Policy, Compliance and Internal Controls

The Policy, Compliance and Internal Controls Office provides oversight for university policy development and records management, internal controls and risk evaluation, education, guidance and resources to optimize ethical and compliant behavior, mitigate risk and improve operations through effective controls and processes.

University policy sets behavioral expectations across the university and empowers members of the university community with the knowledge, protection and flexibility they need to perform their day-to-day roles and responsibilities within certain defined boundaries.

The university follows a formal process to develop, review, approve, publish and communicate policy to promote consistency, efficiency and transparency.

Records management is the systematic control of records throughout their life cycle – from their creation or receipt to their disposal. Being mindful of the records we create and how we manage them has many benefits including preserving records of enduring historical, administrative, legal or fiscal value and disposing of records that are non-essential to minimize litigation risk, reduce operating costs and improve organization.

Internal controls help an organization achieve goals, carry out management directives, reduce risk, increase reliability of information, promote effectiveness and efficiency, safeguard assets, and comply with rules and regulations. Internal controls include written policies and procedures, separation of duties, built-in system controls, monitoring processes, internal audits of units and business processes, and the control environment established by management.