EIN: 746001582
UEI: KK7FY72Q8B41
Audited by: Garza/Gonzalez & Associates, LLC
Oversight agency: 84 [Department of Education]
View federal awards & risk assessment →
Data as of September 7, 2026
Management decision deadline — for entities that funded this organization
The FAC accepted this audit on February 19, 2026. Under 2 CFR 200.521(d), a pass-through entity that provided federal funds to this organization for this audit period must issue a management decision on these findings by August 19, 2026 (25 days ago).
What is a management decision? →Recommendation: The College should ensure all pertinent staff are sufficiently trained and knowledgeable on the requirements of the Enrollment Reporting requirements. Additionally, the College should revise current or implement new policies and procedures to strengthen its controls to ensure that all status changes are reported accurately and in a timely manner to NSLDS.
Show full finding ▾Hide full finding ▴Recommendation: The College should ensure all pertinent staff are sufficiently trained and knowledgeable on the requirements of the Enrollment Reporting requirements. Additionally, the College should revise current or implement new policies and procedures to strengthen its controls to ensure that all status changes are reported accurately and in a timely manner to NSLDS.
9/30/2026
FAC accepted this audit on February 26, 2025 — management decision was due August 26, 2025.
FAC accepted this audit on March 4, 2024 — management decision was due September 4, 2024.
FAC accepted this audit on January 19, 2023 — management decision was due July 19, 2023.
FAC accepted this audit on February 8, 2022 — management decision was due August 8, 2022.
FAC accepted this audit on December 28, 2020 — management decision was due June 28, 2021.
FAC accepted this audit on February 10, 2020 — management decision was due August 10, 2020.
Finding 2019-001 ? Gramm Leach Bliley Act ? Risk Assessment of the Information System Federal Agency: U.S. Department of Education CFDA Number: 84.007; 84.033; 84.063 Program Name: Student Financial Assistance Program Cluster Type of Finding: Special Tests and Provisions ? Non-Compliance Criteria The Gramm-Leach-Bliley Act (Public Law 106-102) requires the College to comply with its provisions. The Act identifies that the College should designated an individual to coordinate the information security program, performed a risk assessment over their information system, and document safeguards for identified risks. Condition For fiscal year 2019, the College had not performed the following: designated an individual to coordinate the information security program; a risk assessment over their information system that addresses the three required areas noted in 16 CFR 314.4 (b); nor documented safeguards for identified risks. Context A risk assessment over the information system was not performed during fiscal year 2019. Effect Management could be unaware of vulnerable areas within their information system that could lead to data breaches. Cause The College was unaware of the risk assessment requirement as listed by the Gramm-Leach-Bliley Act. Recommendation We recommend that an individual is identified to coordinate the information security program, perform a risk assessment over the information system, and document safeguards for any identified risks.
Show full finding ▾Hide full finding ▴Finding 2019-001 ? Gramm Leach Bliley Act ? Risk Assessment of the Information System Federal Agency: U.S. Department of Education CFDA Number: 84.007; 84.033; 84.063 Program Name: Student Financial Assistance Program Cluster Type of Finding: Special Tests and Provisions ? Non-Compliance Criteria The Gramm-Leach-Bliley Act (Public Law 106-102) requires the College to comply with its provisions. The Act identifies that the College should designated an individual to coordinate the information security program, performed a risk assessment over their information system, and document safeguards for identified risks. Condition For fiscal year 2019, the College had not performed the following: designated an individual to coordinate the information security program; a risk assessment over their information system that addresses the three required areas noted in 16 CFR 314.4 (b); nor documented safeguards for identified risks. Context A risk assessment over the information system was not performed during fiscal year 2019. Effect Management could be unaware of vulnerable areas within their information system that could lead to data breaches. Cause The College was unaware of the risk assessment requirement as listed by the Gramm-Leach-Bliley Act. Recommendation We recommend that an individual is identified to coordinate the information security program, perform a risk assessment over the information system, and document safeguards for any identified risks.
Planned Corrective Action: Finding 2019-001 -Gramm Leach Bliley Act - Risk Assessment of the Information System Condition: For fiscal year 2019, the College had not performed the following: designated an individual to coordinate the information security program; a risk assessment over their information system that addresses the three required areas noted in 16 CFR 314.4 (b); nor documented safeguards for identified risks. Views of responsible officials: The College has safeguards in place to mitigate cyber security risks. These include: ? Malware/Virus end point protection ? Content Filtering Devices ? Firewalls ? Contract with third party company for 24-hour internet traffic monitoring ? Third party contract for incident response in case of security breach ? Cyber security insurance ? College refreshes network equipment (firewalls, switches, and routers) every 4 years Now that the College has been made aware of the Gramm Leach Bliley Act Safeguard rules, the College will be implementing the corrective action plan as listed below. Corrective Action Plan: Management agrees with the recommendation and is currently working on hiring and Information Security Officer (ISO). The ISO will be the designated individual that will coordinate the College?s information security program and perform a risk assessment over the information system that will address the three required areas noted in 16 CFR 314.4. The ISO will be responsible for assessing documented safeguards in order to identify potential risks. Anticipated completion date: The College anticipates completing this process by July 31, 2020. Contact Person: Dr. Fred Solis, Vice President of Student Success and Enrollment Mr. Cesar Vela, CPA, Chief Financial Officer Mr. Luciano Ramon, Information Technology and Safety Officer Mr. Steven Aguilar, Director of Financial Aid
FAC accepted this audit on January 20, 2019 — management decision was due July 20, 2019.
FAC accepted this audit on January 23, 2018 — management decision was due July 23, 2018.
GSA_MIGRATION
Show full finding ▾Hide full finding ▴GSA_MIGRATION
GSA_MIGRATION
FAC accepted this audit on January 7, 2017 — management decision was due July 7, 2017.
Data source: This information comes from the Federal Audit Clearinghouse, the official repository of Single Audit data. All data is public domain. Verify this organization's audit history at fac.gov.
Browse other Single Audit organizations in Texas →
Track your findings and corrective action plans across audit cycles.
Start tracking findings →Add it to a monitored group and get alerted when a new audit, finding, repeat finding, or management-decision deadline shows up — instead of checking back.
Checking several at once? Portfolio view →
© 2026 Single Audit Intelligence. All data is public domain.
