Gramm-Leach-Bliley Act (GLBA) Compliance Planned Corrective Action: Southwestern Christian University recognizes the importance of full compliance with the Gramm-Leach-Bliley Act (GLBA) and the updated Safeguards Rule. The University will continue working to complete and document the remaining requirements of its written information security program, including risk assessment and mitigation, multifactor authentication, security monitoring, employee training, service provider assessments, incident response procedures, and ongoing oversight. The University will work closely with Nomerel, our IT specialist, along with the Qualified Individual and appropriate University personnel, to review current safeguards, identify remaining gaps, and implement the necessary policies, procedures, and controls to achieve and maintain compliance. The University will also ensure that the required annual assessment and reporting of the information security program are completed and documented. The University will monitor compliance on an ongoing basis and update its information security program as necessary to address changes in technology, threats, and regulatory requirements. Person Responsible for Corrective Action Plan: Dustin Sells (VP of Academic Affairs) - Qualified Individual, in coordination with Mark Arthur (Chief Financial Officer), Nomerel IT personnel, and University Administration. Anticipated Date of Completion: June 30, 2027