Corrective Action Plans

Finding 1169839 (2025-003)

Material Weakness 2025

IL

Subrecipient Monitoring Reporting Internal Control / Segregation of Duties § 200.512

Condition Found: Per the federal Audit Clearinghouse records, the Village's Data Collection Form for the fiscal year ending April 30, 2024, was submitted April 22, 2025, which is past the nine month deadline. This is deemed to be an instance of noncompliance with applicable reporting requirements. C...

Condition Found: Per the federal Audit Clearinghouse records, the Village's Data Collection Form for the fiscal year ending April 30, 2024, was submitted April 22, 2025, which is past the nine month deadline. This is deemed to be an instance of noncompliance with applicable reporting requirements. Corrective Action Plan: The FY25 Coal City Data Collection Form shall be submitted in a timely fashion due to the annual audit having been completed within a time period allowing the filing to occur prior to January 31, 2026 deadline. Responsible Person for Corrective Action Plan: The Finance Manager shall ensure filling of the correct documentation is made and submitted to the Federal Audit Clearinghouse regarding the FY25 Audit. Implementation Date of the Corrective Action Plan: December 31, 2025

View Audit 383001

Finding 1169816 (2025-004)

Material Weakness 2025

Central Oregon Regional Housing Authority

OR

Subrecipient Monitoring Matching / Level of Effort / Earmarking

Response to Finding 2025-004 Federal Award Agency: US Department of Agriculture Name of Contact Person: Marat Saks, Chief Financial Officer Views of Responsible Officials: The RD mortgage payments are deducted directly from the rental assistance payments drawn down by the RD properties each month, a...

Response to Finding 2025-004 Federal Award Agency: US Department of Agriculture Name of Contact Person: Marat Saks, Chief Financial Officer Views of Responsible Officials: The RD mortgage payments are deducted directly from the rental assistance payments drawn down by the RD properties each month, and the payment delays identified were the result of untimely rental assistance requests submitted by the new property management company during the transition Corrective Action: To prevent future delays, the Housing Authority will implement a formal monitoring process to track all RD mortgage payments, verify that rental assistance requests are submitted timely, and ensure that all payments are properly documented by property management company. Date of Planned Corrective Action: Immediately following being notified of this finding.

View Audit 382965

Finding 1169815 (2025-003)

Material Weakness 2025

Central Oregon Regional Housing Authority

OR

Subrecipient Monitoring Matching / Level of Effort / Earmarking

Response to Finding 2025-003 Federal Award Agency: US Department of Agriculture Name of Contact Person: Marat Saks, Chief Financial Officer Views of Responsible Officials: The Housing Authority’s new property management company did not comply with the agreement for timely Replacement Reserve deposit...

Response to Finding 2025-003 Federal Award Agency: US Department of Agriculture Name of Contact Person: Marat Saks, Chief Financial Officer Views of Responsible Officials: The Housing Authority’s new property management company did not comply with the agreement for timely Replacement Reserve deposits during the transition period due to the disruption in normal payment processes. Corrective Action: All retroactive deposits to Replacement Reserves were made subsequent to FYE 6/30/2025. The Housing Authority will implement a monitoring process to track Replacement Reserve deposits and ensure all required contributions are made timely, including during periods of management transition. This process will include periodic reconciliation of required versus actual deposits, and management review to promptly identify and resolve any discrepancies. Date of Planned Corrective Action: Immediately following being notified of this finding.

View Audit 382965

Finding 1169732 (2025-002)

Material Weakness 2025

Council Groves Apartments, Inc.

MT

Subrecipient Monitoring HUD Housing Programs Matching / Level of Effort / Earmarking

2025-002, Section 207 Loan Pursuant to Section 223(f), Federal Assistance Listing Number 14.134 Planned Corrective Action: Management has corrected the identified deficiency related to the tenant security deposit bank account. Subsequent to year end, on December 12, 2025, management transferred fund...

2025-002, Section 207 Loan Pursuant to Section 223(f), Federal Assistance Listing Number 14.134 Planned Corrective Action: Management has corrected the identified deficiency related to the tenant security deposit bank account. Subsequent to year end, on December 12, 2025, management transferred funds into the tenant security deposit bank account to fully fund the account in an amount equal to the related tenant security deposit liability. In addition, management has implemented procedures to ensure ongoing compliance with HUD requirements, including: • Monthly reconciliation of the tenant security deposit bank account to the related liability balance; • Management review of the reconciliation to ensure the account remains fully funded at all times; and • Enhanced monitoring of the tenant security deposit account, particularly during periods of property management transition. These actions are intended to ensure tenant security deposits are fully segregated and safeguarded in accordance with HUD regulations and program requirements. Anticipated Completion Date: Corrected as of December 12, 2025; ongoing monitoring thereafter. Status: Corrected.

