Financial Statement Findings 2025-01 The District’s control procedures over IT systems and data were not sufficient, which increases the risk that the District may not adequately protect those systems and data. Contact: Thomas Thompson, Chief Information Officer Anticipated completion date: June 30,...
Financial Statement Findings 2025-01 The District’s control procedures over IT systems and data were not sufficient, which increases the risk that the District may not adequately protect those systems and data. Contact: Thomas Thompson, Chief Information Officer Anticipated completion date: June 30, 2026__________________________________________ Corrective Action Plan: The District will prioritize the development and formal documentation of IT policies and procedures addressing logical access controls, system security, and vendor management. These policies will align with recognized industry standards and will include processes to ensure consistent implementation and compliance. a) User access assignment and review b) Timely removal of access c) Enhance verification of assignment through available and to-be-developed reporting tools d) The District will review and enhance formal procedures for evaluating, awarding, and monitoring IT vendor contracts. This will include documenting vendor qualifications, defining security expectations in contracts, and performing periodic reviews to ensure vendors comply with contractual and security requirements. e) Management will implement supervisory review controls to ensure adherence to IT policies and procedures. Federal Award Findings 2025-101 The District did not timely report required student information to the federal agency, risking students not being asked to repay financial assistance. Contact: Sharon Montoya, Director, Financial Aid & Veteran Services Anticipated completion date: June 30, 2026__________________________________________ Corrective Action Plan: The District will implement procedures to ensure all student enrollment status changes are reported to the National Student Loan Data System (NSLDS) within the required 60-day timeframe. This includes establishing a standardized reporting schedule and utilizing system-generated reports to monitor pending status changes. a) Assign monitoring and oversight responsibilities in the Financial Aid department b) Implement ongoing monitoring control within the Financial Aid department c) Monthly inquiring into the Financial Aid department process by Fiscal Control