistance Listing No. 84.268 Auditors' Recommendation: During CLA testing of Eligibility. CLA noted that the University was not in compliance with the federal financial aid regulations all schools that participate in the Federal Student Aid programs are required to provide exit counseling to student borrowers who withdraw from school. This requirement is outlined in 34 CFR section 685.304. Specifically, exit counseling must be provided within 30 days after the school learns that the student borrower has withdrawn from school. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The R2T4 process has been updated to include better communication between the Director of Financial Aid and the University Registrar to monitor enrollment status changes and ensure that the information used for the R2T4 calculations is accurate. The Director of Financial Aid will review the staff members' processing of R2T4 calculations to ensure accuracy. Name of the contact person responsible for corrective action: Ozie Ratcliff – Director of Financial Aid Planned completion date for corrective action plan: Updated process will begin 3/25/2024. If the Department of Education has questions regarding this plan, please contact Ozie Ratcliff at 601-979-3347.

Department of Education 2023–011 Outstanding Student Refund Checks Student Financial Aid Cluster – Assistance Listing No. 84.007, 84.033, 84.063, 84.268 Auditors’ Recommendation: During CLA testing of Special Tests and Provisions. CLA noted that the University was not in compliance with the federal financial aid regulations requirement that any Title IV federal funds disbursed to a student or parent that have not received or negotiated must be returned to the appropriated federal financial aid program no later than 240 days after the check or electronic fund transfer (EFT) was issued. CLA recommends that the University review the requirement and implement a monitoring control to monitor the checks throughout the year. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Create a policy to address the following: Returned or unclaimed Title IV Refunds will be successfully delivered to recipients (students or parents) or returned to the appropriate federal agency after 180 days outstanding. Additional attempts may be made to contact recipients; however, all unclaimed funds will be returned to the appropriate aid program no later than 240 days after the initial disbursement. The Accounting Office will maintain an “Outstanding Title IV Refund Checks/EFT Returns” list that will be provided to the Bursar’s Office every month. The Bursar’s Office will review the “Outstanding Title IV Refund Checks/EFT Returns” list every month and follow the procedures below regarding the outstanding checks/EFT returns.  The Bursar’s Office will use all reasonable means to locate the student or parent whose Title IV refund checks or returns have become 120 days old.  If all attempts are not successful, any outstanding Title IV refunds checks that have become stale dated (over 180 days) will be voided. The Bursar’s Office will make an entry, after a check has been voided, debiting the student account, and crediting a designated account that the Accounting’s Office will specify. This entry will then be interfaced to the Finance General Ledger debiting Student AR and crediting “Unclaimed Title IV Account”.  The Bursar’s Office will then send an e-mail notice to the Financial Aid Office containing the student’s name, student ID number, Title IV program(s), aid year and dollar amount that has been credited to the “Unclaimed Title IV Account”.  Based on the information provided, funds will be returned to the appropriate aid program within 210 – 240 days.  The Financial Aid Office will make the appropriate change(s) to the Fiscal Operations Report and Application to Participate (FISAP).  The Accounting’s Office will reconcile the “Unclaimed Title IV Account” every month. Name(s) of the contact person(s) responsible for corrective action: Charlette Mock, Director of Accounting and Lucreta Tribune, Associate Vice President for Finance Planned completion date for corrective action plan: This plan will be implemented no later than April 2024, with ongoing review of the process. This process should be completely in effect by the end of the current fiscal year, June 30, 2024. If the U.S. Department of Education has questions regarding these plans, please call Juanita Edwards at 601-877-6672.

