Finding 6792 (2023-001)

Significant Deficiency
Requirement
N
Questioned Costs
-
Year
2023
Accepted
2023-12-28
Audit: 8739
Organization: Boricua College, Inc. (NY)

AI Summary

  • Answer: The Organization acknowledges the finding and agrees with the need for improvement.
  • Trend: There is a consistent need for clear policies to meet compliance requirements.
  • List: A written policy will be developed to address the identified criteria.

Finding Text

Responsible Official’s Response and Corrective Action Planned: The Organization agrees with the finding and will implement a written policy that addresses the required criteria.

Corrective Action Plan

1. A College-wide Information Security Committee comprised of the three Vice Presidents and Deans of Academic Affairs of the three Campus Centers has been designated by the President to enforce the information security program in compliance with (16 CFR 314.4 (a)). ■ Dr. John Guzman, Vice President and Dean of Academic Affairs, Brooklyn Campus ■ Prof. Irving Ramirez, Vice President and Dean of Academic Affairs, Bronx Campus ■ Prof. Moises Pereyra, Vice President and Dean of Academic Affairs, Manhattan Campus 2. The College will ensure its information security program will be based on a periodic risk assessment every two years, during the month of July, that identifies degrees of internal and external risks to confidentiality and integrity of information about students, potential students or former students, that could result in unauthorized disclosure, alteration, misuse or otherwise compromise them. 3. The College will immediately design and implement safeguards to control risks that may have been identified through risk assessment (16 CFR 314.4 (c)). 4. The College's information security program will ensure the implementation of the minimum safeguards identified in 16 CFR 314.4 (c) (1 ): including but not limited to: (a) periodically review access controls; (b) conduct periodic inventory of data, where collected and stored; (c) encrypt the information; (d) implement multifactor authentication for anyone accessing data; (e) dispose of student information securely; (f) maintain a log of authorized user's activity.

Categories

No categories assigned yet.

Other Findings in this Audit

  • 6793 2023-001
    Significant Deficiency
  • 6794 2023-001
    Significant Deficiency
  • 6795 2023-001
    Significant Deficiency
  • 583234 2023-001
    Significant Deficiency
  • 583235 2023-001
    Significant Deficiency
  • 583236 2023-001
    Significant Deficiency
  • 583237 2023-001
    Significant Deficiency

Programs in Audit

ALN Program Name Expenditures
84.063 Federal Pell Grant Program $2.04M
84.268 Federal Direct Student Loans $1.42M
84.425E Education Stabilization Fund $458,084
84.007 Federal Supplemental Educational Opportunity Grants $234,953
84.033 Federal Work-Study Program $61,149