FERPA Audit

Are you a service provider to educational institutions? Are you an educational institution or agency that receives federal funding? The Family Educational Rights and Privacy Act (FERPA) is a United States federal law that governs the access and privacy of educational information and records. The educational records that a covered entity or business associate creates, receives, maintains, or transmits must be protected against reasonably anticipated threats, hazards, and impermissible uses and/or disclosures. FERPA compliance protects the confidentiality, integrity, and availability of educational records.

FERPA Audit

Why Work With KirkpatrickPrice?

KirkpatrickPrice is committed to helping your organization protect educational records. When you partner with KirkpatrickPrice, you work with Information Security Auditors who are senior-level experts, holding certifications like CISSP, CISA, CISM, and CRISC.

Our audit delivery tool, the Online Audit Manager, streamlines the audit process, helps reduce the complexity of compliance efforts, and gives our clients the ability to combine multiple audit frameworks into one audit. We’ve spent over a decade honing this process so that clients can complete one audit process while receiving multiple reports.

Connect with us today to learn more about the time it takes to complete a FERPA audit and take part in a free demo of the Online Audit Manager.

FERPA FAQs

How much does a FERPA audit cost?

Pricing for a FERPA audit depends on scoping factors, including business applications, technology platforms, physical locations, third parties, number of records, and audit frequency. Pricing will also vary based on the inclusion of a gap analysis, or inclusion of additional remediation time.

How long does a FERPA audit take to complete?

The average FERPA audit, using KirkpatrickPrice’s process, is completed in 12 weeks. The engagement begins with scoping procedures, then moves into an onsite visit, evidence review, report writing, and concludes with the delivery of a report.

What do I receive when my FERPA audit is complete?

A FERPA audit culminates in a report, written by our in-house Professional Writing team. The report will provide stakeholders with independent third-party verification regarding the fairness and suitability of administrative, physical, and technical safeguards relative to information security controls and practices.

How long is a FERPA report valid?

The opinion stated in a FERPA report is valid for twelve months following the date the report was issued.

Who is involved in a FERPA audit?

Team members involved in a FERPA audit could come from anywhere in your organization, ranging from human resources to IT to administrators – anyone with the appropriate responsibilities for and knowledge of the matters concerned in the audit.

Click for More FERPA FAQs

What types of controls are assessed during a FERPA audit?

How Could a FERPA Report Benefit Your Organization?

FERPA compliance affirms the security of your services and gives your organization the ability to provide clients and regulators with evidence from an auditor who has actually seen your internal controls in place and operating. FERPA compliance can help your organization maintain loyal clients and attract new ones, operate more efficiently, avoid fines for non-compliance or a loss of federal funding, and most importantly: assure clients and regulators that students’ personal data is protected.

FERPA Compliance