Inappropriate exposure of confidential student records

Control

Documented Policies and Procedures (e.g., access, disclosure, retention, disposal, etc.)