Inadequate security of student records

Control

Documented policies & procedures