Department of Education 2023-010 NSLDS Enrollment Reporting (ASU) Student Financial Aid Cluster – Assistance Listing No. 84.007, 84.033, 84.063, 84.268 Auditors’ Recommendation: During CLA testing of Special Tests and Provisions. CLA noted that the University was not in compliance with the federal financial aid regulations. The school is required to report changes in the student’s enrollment status, the effective date of the status and an anticipated completion date. Changes in enrollment to less than half-time, graduated, or withdrawn status must be reported within 30 days. However, if a Roster file is expected within 60 days, you may provide the data on that Roster file (34CFR section 682.610). Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: We have made significant changes during fiscal year 2024 in the Office of Student Records to address controlled and non-compliance Title IV regulations. While significant changes were made, we recognize that additional improvements are needed. The Registrar will implement internal controls to ensure all Title IV requirements are met regarding enrollment reporting. In addition, the Registrar will create a student enrollment procedures manual and implement a monitoring process to ensure that enrollment statuses are reported accurately and timely to NSLDS. Name(s) of the contact person(s) responsible for corrective action: Kisha Bond Planned completion date for corrective action plan: The planned completion date for this corrective action will be August 2024. If the U.S. Department of Education has questions regarding these plans, please call Juanita Edwards at 601-877-6672. 2023-010 NSLDS Enrollment Reporting (JSU) Student Financial Aid Cluster – Assistance Listing No. 84.007, 84.033, 84.063, 84.268 Auditors’ Recommendation: During CLA testing of Special Tests and Provisions. CLA noted that the University was not in compliance with the federal financial aid regulations the school is required to report changes in the student’s enrollment status, the effective date of the status and an anticipated completion date. Changes in enrollment to less than half-time, graduated, or withdrawn status must be reported within 30 days. However, if a Roster file is expected within 60 days, you may provide the data on that Roster file (34CFR section 682.610). Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Jackson State University has an established and published academic calendar which guides the day-to-day academic operations and functions of the University. In some instances, the census and financial purge deadlines are extended to ensure students complete their registration requirements. When extensions are provided, the enrollment file is unable to be submitted timely and also causes delays in processing the Enrollment Error report. To alleviate the untimely submission of the Enrollment Report, different practices have been established to aid students in completing their registration before the published deadline and subsequently ensuring the Enrollment file is submitted by the deadline. The University will adhere to published deadlines to prevent delays in reporting and error resolution. The University will enhance semester onboarding by: • Begin purge process earlier in the semester to ensure timely enrollment verification for each semester. • Increase communications between Office of the Registrar and Office of Financial Aid to weekly checks to discover and resolve resolutions within a 5-day window. This ensures we will meet the 10-day resolution deadline. Name(s) of the contact person(s) responsible for corrective action: Ozie Ratcliff, Director of Financial Aid and Lekesha Tubbs, University Registrar. Planned completion date for corrective action plan: Updated process will begin 3/25/2024. If the U.S. Department of Education has questions regarding these plans, please call Ozie Ratcliff at 601-979-3347. 2023-010 NSLDS Enrollment Reporting (UMMC) Student Financial Aid Cluster – Assistance Listing No. 84.007, 84.033, 84.063, 84.268 Auditors’ Recommendation: During CLA testing of Special Tests and Provisions. CLA noted that the University was not in compliance with the federal financial aid regulations the school is required to report changes in the student’s enrollment status, the effective date of the status and an anticipated completion date. Changes in enrollment to less than half-time, graduated, or withdrawn status must be reported within 30 days. However, if a Roster file is expected within 60 days, you may provide the data on that Roster file (34CFR section 682.610). Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The Office of Enrollment Management worked with DIS to create a supplement report (UMC RPT ST Student Academic Program Status Withdrawn, Dismissed or LOA-V2) to capture students whose enrollment status changes but is not picked up through monthly clearinghouse submissions. This report will run in tandem with our monthly clearinghouse report and any student with a status change not pulled on the clearinghouse report will be manually updated within the National Student Clearinghouse database by our Associate Director of Enrollment Services. These updates will then be reported to NSLDS, along with our monthly enrollment report. Name of the contact person responsible for corrective action: Dr. Emily Cole, Executive Director of Enrollment Management Planned completion date for corrective action plan: Effective immediately. The Office of Enrollment Management will begin utilizing the new report with the March enrollment file submitted to clearinghouse. If the U.S. Department of Education has questions regarding these plans, please call Julie Schwindt at 601-984-1058.

Department of Education 2023–009 Common Origination and Disbursement (COD) Student Financial Aid Cluster – Assistance Listing No. 84.007, 84.033, 84.063, 84.268 Condition: The Fall 2022 and Spring 2023 disbursement dates in COD for Parent Plus Direct Loans did not match the disbursement date on the student ledgers. Auditors’ Recommendation: During CLA testing of Eligibility. CLA noted that the University was not in compliance with the federal financial aid regulations COD reporting requirements, including reporting disbursements, adjustments, and cancellations in a timely and accurate manner. CLA recommend that the entity strengthen its internal controls to ensure that all disbursement dates are reported to COD correctly. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The financial aid office will conduct bi-weekly reviews of enrollment changes, including university withdrawals. In addition, bi- weekly reviews of adjustment completion will be done to ensure banner adjustments are sent to COD within 10-14 business days. Name of the contact person responsible for corrective action: Ozie Ratcliff – Director of Financial Aid Planned completion date for corrective action plan: Updated process will begin 3/25/2024. If the Department of Education has questions regarding this plan, please call Ozie Ratcliff at 601-979-3347.

