2024-003 Student Financial Aid Cluster – Assistance Listing 84.063, 84.268, 84.007, and 84.033
Recommendation: We recommend reviewing and implementing GLBA guidelines in order to explain the College’s information-sharing practices to their customers and to safeguard sensitive data, including student financial information. We also recommend designating a qualified individual responsible for implementing and monitoring the institution’s information security program.
Explanation of disagreement with audit finding: There is no disagreement with the audit finding.
Action taken in response to finding:
The College is working toward documenting its policy and procedures with the proper oversight and its continual monitoring of all GLBA guidelines and the sensitive student data therein. While the College has been in the practice of safeguarding all its sensitive student data and adhering to all the GLBA guidelines. It has not been properly documented. The qualified designated individual responsible for the implementation and continued monitoring is Jason Fried, College Director of Service Delivery and IT Compliance.
Name(s) of the contact person(s) responsible for corrective action:
Sara E. Gorton, CPA, Vice President for Business and Financial Affairs
Holmer A. Avellan, CPA, CFE, Controller
Jaime Hahn, Senior Auditor
Stephen Clark, College Administrative Director of Infrastructure Services
Jason Fried, College Director of Service Delivery and IT Compliance
Planned completion date for corrective action plan:
August 31, 2025
If the Department of Education has questions regarding this plan, please call:
Sara Gorton, CPA, VP of Finance and Business Affairs
631-451-4223