View Audit 382803

Finding 1169716 (2025-001)

Material Weakness 2025

Ogden City Corporation

UT

Reporting Subrecipient Monitoring § 200.328

Management of the City concurs with the audit finding. The City program staff responsible for preparing the report was not aware of the requirement to submit the federal financial report. The City program staff has been informed of the reporting requirements, and management will perform a quality co...

Management of the City concurs with the audit finding. The City program staff responsible for preparing the report was not aware of the requirement to submit the federal financial report. The City program staff has been informed of the reporting requirements, and management will perform a quality control review over future submissions to ensure compliance with grant requirements.

View Audit 382740

Finding 1169667 (2025-001)

Material Weakness 2025

New Madrid County Human Resources Council Community Partnership

MO

Subrecipient Monitoring Allowable Costs / Cost Principles § 200.332

Name of Contact Person: Tonya Vannasdall, Director. Recommendation: It is recommended that the client implement and document formal procedures to ensure all required subrecipient monitoring activities are performed in accordance with Uniform Guidance, including obtaining and reviewing subrecipient a...

Name of Contact Person: Tonya Vannasdall, Director. Recommendation: It is recommended that the client implement and document formal procedures to ensure all required subrecipient monitoring activities are performed in accordance with Uniform Guidance, including obtaining and reviewing subrecipient audit reports and following up on any identified deficiencies. Corrective Action: The Executive Director will implement the recommendation. Proposed Completion Date: Immediately.

View Audit 382701

Finding 1169613 (2025-001)

Material Weakness 2025

Alpha Warren Housing Corporation

OH

Eligibility Reporting Subrecipient Monitoring

Management have put together a recertification team that will oversee our recertifications and we will bring staff on site in to train going forward in the future This will help to ensure that all documents are signed all consent forms there will also be training that deals with tenant selection on ...

Management have put together a recertification team that will oversee our recertifications and we will bring staff on site in to train going forward in the future This will help to ensure that all documents are signed all consent forms there will also be training that deals with tenant selection on the wait list as well as training with maintaining tenant files.

View Audit 382588

Finding 1169538 (2025-001)

Material Weakness 2025

Santa Monica New Hope Courtyard Apartments 122-Hd046-Wpd-Np

CA

Subrecipient Monitoring

Name of auditee: Santa Monica New Hope Courtyard Apartments HUD auditee identification number: 122-HD046-WPD-NP Name of audit firm: Dauby O'Connor & Zaleski, LLC Period covered by the audit: Year ended June 30, 2025 CAP prepared by Name: Christien Tran Position: Management agent representative Telep...

Name of auditee: Santa Monica New Hope Courtyard Apartments HUD auditee identification number: 122-HD046-WPD-NP Name of audit firm: Dauby O'Connor & Zaleski, LLC Period covered by the audit: Year ended June 30, 2025 CAP prepared by Name: Christien Tran Position: Management agent representative Telephone number: 323-838-8556 Current Findings on the Schedule of Findings, Questioned Costs, and Recommendations Statement of condition 2025-001: The Corporation did not maintain a cash account for residents' security deposits in an amount equal to or greater than the outstanding balance of the residents' security deposits liability at all times during the year ended June 30, 2025, and at June 30, 2025, the residents' security deposit cash account was underfunded by $1,193. Recommendation: Management should ensure the residents' security deposits cash account is adequately funded and transfer funds from the Corporation's operating cash account to adequately fund the residents' security deposits cash account. Actions Taken or Planned on the Finding: Management concurs with the finding and recommendation. Management transferred $1,345 to the security deposit cash account on September 19, 2025.

View Audit 382478

Finding 1169523 (2025-002)

Material Weakness 2025

Housing for the Multi-Handicapped Blind

NY

Allowable Costs / Cost Principles HUD Housing Programs Subrecipient Monitoring

Reporting views of responsible officials and planned corrective actions The Organization will enhance its controls to ensure expenses are captured in the correct fiscal period and that at year-end there is a final review of the transactions to ensure completeness, accuracy and proper classification ...