Views of Responsible Officials and Planned Corrective Action: We agree with the auditor’s finding and recommendations, and the following corrective action will be taken to improve the situation: • The Director of Computing Services will oversee the review subsections of 16 CFR 314 to ensure compliance with requirements. o Perform a more thorough GLBA Risk Assessment, which will be used to improve the institution’s security policy and posture. This is outlined in 16 CFR 314(b). o Improve safeguards and more frequent testing to improve system security and threat transparency will be added, including email security and log file monitoring, in addition to other controls as outlined in 16 CFR 314(c) and (d). Several quotes have been acquired and are in the process of being reviewed. o Conduct a review of policies and training, as outlined in 16 CFR 314(e), and mitigate deficiencies in awareness training and policies. o Improve documentation around third-party service providers to ensure compliance with 16 CFR 314(f). o All response plans are to be reviewed and improved as needed because of the Risk Assessment and other monitoring activities to ensure appropriate activities are included and tested at regular intervals. o The institution will develop a compliance document to record efforts according to each section of 16 CFR 314, including those areas that are already compliant. It is the goal of SEARK College to remain in a state of continuous improvement and in compliance with required regulations. The Director of Computing Services will work with the Senior Leadership Team to ensure that appropriate resources are made available, and that activities occur in a timely manner. Anticipated Completion Date: The indicated reviews and assessments are already in progress, with a goal of June 30, 2024, to have fully integrated the stated improvements into our systems and procedures. Contact Person: Name: JoAnn Dupra Title: Director of Computing Services Agency: Southeast Arkansas College Address: 1900 Hazel St City, State, Zip: Pine Bluff, AR 71603 Phone Number: (870) 543-5993 Email Address: jdupra@seark.edu

Views of Responsible Officials and Planned Corrective Action: Management understands the recommendations provided in the finding. We are planning on updating our 2021 Risk Assessment with our campus community in the near future. In accordance with ALA's recommendation, we will focus on GLBA 16 CFR 314 elements and financial aid data. As with our 2021 Risk Assessment, our plan will be reviewed and accepted by our Chancellor. We intend to have the Risk Assessment updated and reviewed by June 30, 2024. We will also coordinate the risks identified with the extensive list of controls and policies that currently protect student’s financial aid information. These include: Acceptable Use Policy_V7_3.pdf Antivirus and Malware Policy_V2_1.pdf Cloud Services Policy_V1_2.pdf Confluence Screenshots Of Contact Information For Critical Systems (1).pdf Data Classification Policy_V1_2.pdf Data Encryption Policy_V7_1.pdf Data Management Use Protection Policy_V7_2.pdf Data Protection Policy_V7_2 Data Protection Policy_V7_2.pdf Disaster Recovery Business Continuity System Recovery Prioritization List_V1_2.pdf Disaster Recovery Procedure_V1_5.pdf Drive Data Deletion Policy_V7_2.pdf E-Learning Policies_V7_1.pdf Email and Digital Communication Policy_V8_2.pdf Email and Digital Communication Policy_V8_2.pdf Employee Data Deletion Policy_V7_2.pdf Encryption of Sensitive Data on Transmission Policy_V7_2.pdf Faculty Senate Legislation Reference_V6.1.pdf Firewall Blacklist and Whitelist Policy_V7_2.pdf Firewall Management Procedure_V7_2.pdf GLBA Risk assessment.docx Incident Response and Forensic Analysis Procedures_V7_5.pdf IT Employee Departure Procedures_V7_2.pdf IT Security Awareness and Competencies Policy_V1_5.pdf IT Services System Administration Privileged Access Management Policy_V7_2.pdf IT System Backup Procedures_V7_2.pdf IT System Patching Process_V7_3.pdf Lab / Classroom Administrative Rights Exception Request_V6_1.pdf Local Firewall Procedures for Workstations and Mobile Devices_V7_2.pdf Log Review Policy_V2_1.pdf Mobile Device Security - Remote Email Destruction Process_V1_1.pdf Mobile Device Security Policy_V2_1.pdf Multi-factor Authentication - Information Technology Services - UA Little Rock.pdf Network Patching Process_V1_1.pdf PCI Compliance _ Training Policy_V7_2.pdf Physical Security Policy_V1_3.pdf Retention of Records Policies_V7_2.pdf Security and Incident Response Team Policy_V1_3.pdf Security and IT System Access Policy_V1_2.pdf Student Account Deletion Policy_V7_2.pdf System Log Requirements_V8_2.pdf UALR Change Management Policy 2.2.pdf Vendor Remote Access Policy_V1_1.pdf Vulnerability Scan Policy_V7_2.pdf Wireless Network Guest Security Policy_V1_1.pdf Wireless Security Policy_V1_2.pdf Workstation Administrative Rights Exception Request_V6_1.pdf Anticipated Completion Date: June 30, 2024 Contact Person: Name: Gerald J. Ganz, Jr. Title: Vice Chancellor for Finance & Administration Agency: University of Arkansas at Little Rock Address: 2801 S. University Avenue City, State, Zip: Little Rock, AR, 72204 Phone Number: 501-916-5622 Email Address: GJGanz@ualr.edu