Finding Text
Gramm-Leach-Bliley Act (GLBA) Compliance DEPARTMENT OF EDUCATION
ALN #: : 84.268, 84.063, 84.007, and 84.038
Federal Award Identification #: 2022-2023 Financial Aid Year
Condition: The College did not sufficiently comply with all of the updated requirements of GLBA.
Criteria: 16 CFR 314.4
Questioned Costs: $0
Context: The College has not updated the review of vendors to include the updated provisions of GLBA. Additionally, the College's written information security program does not identify all the updated components of GLBA. Finally, the written annual report does not address all the updated components of the legislation.
Cause: The College has not documented all updated policies for the revisions of GLBA.
Effect: The College has not fully documented each updated area of GLBA, which may lead to unintended exposure of student data.
Identification as repeat finding, if applicable: Not applicable
Recommendation: We recommend the College update all policies and procedures to address the revisions of GLBA.
Views of Responsible Officials and Planned Corrective Action: Management agrees with the finding. See corrective action plan.