Reporting views of responsible officials and planned corrective actions The Organization will enhance its controls to ensure expenses are captured in the correct fiscal period and that at year-end there is a final review of the transactions to ensure completeness, accuracy and proper classification of expenses. The Organization will further put in place a quarterly monitoring and review process to ensure the risk ratings of all financial institutions holding the Organization's cash and restricted cash are consistent with the minimally acceptable ratings established by the GNMA.

View Audit 382473

Finding 1169412 (2025-003)

Material Weakness 2025

Life University, Inc.

GA

Special Tests & Provisions Student Financial Aid Subrecipient Monitoring

Individuals Responsible for Corrective Action Plan: •Collections Coordinator •Director of Student Accounts Condition: Life University transitioned from UAS services to ECSI. In the transition of that service provides, documentation that was to be maintained to remain compliant with the Federal Perki...

Individuals Responsible for Corrective Action Plan: •Collections Coordinator •Director of Student Accounts Condition: Life University transitioned from UAS services to ECSI. In the transition of that service provides, documentation that was to be maintained to remain compliant with the Federal Perkins loan program was lost. The university has attempted on numerous occasions to assign the defaulted loans using alternative documentation to verify the debt. All attempts have been denied. The university has now been in practice with the current corrective action plan to address the deficiencies in documentation and reestablish the validity of the debt. Management’s Corrective Action Plan: Life University has implemented and continues to maintain the following corrective measures to ensure ongoing compliance: 1.Borrower Contact and Notification Life University has initiated and continues to conduct proactive outreach to borrowersrequiring an updated or newly established MPN (Master Promissory Note) or equivalentdocumentation. Communication is conducted through multiple channels, including: •Phone •Email 2.Clear Documentation Instructions The University will continue to issue formal notices to affected borrowers outlining therequirement for a new MPN or equivalent documentation. Each notice includes step-by-stepinstructions for completion, a clear explanation of the purpose and importance of the MPN,and information regarding its impact on the borrower’s outstanding loan balance. 3.Reassignment of Collection Rights Upon borrower completion of the required documentation, Life University has coordinatedwith ECSI to reassign the University’s right to collect on any remaining balances. This processcontinues to be applied as additional borrowers complete their documentation. 4.Documentation Review and Verification The University has established and continues to follow a review process to verify that eachnew MPN is complete, accurate, and properly executed. This ensures that borrower consentis valid and that all collection rights are appropriately reassigned. 5.Financial Record Updates Life University has updated and continues to maintain accurate financial records reflectingthe new MPNs and reassigned collection rights. Outstanding amounts, repayment schedules,and related data are verified and recorded to ensure consistency with federal andinstitutional requirements. 6.Ongoing Communication and Monitoring The University continues to monitor borrower compliance and maintain communicationthroughout the process. Regular follow-ups and reminders are sent as needed to ensuretimely completion and documentation integrity. At the conclusion of a 12 month outreach,students who have not verified their debt to come within compliance will be written off. Anticipated Completion Date: ongoing

View Audit 382340

Finding 1169303 (2025-001)

Material Weakness 2025

Community Health Center of Central Missouri

MO

Subrecipient Monitoring Reporting Internal Control / Segregation of Duties § 200.329

Coronavirus State and Local Fiscal Recovery Funds Assistance Listing No. 21.027 U.S. Department of Treasury Missouri Primary Care Association Criteria or specific requirement – Reporting (2 CFR 200.329) Condition – The Organization’s internal controls over compliance were not able to ensure progress...

Coronavirus State and Local Fiscal Recovery Funds Assistance Listing No. 21.027 U.S. Department of Treasury Missouri Primary Care Association Criteria or specific requirement – Reporting (2 CFR 200.329) Condition – The Organization’s internal controls over compliance were not able to ensure progress reporting required to be submitted to the pass-through entity was completed timely. Cause – The Organization’s internal controls over compliance did not ensure all grant reporting requirements were completed timely. Effect or potential effect – The Organization did not submit the required quarterly and annual performance reports in a timely manner. Questioned costs – None Context – The Organization is required to submit quarterly status reports and an annual performance report to the pass-through entity in a timely manner. Identification as a repeat finding, if applicable – Not a repeat finding Recommendation – The Organization should consider implementing a grant reporting calendar for all grants with reporting requirements. Views of responsible officials and planned corrective actions – In order for this finding not to occur in the future, the Chief Financial Officer will • Create a Grant calendar to track report due dates • Hold quarterly meetings with managers to ensure we have all reports submitted timely in the future Contact person responsible for corrective action – Toby Barnett, Chief Financial Officer Anticipated completion date – December 2025

View Audit 382245

Finding 1169290 (2025-001)

Material Weakness 2025

Monterey Peninsula Community College District

CA

Student Financial Aid Subrecipient Monitoring Significant Deficiency

Views of Responsible Officials and Corrective Action Plan Each Return of Title IV calculation will be supported by verifiable supporting reports or information demonstrating the number of calendar days used in the calculation. During the annual New Year Roll, all date fields will be manually reviewe...

