These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- GRC for Education and Universities
- Features
- Campus reviews
Campus reviews
Keep each campus policy reference and open exception in the assessment record.
OverviewAssurance Awaiting Decision×
GRC for Education and Universities · Campus reviews
New
Assurance Awaiting Decision
Approval waits for the independent reviewer
| Campus | Policy reference | Open exceptions | Reviewed at | Status | Parent | |
|---|---|---|---|---|---|---|
| CMP-765 | PR-441 | 580 | 06 Oct | Submitted | ASS-72062 | |
| CMP-536 | PR-778 | 610 | 15 Oct | Submitted | ASS-43422 | |
| CMP-546 | PR-918 | 240 | 18 Oct | Submitted | ASS-73175 | |
| CMP-937 | PR-250 | 330 | 15 Oct | Submitted | ASS-14960 | |
| CMP-340 | PR-198 | 720 | 24 Oct | Submitted | ASS-38764 |
6 of 6 records
CMP-765Campus control reviews · CCR-62605
SubmittedPolicy referencePR-441
Open exceptions580
Reviewed at06 Oct
ParentASS-72062
What you can do
Give campus exceptions a review path
A campus control review belongs to an assessment and an organization. It records the campus, policy reference, review date and open exception count. Its status shows whether the review is being prepared, submitted, decided or completed. A decision date anchors the response. This gives the Campus Reviewer a focused record for local policy and exception discussion while the parent assessment carries the broader engagement.
For example, a campus unit may submit a review of access approval evidence. The reviewer records the applicable policy reference and the number of exceptions still open. The Independent Reviewer can then examine the submitted review alongside the assessment tests and findings. A review decision records the assessment revision and reviewer reason against the parent assessment. The campus review keeps its own status; approval of that review does not settle the entire assessment.
How the work is organized
- Campus context. Campus and organization identify the operating location being reviewed.
- Policy context. The reference tells reviewers which institutional policy the check concerns.
- Decision state. Open exceptions, status and decision date make a submitted review easier to resolve.
What to agree during setup
Agree a consistent campus name and policy reference format. Decide who prepares the review and who can approve or reject it. Confirm the exception count represents open matters at the recorded review date, and identify how the team will update the record after an exception is resolved. Record the reason for a rejection or return in the assessment decision history, with enough campus context to identify the review being discussed.
A review needs a parent assessment with the same organization. Test this relationship in the first cycle so a campus record cannot drift into an unrelated engagement. Keep the campus review status separate from a retest of a finding: the latter has its own reviewer, result and evidence.
Check the handoff on an actual case
Choose a campus review with a policy reference and one open exception. Have the Campus Reviewer show the linked assessment and explain the exception. Ask the Independent Reviewer to locate the submitted item, examine its context and record a decision with a reason. Confirm that the campus review state and decision date are clear. Check the assessment revision on the separate decision record, and leave any finding on its own remediation path.
What your team sees
- Assurance Awaiting Decision — Submitted campus reviews waiting for a decision.
- Campus Review Status — Campus reviews grouped by their recorded status.
Follow the work through
Use campus assurance review for submission and decision, and remediation and retest for a finding that remains open.
What it keeps track of
Data model- Campus control reviews
- Campus control reviews covering policy references and open exceptions.
- Assessments
- Scoped assessment engagements driven through a status lifecycle.
- Organizations
- Legal and operating organizations governed by this workspace.
- Review decisions
- Independent reviewer decisions recorded against an assessment revision.
- Findings
- Findings raised from failed or inconclusive control testing.
Who uses it
Permissions- Campus Reviewer
- , Independent Reviewer, Assessment Owner
Set up GRC for Education and Universities your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.