These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- GRC for Education and Universities
- Who it's for
- Multi-campus colleges
Multi-campus colleges
A college with several campuses can use a common organization and distinguish campus review records within its assessments. Controls still belong to risks and named owners. The campus review records its own policy reference, date and open exceptions, making local differences visible without creating a separate risk register for every campus.
How GRC for Education and Universities is set up for you
Keep ownership explicit
A business unit and team member identify who can explain the risk and control.
Record local context
The campus review identifies the campus and the policy reference used by the reviewer.
Retain the trail
Test results, findings, corrective actions and independent retests remain linked to the assessment.
A college with several campuses can use a common organization and distinguish campus review records within its assessments. Controls still belong to risks and named owners. The campus review records its own policy reference, date and open exceptions, making local differences visible without creating a separate risk register for every campus.
Choose one control shared by two campuses and run a bounded assessment for its operating period. Record the planned control test and evidence. Prepare a campus review for each local context with its own exception count. Ask the Independent Reviewer to identify the assessment revision they are judging and write a substantive reason for each decision.
If one location has a failed test, connect the resulting finding to the actual control and assessment. Give the Finding Owner an action and due date. A passing independent retest closes that finding; a separate campus approval does not close it. The distinction helps the team see exactly what has been accepted and what remains to be corrected. Record each campus name consistently so reviewers can compare local exception counts. Keep the assessment revision in the decision history, and identify the campus review in the reason when several local reviews share one parent assessment.
Features to start with
Roles on the team
- Admin
- Maintains organization, membership and access setup.
- Assessment Owner
- Scopes assessments and coordinates testing with control owners.
- Control Owner
- Maintains assigned controls and supplies testing context.
- Campus Reviewer
- Records campus control reviews and policy exceptions.
- Finding Owner
- Plans and documents corrective action for assigned findings.
- Independent Reviewer
- Reviews assessment revisions and independently retests findings.
Set up GRC for Education and Universities your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.