Views of Responsible Officials and Corrective Action Plan Each Return of Title IV calculation will be supported by verifiable supporting reports or information demonstrating the number of calendar days used in the calculation. During the annual New Year Roll, all date fields will be manually reviewed to ensure default system values are appropriate and consistent with the academic calendar. This information will be reviewed by supervisory personnel independent of the staff member preparing the dates and calculations.

View Audit 382233

Finding 1169256 (2025-001)

Material Weakness 2025

National Safety Council

IL

Subrecipient Monitoring Reporting Internal Control / Segregation of Duties

Condition Found The Council did not submit quarterly reports to NHTSA within the required timeframe as stipulated under federal grant requirements. The reports were only provided in September 2025 after the Council became aware of the obligation and coordinated with the Contracting Officer’s Represe...

Condition Found The Council did not submit quarterly reports to NHTSA within the required timeframe as stipulated under federal grant requirements. The reports were only provided in September 2025 after the Council became aware of the obligation and coordinated with the Contracting Officer’s Representative (COR) to submit all past-due reports retroactively. Corrective Action Plan Onboarding Enhancement: Develop and implement a standardized onboarding checklist for new program managers that includes all federal reporting requirements. Compliance Monitoring: Establish quarterly internal compliance reviews to verify timely submission of required reports. Communication Protocol: Formalize communication with government agency to confirm reporting expectations at the start of each contract year. Training: Provide annual compliance training for program managers and relevant staff on federal reporting obligations. Responsible Person for Corrective Action Plan Keith Radeke, Chief Financial Officer Implementation Date of Corrective Action Plan December 18, 2025

View Audit 382219

Finding 1169208 (2025-002)

Material Weakness 2025

Betty Jean Kerr - People's Health Centers

MO

Internal Control / Segregation of Duties Special Tests & Provisions Subrecipient Monitoring

Section III Federal Award Findings and Questioned Costs Health Center Program (Community Health Centers, Migrant Health Centers, Health Care for the Homeless, and Public Housing Primary Care),) Grants for New and Expanded Services Under the Health Center Program, COVID-19 Grants for New and Expanded...

Section III Federal Award Findings and Questioned Costs Health Center Program (Community Health Centers, Migrant Health Centers, Health Care for the Homeless, and Public Housing Primary Care),) Grants for New and Expanded Services Under the Health Center Program, COVID-19 Grants for New and Expanded Services Under the Health Center Program Federal Assistance Listing Numbers: 93.224 and 93.527 Item 2025 002 Special Tests Recommendation The Center should establish a system of internal controls to ensure that all slide fee discounts are properly calculated based on family size and income. Repeat Finding Yes Action Taken The Finance Department will take the following steps to enhance the slide fee discounts process: 1. Policy Revision: the health center will revise its Sliding Fee Discount Policy to ensure alignment with HRSA requirements, including accurate discount calculation methodologies, annual updates to the sliding fee scale, and proper utilization of NextGen system functionality to support implementation 2. Staff Training: the health center will provide comprehensive training to all relevant staff on the revised Sliding Fee Discount Policy and procedures. 3. Training will emphasize correct discount calculations, required documentation, and income verification processes. A recurring training program will be implemented to ensure ongoing compliance for both new hires and existing employees. 3. Retrospective Review: the health center will conduct a retrospective review of patient files for the current fiscal year to confirm that all sliding fee discounts are appropriately supported by required documentation. Any identified discrepancies will be corrected in a timely manner. 4. Ongoing Monitoring: the health center will establish monthly internal audits of sliding fee discount determinations to monitor compliance. Audit results will be documented and reviewed by management to ensure corrective actions are taken as needed. Responsible Party: Chief Financial Officer Target Completion Date: 04/30/2026 If the Cognizant or Oversight Agency for Audit has questions regarding this plan, please call: Javier Vallejo, CFO at (314)-482-0915. Sincerely yours, Javier Vallejo Chief Financial Officer

View Audit 382078

Finding 1169205 (2025-001)

Material Weakness 2025

Cherokee County

SC

Subrecipient Monitoring § 200.332 § 200.501

Management agrees with the auditor’s finding 2025-01 Subrecipient Monitoring – Audit Verification. The following action will be taken to ensure that the Subrecipient complies with the single audit requirement: • The Finance Director, Kristie Howell, will correspond with the Subrecipient, Grassy Pond...

