School, Lender, GA, and State Enrollment Forms - Public Institutions

7/1/2024

INSTRUCTIONS:

To designate a different person to sign your SAIG Enrollment documents, complete the information on the Designation of Authorizing Official form and have the President or CEO of the eligible organization (i.e., postsecondary educational institutions, State grant agencies, institutional third-party servicers FFELP Guaranty Agencies and Guaranty Agency Servicers, Federal Loan Servicers, FFELP Lenders and Lender Servicers) sign the form.

Note: The U.S. Department of Education (Department) will not accept font-based or stamped signatures. Acceptable signatures include one of the following: (1) A wet signature that was drawn in ink and sent in its original format; (2) A wet signature that was drawn in ink and then digitized (for example, drawing your signature and taking a photo of it and placing that photo in the signature block); or (3) A digital signature that was drawn with your hand using a pointing device (like a digital pen, mouse, or trackpad) or a finger (like on a smartphone laptop). Applications submitted after the OMB Expiration Date noted on the bottom of each page will not be accepted.

Certification of the President/CEO or Designee

The Department is required to collect the signature of the chief officer of the organization (President or CEO that is currently on file with ED) for assigning a designee. A copy of each signed and dated statement must be maintained by your organization.

Sending Designee Signature Pages

The Designation of Authorizing Official form must be printed on paper, completed, and submitted. Completed and signed designee pages must be
emailed, faxed, or mailed to FPS Help Desk.

Email: support@fps.ed.gov

Fax: 319-665-7662

Mail:

FPS Help Desk

2000 James Street, Suite 201

Coralville, IA 52241-1882

PLEASE NOTE: Your enrollment request will not be processed until FPS Help Desk receives all certification statements, completed, and signed.

Designation of Authorizing Official

Current Designee:

If you as the President or CEO wish to designate someone other than yourself to sign SAIG enrollment applications, you may do so by completing the designation statement below and signing Box 1. Have your designee complete and sign Box 2.

If you do not want to assign a designee, leave Box 1 empty and sign Box 2.

I hereby designate with the title , to be my

(Name of New Designee - Required) (Position Title of New Designee - Required)

responsible authorizing official for all future Federal Student Aid System enrollment applications. All related responsibilities of the President/ CEO shall be carried out by this designee. As President/CEO, I agree to assume the responsibility for such actions associated with this and future enrollment agreements. This designation is effective as of the date signed below.

Note: Authorized Official name and signature must match information on file with ED.

Box 1 SAIG Customer Name (Required):

President/CEO Title

(Printed name of President/CEO – Required) (Position title – Required)

Signature Date

(Original signature must be submitted. Stamped or electronic signatures will not be accepted. Required)

Responsibilities of the President/CEO or Designee

As the President/CEO or Designee, I certify that:

• I or my designee will notify FPS Help Desk within one business day, by email at support@fps.ed.gov or call
  1-800-330-5947 when any person no longer serves as a designated authorizing official, Primary DPA, or Non-Primary DPA.

• I will not permit unauthorized use or sharing of SAIG passwords or codes that have been issued to anyone at my organization.

• Each person who is a SAIG DPA for my organization has read and signed a copy of “Step Three: Responsibilities of the Primary and Non-Primary Destination Point Administrator.”

• Each person who is a SAIG DPA for my organization has made a copy of the signed Step Three document for their own files and a copy is maintained at my organization.

• My organization has provided security due diligence and verifies that administrative, operational, and technical security controls are in place and are operating as intended. Additionally, my organization verifies that it performs appropriate due diligence to ensure that, at a minimum, any employee who has access to FSA ISIR data meets applicable state security requirements for personnel handling sensitive personally identifiable information.

• My organization has ensured the standards for protecting federal tax information (FTI) have been implemented according to Internal Revenue Code (IRC) 26 U.S.C. §6103 – Confidentiality and disclosure of returns and return information and pursuant to 20 U.S.C.§483 of the Higher Education Act, as amended – Use of FAFSA^® data and FTI data. I further acknowledge violations of the IRC may lead to criminal and/or civil penalties pursuant to 26 U.S.C. 7213; 7213A; and §7431. Penalties apply to willful unauthorized disclosure and inspection of tax return or return information with punishable fines or imprisonment. Additionally, I further acknowledge a taxpayer may bring civil action for damages against an officer or employee who has inspected or disclosed, knowingly or by reason of negligence, such taxpayer’s tax return or return information in violation of any provision of IRC §6103.

