Management has already written the basic Security of information Plan as required by 6 C.F.R. 313.3 and 313.4. This plan was sent to the Federal Student Aid (FSA) Cybersecurity Team (CCT). In July 18, 2024, after closing of the fiscal year, the CCT sent a letter stating they had reviewed the university submission and has determined that the CAP acceptably addresses the auditor finding for audit year 2023. Contracting of an independent third party to carry out a NIST CS IT Risk Assessment and Penetration Testing & vulnerability Assessment for PUCPR was completed. GM Security Technologies, is a qualified Security Assessor Company (QSAC) certified by the PCI Security Council. The initial report for a Pen Test & Vulnerability Assessments report by April 21st,2025. When evaluation is completed, GM Sectec will perform a retest to high/critical remediated vulnerabilities and a guide roadmap mapped to NIST Cyber Security Framework. These assessments are planned to be completed by June 2025