(AP) - After two years of digging, the NCAA hit Miami with the four words that no school wants to hear: "Lack of institutional control." And now, the Hurricanes have 90 days to prepare their rebuttal - or harsh penalties might await. With Miami President Donna Shalala firing back at the governing body of college athletics for the second time in as many days, the Hurricanes got their long-awaited notice of allegations on Tuesday, the worst charge being that the school failed to monitor conduct of a rogue booster who provided cash, gifts and other items to players on the football and men's basketball teams. "We deeply regret any violations," Shalala wrote in the university's response, "but we have suffered enough." The NCAA did not comment Tuesday, one day after it revealed it was erasing some elements of its case against Miami because the information was obtained through an alliance forged with Maria Elena Perez, the attorney for former booster and convicted felon Nevin Shapiro, whose claims are at the center of this scandal. A person familiar with the situation told The Associated Press about the lack of institutional control charge, and that some former members of Miami coaching staffs were named in the notice of allegations, including Missouri basketball coach Frank Haith, who was with the Hurricanes from 2004-11. After his team beat No. 5 Florida on Tuesday night, Haith confirmed that he received the notice of allegation. "There was no unethical conduct in my notice of allegation," Haith said. Haith is alleged of failing "to promote an atmosphere for compliance," a charge specific to how he handled things when Shapiro allegedly wanted money in exchange for not going public with accusations that he paid to help the Hurricanes recruit a player. The Hurricanes already have self-imposed several sanctions, including sitting out two bowl games and a conference football championship game. Shalala said Monday - when she first lashed out at the botched NCAA probe - that she believes those punishments should be enough, and reiterated the same Tuesday. The NCAA enforcement staff acknowledged to the University that if Nevin Shapiro, a convicted con man, said something more than once, it considered the allegation 'corroborated' - an argument which is both ludicrous and counter to legal practice. There's no shortage of possible penalties that Miami may still face. Some examples: Wins can be purged from the record books, scholarships may be reduced, more bowl games may be missed and limits could be placed on games being televised. It's also possible that no further penalties would be assessed. Miami told the NCAA in September 2010 that Shapiro - serving a 20-year prison term for masterminding a $930 million Ponzi scheme - made allegations to the school against former players. Nearly 2½ years later, Miami is now just entering the sanctions phase. It typically takes about three months to get a hearing, and then several more weeks - at least - often pass before penalties are handed down. The notice of allegations was nearly delivered last month. That's when the NCAA acknowledged that some mistakes were made by its enforcement department through depositions that Perez used subpoena power to arrange under the guise of it being part of Shapiro's bankruptcy case. The NCAA does not have subpoena power, and because that information was deemed to be ill-gotten it resulted in some allegations being dropped. Almost all allegations revolve around football and men's basketball, though several other sports are cited for very minor reasons. Three former Miami assistant coaches are also alleged to have been in violation of what's commonly known as NCAA Rule 10.1, which covers the "principles of ethical conduct." Within about six months of Miami originally bringing the information it had on Shapiro forward, an NCAA investigation was under way, and the story became widely known in August 2011 after Shapiro provided Yahoo Sports with details of what he claimed to have given dozens of athletes, recruits and coaches over an eight-year period. Among the gifts Shapiro alleged providing: Memorabilia, cash amounts both large and small, dinners, strip-club trips, prostitutes, and even an abortion. Shalala labeled most of that as "sensationalized media accounts." Several Miami football and men's basketball players have either served suspensions, paid restitution or both after their involvement with Shapiro was discovered. Apparently upset with how people he thought were friends turned their back on him following his conviction for the Ponzi operation, Shapiro vowed that he would take down the program. Shawn Eichorst, the Nebraska athletic director who held the same role at Miami for some of the NCAA probe, declined to comment.