Addressing Persistent and Emerging Campus Risks
Foundational capabilities for enterprise risk management, information risk, and student activism
Our latest study breaks down the monolithic challenge of risk management, providing clear plans for rapid-response situations and implementation guidance for foundational enterprise risk capabilities.
Higher ed institutions seeking to manage risk holistically too frequently stumble when moving from vision to execution, whether distracted by one-off incident response obligations or overwhelmed by the sheer magnitude of the effort.
A top expectation for chief business officers
College and university stakeholders—trustees, funders, students, parents, community members, legislators, alumni—are holding their institutions to high standards, even as their complex enterprises experience more and more risks. Enterprise Risk Management, or ERM, is an intentional approach to managing an organization’s remediation of risks, although higher education’s distributed governance can render the risk identification process burdensome. Campus leaders also struggle to capture stakeholders’ focus because of repeated incident response episodes that distract from holistic risk management.
- The Risk Terrain in Higher Education
- Hurdles in the Way of ERM Implementation
- Quick Start Guide to Risk Management
CBOs and cabinet colleagues seek to manage risks at various levels, with particular hot spots emerging in the areas of information security and student activism.
Best practices to phase in a multi-tiered risk management approach
1. Enterprise risk management
Finance and administrative executives seeking to professionalize their campuses’ approach to risk management attain critical stakeholder support by clarifying governance roles, preventing scope sprawl, and accelerating progress. By assigning oversight that includes a comprehensive set of viewpoints, defining the scope of oversight and what is included (and excluded) from the formal risk management process, risk managers can increase the odds of broad campus support for focused treatment of key risks.
- Tactic 1:Â Targeted Risk Governance
- Tactic 2:Â Disciplined Risk Altitudes
- Tactic 3:Â Peer-Sourced Risk Register
- Tactic 4:Â Risk Accelerator
Associated resource:Â Risk Register Straw Man
2. Information risk
Chief information officers (CIOs) and chief information security officers (CISOs) emphasize security awareness among campus members through proactive, relevant, targeted, and sustained communication. By changing the nature of security-related interactions to providing useful information that targets audiences’ interest areas, CISOs can tap into personal motivations, thereby engaging the broader campus in the mission to keep information safe.
- Tactic 1:Â Board Education Memos
- Tactic 2:Â Unit-Level Risk Profiles
- Tactic 3:Â Data-Informed Vulnerability Consultations
- Tactic 4:Â Security Scorecards
3. Student activism
Campus leaders embrace activism as a vital ingredient of students’ engagement with the institution by building communication bridges and anticipating incidents. Seeking to professionalize their campuses’ approach to activism, student affairs offices prepare response plans, engage with potential activists, and ultimately leverage the energy and enthusiasm of activists to work together and drive change on campus.
- Tactic 1:Â First Responder Strategy
- Tactic 2:Â Targeted Interventions
- Tactic 3:Â Just-in-Time Guidance
This resource requires EAB partnership access to view.
Access the research report
Learn how you can get access to this resource as well as hands-on support from our experts through Strategic Advisory Services.
Learn More