SIGNIFICANT DEFICIENCY
Finding 2024-001 - 84.268, 84.063, 84.033, 84.007 Student Financial Aid Cluster Federal Agency - U.S. Department of Education
Grant Period - Year ended August 31, 2024
2024-001 Recommendation: The College should work to implement a standardized and detailed risk management...
SIGNIFICANT DEFICIENCY
Finding 2024-001 - 84.268, 84.063, 84.033, 84.007 Student Financial Aid Cluster Federal Agency - U.S. Department of Education
Grant Period - Year ended August 31, 2024
2024-001 Recommendation: The College should work to implement a standardized and detailed risk management framework, such as those provided by National Institute of Standards and Technology (NIST). Risk assessment documentation should include detailed information regarding current procedures in place, justifications for scoring, safeguards for each identified risk, and remediation plans. As part of this process, the College should then review the current policies and procedures at least annually to determine if any updates should be made.
Corrective Action Plan: The College agrees with the finding and as of March 2025 the College has contracted with an outside third party to perform an formal risk assessment. Once the risk assessment has been performed the College will work on ensuring the appropriate safeguards are in place and remediation plans identified. Additionally policies continue to be reviewed and updated through the governance process at the College.
FLCC Responsible Party: Jason Tack, VP of Finance and Administration, jason.tack@flcc.edu, 585-785-1208. Audit finding will be corrected by 8/31/2025.