Finding Text
Finding 2023-003 - Significant Deficiency - Gramm-Leach Bliley Act( GLBA) - Student Information
Security
Criteria: Management is required to explain their information-sharing practices to their customers and to
safeguard sensitive data, as dictated by GLBA.
Condition: The College did not implement the GLBA policy.
Cause: Due to staffing turnover this policy was not enacted.
Effect or potential effect: Possible effect is that the College does not have the proper controls over
information-sharing and safeguard of sensitive data of customers.
Recommendation: The College should create and adopt the GLBA policy.
Views of responsible officials: See attached