EIN: 510175975
UEI: WTCBKJA8KZ97
Data as of August 23, 2026
Management decision deadline — for entities that funded this organization
The FAC accepted this audit on February 25, 2025. Under 2 CFR 200.521(d), a pass-through entity that provided federal funds to this organization for this audit period must issue a management decision on these findings by August 25, 2025 (363 days ago).
What is a management decision? →Responsible Official’s Response and Corrective Action Planned: The Organization agrees with the finding and will continue to work on the plan that addresses the required criteria.
Show full finding ▾Hide full finding ▴Responsible Official’s Response and Corrective Action Planned: The Organization agrees with the finding and will continue to work on the plan that addresses the required criteria.
13 - 17. Continuing security program requirements 16CFR314.4 to 16CFR314.4(e-i) – Open with an estimated completion dates of March 2023 to August 31, 2025
2023-001
FAC accepted this audit on December 28, 2023 — management decision was due June 28, 2024.
Responsible Official’s Response and Corrective Action Planned: The Organization agrees with the finding and will implement a written policy that addresses the required criteria.
Show full finding ▾Hide full finding ▴Responsible Official’s Response and Corrective Action Planned: The Organization agrees with the finding and will implement a written policy that addresses the required criteria.
1. A College-wide Information Security Committee comprised of the three Vice Presidents and Deans of Academic Affairs of the three Campus Centers has been designated by the President to enforce the information security program in compliance with (16 CFR 314.4 (a)). ■ Dr. John Guzman, Vice President and Dean of Academic Affairs, Brooklyn Campus ■ Prof. Irving Ramirez, Vice President and Dean of Academic Affairs, Bronx Campus ■ Prof. Moises Pereyra, Vice President and Dean of Academic Affairs, Manhattan Campus 2. The College will ensure its information security program will be based on a periodic risk assessment every two years, during the month of July, that identifies degrees of internal and external risks to confidentiality and integrity of information about students, potential students or former students, that could result in unauthorized disclosure, alteration, misuse or otherwise compromise them. 3. The College will immediately design and implement safeguards to control risks that may have been identified through risk assessment (16 CFR 314.4 (c)). 4. The College's information security program will ensure the implementation of the minimum safeguards identified in 16 CFR 314.4 (c) (1 ): including but not limited to: (a) periodically review access controls; (b) conduct periodic inventory of data, where collected and stored; (c) encrypt the information; (d) implement multifactor authentication for anyone accessing data; (e) dispose of student information securely; (f) maintain a log of authorized user's activity.
FAC accepted this audit on March 17, 2021 — management decision was due September 17, 2021.
Finding No. 2020-001: Return of Title IV Funds as per Federal Student Aid Regulations
Show full finding ▾Hide full finding ▴Finding No. 2020-001: Return of Title IV Funds as per Federal Student Aid Regulations
Boricua College
FAC accepted this audit on December 2, 2018 — management decision was due June 2, 2019.
GSA_MIGRATION
Show full finding ▾Hide full finding ▴GSA_MIGRATION
GSA_MIGRATION
2017-001
FAC accepted this audit on March 28, 2018 — management decision was due September 28, 2018.
GSA_MIGRATION
Show full finding ▾Hide full finding ▴GSA_MIGRATION
GSA_MIGRATION
Data source: This information comes from the Federal Audit Clearinghouse, the official repository of Single Audit data. All data is public domain. Verify this organization's audit history at fac.gov.
Track your findings and corrective action plans across audit cycles.
Start tracking findings →Monitor subrecipient audit findings and compliance status.
Start monitoring →© 2026 Single Audit Intelligence. All data is public domain.