AUDIT & ADVISORY SERVICES |
|
|---|
|
|
|
|
In this issue:
- Operational – Risk Assessment Themes
- IT Security – Stay Alert
- Conflict of Interest - Fall Training Opportunities
- USC Integrity Line
- News Links
- Contact Information
|
|
|---|
|
Operational - Risk Assessment Themes |
|
|---|
|
As required by policy BTRU 1.06 –
Audit & Advisory Services, our department must perform a University-wide risk assessment to identify operational, financial, technological, and other challenges facing the University. This risk assessment is a major component in the development of the department’s risk-based audit plan, which was approved earlier in June by the Board of Trustees’ Audit, Compliance and Risk Committee.
Much of what we heard during our risk assessment interviews with System leadership included themes that transcended organizational boundaries, and which impact the risk profile of multiple areas of the University. These themes included:
- Cybersecurity – With colleges and universities storing massive amounts of sensitive data, the protection of our information assets remains a significant risk.
- Financial Sustainability – The University must continue to balance revenue sources with the costs of providing an education. This is critical with continuing inflationary pressures, regulatory compliance costs, and a rapidly changing college athletics landscape.
|
|
|
- Research Compliance, Integrity, and Security – With heightened awareness and scrutiny related to foreign influence in higher education research, new requirements and guidance have been issued to hold institutions accountable for managing this risk.
- Campus Health and Safety – From physical safety to mental or emotional well-being, it’s imperative for the University to have processes in place to support its community.
- Artificial Intelligence – The ever-increasing use of AI in higher education brings both positive impacts, as well as challenges. The University must decide how best to address the challenges.
Our approved audit plan focuses on determining whether the University is adequately mitigating the risks associated with these topics. We thank all those who participated in our risk assessment. Your input is invaluable to our work.
|
|
|---|
|
|
We use technology for everyday activities such as learning, communicating, eating, shopping, working, playing, travelling, etc. Criminals look at this same list and see openings to valuable information, such as personal interests, names of friends and family members, credit card data, and work and home addresses. Even your scheduled time away from home becomes burglary opportunities.
When you are using technology—which is all day—stay alert for strange activity and behavior. Statistics indicate that breaches rarely occur without user errors or missteps. By learning how to be a more secure user, you help complement the technology, forming a stronger team with the University’s Division of Information Technology to fight off attacks. Understanding that you are a potential target to hackers, here are basic security awareness tips all University technology users should adopt:
- Keep software up-to-date
- Avoid phishing scams – beware of suspicious emails and phone calls
- Practice good password management
- Be careful what you click
Read Top 10 Secure Computing Tips from UC Berkley for a complete list of tips. |
|
|---|
|
Conflict of Interest - Fall Training Opportunities |
|
|---|
|
If your team would like to receive training on Conflicts of Interest this fall, please email COI@mailbox.sc.edu. Audit and Advisory Services (AAS) is available to join departmental meetings, online or in-person, to provide training sessions. Training can be tailored to fit your timeframe and address any specific areas of need (annual disclosures, reviewer training or other special circumstances).
|
|
|---|
|
|
|
The USC Integrity Line is an anonymous reporting system, administered by an independent third-party provider, Lighthouse Services, Inc. Use this service to report a concern about questionable or unethical behavior.
* * *
USC Integrity Line Reporting
You can report your concern anonymously to the USC Integrity Line:
Reports are shared with a select group of three individuals:
-
Chair of the Audit, Compliance and Risk Committee of the Board of Trustees
-
Chief Audit Executive
-
General Counsel
These individuals determine the appropriate path forward for investigating your report.
Click
here
for more information on the USC Integrity Line
|
|
|---|
|
Relevant University Policy:
University employees are expected to report any concerns regarding possible noncompliance with laws, regulations, and policies.
|
|
|---|
|
Fraud & Ethics
Information Technology
Campus Life & Safety
|
|
|---|
|
Contact Audit & Advisory Services
1600 Hampton St.
Suite 610
Columbia, SC 29208
Have suggestions or requests for future newsletter topics? Send us an email.
|
|
|---|
|
|
|
|
