Finding 2024-003 Student Financial Aid Cluster, CFDA # 84.007, 84.033, 84.063, 84.268
Condition: The College does not have a written security program that address the seven elements as described in 16 CFR 314.4 (b) as of June 30, 2024.
Corrective Action Plan: Objective:
To ensure the development and implementation of a written Student Information Security Plan.
Corrective Actions:
1. Develop and implement a written security program in line with the requirements outlined within 16 CFR 314.4 (b)
2. Assign a Security Program Manager and conduct a risk assessment
3. Update and enforce data security policies
Monitoring and Follow-Up:
• The College’s Security Program Manager will be responsible for ensuring the implementation of the CAP and will provide monthly progress reports to senior management.
• Regular internal audits will assess compliance with the security program, with any necessary updates or changes implemented in a timely manner.
Person(s) Responsible for Corrective Action Plan: Jamieta Hoskins, Director of Financial Aid
Anticipated Completion Date for Corrective Action Plan: February 28, 2025