Release to the public or to an unauthorized entity could result in minor financial loss or moderate embarrassment or violation of the Privacy Protection Act. Such disclosure could result in serious loss or embarrassment or could adversely affect the department, the College or the subject of the information. Risk Measures 1 . The frequency and scope of reviews provide College leadership with comprehensive evaluations on a current basis. Reviews are occasionally conducted and offer a reasonable evaluation of the internal control and operating environment.
Reviews are rare or non-existent and the scope is minimal.
No instances of fraud, computer abuse or loss of data have occurred during the last 24 months. Internal controls are in place and effective. Instances of fraud, computer abuse or loss of data have occurred during the last 24 months. Internal controls that were lacking have been installed and are being monitored for effectiveness. Instances of fraud, computer abuse or loss of data have occurred during the last 24 months.