2022-009 Special Tests and Provisions – The Gramm-Leach-Bliley Act (GLBA)
Student Financial Aid Cluster – Assistance Listing No. 84.007, 84.033, 84.063, 84.268
Recommendation: We recommend the University engage a third party or perform the risk assessment for the two areas required by the Gramm-Leac...
2022-009 Special Tests and Provisions – The Gramm-Leach-Bliley Act (GLBA)
Student Financial Aid Cluster – Assistance Listing No. 84.007, 84.033, 84.063, 84.268
Recommendation: We recommend the University engage a third party or perform the risk assessment for the two areas required by the Gramm-Leach-Bliley Act that have not been completed and documented and ensure that there are documented safeguards for identified risks.
Explanation of disagreement with audit finding: There is no disagreement with the audit finding.
Action taken in response to finding: The University began engagement with AIS, an IT Managed Service Provider in May 2022 and hired a Director of IT in November 2023. The University is working with AIS and Cowbell to develop and implement a Cybersecurity policy, as well as to provide training for all employees, the Board of Governors, and students. The University has also deployed Cloud Storage backup solutions for all data.
Name(s) of the contact person(s) responsible for corrective action: Scharvin Wilson, Director of IT, AIS, IT Managed Services Provider, E. ZeNai Savage, CPA, CFO and Executive VP of Finance and Administration
Planned completion date for corrective action plan: June 30, 2024