• I understand the Secretary may consider any unauthorized disclosure or breach of student records and student applicant information as a demonstration of a potential lack of administrative capability as stated in 34 C.F.R. § 668.16. I further understand that in the event of an unauthorized disclosure or breach of student applicant information or other sensitive information (such as personally identifiable information), the DPA or the Qualified Individual identified under 16 C.F.R. Part 314 must notify Federal Student Aid within 24 hours after the incident is known or identified for postsecondary educational institutions at https://fsapartners.ed.gov/title-iv-program-eligibility/cybersecurity/cybersecurity-breach-intake and for all other by notifying Federal Student Aid at support@fps.ed.gov.

• I understand that my organization must cooperate with Federal Student Aid and provide any requested information regarding an unauthorized disclosure or breach as well as report any breach that occurs at my organization’s third-party providers that maintain, store or otherwise utilize the data.

• I understand that I am responsible for the information security of any information provided by Federal Student Aid that may be maintained by, stored by or shared with any third-party entity.

• I have ensured that the Standards for Safeguarding Customer Information (as the term customer information applies to my institution – See the Glossary of the SAIG Enrollment Form), 16 C.F.R. Part 314, issued by the Federal Trade Commission (FTC), as required by the Gramm-Leach-Bliley (GLB) Act, P.L. 106-102 have been implemented and understand that these Standards provide, among other things, that I implement the following and I understand that failure to implement the requirements of the GLB Act may be considered a lack of administrative capability under 34 C.F.R. § 668.16 by the Secretary. I further acknowledge that my responsibility to safeguard customer information extends beyond Title IV, HEA program recipients:

• Develop, implement, and maintain a comprehensive information security program that is written in one or more readily accessible parts that meets the requirements for an information security program in 16 C.F.R. Part 314.

• Designate a qualified individual responsible for overseeing an implementing my institution’s information security program and enforcing my institution’s information security program in compliance with 16 C.F.R. 314.4(a).

• Base my institution’s information security program on a risk assessment that identifies reasonably foreseeable internal and external risks to the security, confidentiality, and integrity of customer information (as the term customer information applies to my institution – See Glossary) that could result in the unauthorized disclosure, misuse, alteration, destruction, or other compromise of such information, and assesses the sufficiency of any safeguards in place to control these risks as required under 16 C.F.R. 314.4(b).

• Design and implement safeguards to control the risks my institution identifies through risk assessment that meet the requirements of 16 C.F.R. 314.4(c)(1) through (8).

• Regularly test or otherwise monitor the effectiveness of the safeguards my institution has implemented that meet the requirements of 16 C.F.R. 314.4(d).

• Implement policies and procedures to ensure that personnel are able to enact my institution’s information security program and meet the requirements of 16 C.F.R. 314.4(e)(1) through (4).

• Oversee my institution’s service providers (See Glossary) by meeting the requirements of 16 C.F.R. 314.4(f)(1) through (3).

• Evaluate and adjust my institution’s information security program in light of the results of the required testing and monitoring required by 16 C.F.R. 314.4(d); any material changes to my institution’s operations or business arrangements; the results of the required risk assessments under 16 C.F.R. 314.4(b)(2); or any other circumstances that I know or have reason to know may have a material impact on my institution’s information security program as required by 16 C.F.R. 314.4(g).

• Establish an incident response plan that meets the requirements of 16 C.F.R. 314.4(h).

• Require my institution’s Qualified Individual to report regularly and least annually to those with control over my institution on my institution’s information security program as required by 16 C.F.R. 314.4(i).

• I have signed this certification below and sent the original to the Department. I have retained a copy of this certification at the organization. My signature below affirms that I have read these responsibilities and agree to abide by them.

Box 2 New Designee Title

(Printed name of the New Designee – Required) (Position title – Required)

Signature Date

(Original signature must be submitted. Stamped or electronic signatures will not be accepted. – Required)

Name of School or Agency (Required):

Office Use Only

Customer Number_________________________________________________________________

TG/FT Number____________________________________________________________________