Management agrees with the auditor’s finding 2025-01 Subrecipient Monitoring – Audit Verification. The following action will be taken to ensure that the Subrecipient complies with the single audit requirement: • The Finance Director, Kristie Howell, will correspond with the Subrecipient, Grassy Pond Water Company, to clearly state the single audit requirement and due dates. • Cherokee County will request written correspondence from the subrecipient, outlining their course of action and timeline to complete the single audit. • Cherokee County will follow-up with Grassy Pond Water Company on a bi-weekly basis until the 2024 single audit has been submitted, and monthly to ensure that the 2025 audit is being completed as well. • All correspondence will be documented.

View Audit 382075

Finding 1169201 (2025-001)

Material Weakness 2025

South Spencer County School Corporation

IN

Procurement, Suspension & Debarment Subrecipient Monitoring § 200.1 § 200.303 § 200.317 § 200.318 § 200.319

FINDING 2025-001 Finding Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Summary of Finding: Procurement: For two vendors, the School Corporation did not obtain price or rate quotes as required. The School Corporation did not maintain documentation to support the rational...

FINDING 2025-001 Finding Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Summary of Finding: Procurement: For two vendors, the School Corporation did not obtain price or rate quotes as required. The School Corporation did not maintain documentation to support the rationale and justification to limit competition, and there was no documentation of the history of the Procurement which would include the rationale for the method of procurement, the selection of the vendor, and the basis for price. Suspension and Debarment: Two vendors were identified for which the School Corporation was required to verify the suspension and debarment status, however no such verification could be provided for audit. Contact Person Responsible for Corrective Action: Food Service Director, Joshua Deck Contact Phone Number and Email Address: (812) 649-2591 / josh.deck@sspencer.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: Procurement: The Food Service Director will maintain a binder/Google Drive folder with documentation of price and/or rate quotes and documentation of the attempts made from at least three vendors that fall within the small purchase threshold. If price and/or rate quotes cannot be obtained from at least three vendors, documentation of the reasoning will be maintained. Suspension and Debarment: The Food Service Director will ensure that all vendors are not suspended or debarred by either ensuring the suspension and debarment verbiage is included in the contracts, providing a clause to the vendor to sign that they are not suspended or debarred, or checking the SAM.gov website. Documentation of these records will be maintained for audit. Anticipated Completion Date: Effective FY 2025/2026

View Audit 382071

Finding 1169135 (2025-002)

Material Weakness 2025

Achievement First Hartford Academy, Inc.

CT

Special Tests & Provisions Subrecipient Monitoring Reporting

Audit Finding Reference: 2025-002 – Title I Grants to Educational Agencies (LEAs) – ALN #84.010 Planned Corrective Action: For FY26, the Academy has implemented a process to ensure procurement of approval signatures on Semi-Annual Time Certification Forms, which will demonstrate a review has been pe...

Audit Finding Reference: 2025-002 – Title I Grants to Educational Agencies (LEAs) – ALN #84.010 Planned Corrective Action: For FY26, the Academy has implemented a process to ensure procurement of approval signatures on Semi-Annual Time Certification Forms, which will demonstrate a review has been performed over salary allocations. Name of Contact Person: Bob Haynes Interim Controller Bobhaynes@achievementfirst.org Anticipated completion date: December 9, 2025

View Audit 381953

Finding 1169133 (2025-002)

Material Weakness 2025

Amistad Academy

CT

Special Tests & Provisions Subrecipient Monitoring Significant Deficiency

Audit Finding Reference: 2025-002 – Title I Grants to Educational Agencies (LEAs) – ALN #84.010 Planned Corrective Action: For FY26, the Academy has implemented a process to ensure procurement of approval signatures on Semi-Annual Time Certification Forms, which will demonstrate a review has been pe...

