Finding Text
Gramm-Leach-Bliley Act (GLBA) Compliance Significant Deficiency
DEPARTMENT OF EDUCATION
ALN #: 84.268, 84.063, 84.007, and 84.033-Student Financial Assistance Cluster
Federal Award Identification #: 2022-2023 Financial Aid Year
Condition: Emmaus Bible College did not sufficiently comply with all the requirements of GLBA.
Criteria: 16 CFR 314.4
Questioned Costs: $-0-
Context: Emmaus Bible College has not sufficiently documented its security risk assessment, implemented all required safeguards under the revised legislation, implemented multi-factor authentication on all systems containing personally identifiable information (PII), implemented policies and procedures that support employee and information security staff training, and provided a written, annual report to the board.
Cause: Emmaus Bible College has made progress in addressing and documenting compliance with the requirements of GLBA but has remaining areas to improve or fully implement.
Effect: Emmaus Bible College has not adequately addressed the requirements of GLBA, which may lead to unintended exposure of student information to security risks.
Identification as repeat finding, if applicable: Not applicable
Recommendation: We recommend Emmaus Bible College allocate sufficient resources to address all requirements of GLBA.
Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.