Internal Audit, Risk Management, & Compliance for Higher Education

A large public R1 research university engaged Deloitte to build the foundation for a sustainable enterprise risk management program. Working with leadership and stakeholders, Deloitte defined the ERM vision, assessed current-state maturity, designed governance structures, and created core tools including a risk taxonomy, risk register, assessment methodology, and training materials. The result was a coordinated, repeatable approach to identifying, prioritizing, and managing risk institution-wide.

A higher education institution engaged Deloitte to bring a risk and controls lens to its Workday implementation. Drawing on internal audit, cybersecurity, and functional experience, Deloitte helped assess identity and access management, application security, business process controls, and segregation of duties. The effort helped the institution strengthen compliance, reduce implementation risk, and support a more secure and sustainable transformation journey.

A midsize public university engaged Deloitte to enhance ERM and compliance capabilities. Deloitte assessed current-state processes, refined the institution’s risk prioritization and response approach, customized ERM tools, and designed a compliance operating model with effective governance, responsibility mapping, and a regulatory library. The engagement improved visibility into institutional risks and obligations while creating a strong foundation for sustainable execution and accountability.

A higher education institution engaged Deloitte to strengthen compliance with protected data regulations amid a complex and evolving risk landscape. Deloitte helped frame a sustainable approach to information security and privacy by assessing requirements, clarifying scope, and addressing issues such as controlled data, cross-border transfers, third-party risk, and identity and access management. The work positioned the institution for effective compliance and operational resilience.

A private R1 institution turned to Deloitte for a fresh internal audit perspective and support around emerging higher education risks. Deloitte led annual campus-wide risk assessments, supported the internal audit workplan, delivered risk management and controls training, and executed specialized reviews in grants management and sponsored projects. The work helped strengthen compliance, improve research controls, and give the university access to leading practices and specialist insight.