Audit Finding Reference: 2025-002 – Title I Grants to Educational Agencies (LEAs) – ALN #84.010 Planned Corrective Action: For FY26, the Academy has implemented a process to ensure procurement of approval signatures on Semi-Annual Time Certification Forms, which will demonstrate a review has been performed over salary allocations. Name of Contact Person: Bob Haynes Interim Controller Bobhaynes@achievementfirst.org Anticipated completion date: December 9, 2025

View Audit 381949

Finding 1169131 (2025-002)

Material Weakness 2025

Achievement First Brooklyn Charter Schools

CT

Subrecipient Monitoring Reporting Significant Deficiency

For FY26, the Academy has implemented a process to ensure procurement of approval signatures on Semi-Annual Time Certification Forms, which will demonstrate a review has been performed over salary allocations.

View Audit 381947

Finding 1169115 (2025-003)

Material Weakness 2025

Planned Parenthood Greater Memphis Region Dba Planned Parenthood of Tennessee and North Mississippi

TN

Subrecipient Monitoring Cash Management

Federal grants ended in FY 2025. If we receive federal reimbursement grants in the future, we will develop a better process so this does not occur.

View Audit 381894

Finding 1169114 (2025-002)

Material Weakness 2025

Catholic Charities of Central and Northern Missouri

MO

Subrecipient Monitoring

Catholic Charities had implemented procedures to ensure that monthly expenditure reports were filed by the required deadline of the 15th day of the following month. In the following fiscal year, all grant reports were submitted on time, with the exception of the first few months of the beginning of ...

Catholic Charities had implemented procedures to ensure that monthly expenditure reports were filed by the required deadline of the 15th day of the following month. In the following fiscal year, all grant reports were submitted on time, with the exception of the first few months of the beginning of the grant year when the required reporting templates were not yet available from the administering agency. These programs have since been closed; therefore, no ongoing corrective action or monitoring is required.

View Audit 381878

Finding 1169087 (2025-007)

Material Weakness 2025

Wautoma Area School District

WI

Allowable Costs / Cost Principles Subrecipient Monitoring Cash Management

2025-007 – Medical Assistance Program – Activities Allowed and Allowable Costs/Cost Principles – The District is aware of the licensing requirements and will attempt to compile the information necessary in the future. Responsible Official – Karl Morrin, District Administrator Anticipated Completion ...

2025-007 – Medical Assistance Program – Activities Allowed and Allowable Costs/Cost Principles – The District is aware of the licensing requirements and will attempt to compile the information necessary in the future. Responsible Official – Karl Morrin, District Administrator Anticipated Completion Date – This finding is expected to be resolved for the 2026 annual financial report.

View Audit 381833

Finding 1169070 (2025-001)

Material Weakness 2025

State of Hawaii Department of Transportation Administration Division

HI

Subrecipient Monitoring

Views of Responsible Officials and Planned Corrective Action

View Audit 381767

Finding 1169070 (2025-001)

Material Weakness 2025

State of Hawaii Department of Transportation Administration Division

HI

Subrecipient Monitoring

The Division has since initiated the annual risk assessments on subrecipients and expects to complete the risk assessments by December 31, 2025.

View Audit 381767

Finding 1169059 (2025-002)

Material Weakness 2025

Bethel University and Affiliates

MN

Subrecipient Monitoring Internal Control / Segregation of Duties Significant Deficiency

Student Financial Aid Cluster – Assistance Listing No. Various Recommendation: CLA recommends reviewing and updating key IT/financially relevant organization-wide policies and procedures on an annual basis. CLA also recommends the Organization review the institution's written information security pr...

Student Financial Aid Cluster – Assistance Listing No. Various Recommendation: CLA recommends reviewing and updating key IT/financially relevant organization-wide policies and procedures on an annual basis. CLA also recommends the Organization review the institution's written information security program and ensure that a qualified individual (i.e. CIO, CISO, ISO) has been identified to enforce and monitor GLBA compliance. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: During the audit period, the University experienced significant employee turnover within the Information Technology department, which contributed to delays in the review and update of key IT and financially relevant policies and procedures. A new Chief Information Officer (CIO) has since been hired and has begun addressing the gaps noted in the finding. Under the CIO’s leadership, the University is actively reviewing and updating organization-wide IT policies, procedures, and the written information security program. The CIO is also assuming responsibility for enforcing and monitoring GLBA compliance going forward. Name(s) of the contact person(s) responsible for corrective action: John Honchell, CIO Planned completion date for corrective action plan: May 31, 2026

View Audit 381755

Corrective Action Plans

Filters