2024-004 Significant Deficiency: Gramm-Leach-Bliley Act (GLBA) (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268) (Repeat Finding: 2023-002)
Name of Contact Person
Casey Reagan, Registrar, and Chris Summey, Head of our IT Department, are the designated employees in cha...
2024-004 Significant Deficiency: Gramm-Leach-Bliley Act (GLBA) (U.S. Department of Education, William D. Ford Direct Loan Program, ALN #84.268) (Repeat Finding: 2023-002)
Name of Contact Person
Casey Reagan, Registrar, and Chris Summey, Head of our IT Department, are the designated employees in charge of overseeing the GLBA Policy
Corrective Action Planned
During the audit, it was noted that the University’s Gramm-Leach-Bliley Act Policy did not fully address all of the requirements as described by 16 CFR 314.4. In addition, the application of the comprehensive information security program was not effectively administered by the University during the 2024 year. A new policy was put into place during June 2024. During the 2023-24 academic year, the policy was being updated to be compliant. Due to this finding in 2022-23, the FSA Cyber Compliance Team reached out to Tusculum and Tusculum provided the Corrective Action Plan and new policy. On August 1st, 2024, Tusculum received word that the CAP acceptably addressed the GLBA finding.
Anticipated Completion Date
08/1/2024