When Audit , Policy and Shared Governance met

1. When Audit, Policy and Shared Governance met Dr. Curtis A. Carver Jr.Vice Chancellor and Chief Information OfficerUniversity System of Georgia

2. Agenda • The vision • The reality • The partnership • The challenge • Musings, comments, a discussion

3. The Vision • Predictable, proactive partnership between auditors, auditees, policy, and shared governance • Control and management processes aligned with risk • Leaders actively lead with risk assessment as a precursor to decision making

4. The Reality Two Greatest Lies ever told: • We are happy to see you; and, • We are here to help. Leadership Cowboys meet Aliens (ala the campuses) Policy Controls Governance

5. The Reality – Why So Hard? • Resources • Tension between management, control, and leadership • Tension between 35 different institutions, 35 different constituents, and differing interpretations of best practices • Show me the perfect, all inclusive policy document

7. The Partnership • Leaders lead • Shared governance involved in setting the controls • Controls establish acceptable band of performance • Partners interact as risk dictates

8. The Challenge (Leaders Lead) • Enterprise Risk Management System • Intent encapsulated as policy by Regents • Procedure encapsulated as handbook by institutional CIOs • Shared governance owns

9. The Challenge (Shared Governance) • Community of Practice • Subcommittee of CIOs and audit wrote practice manual • Full, formal vetting with campuses

10. The Challenge (Controls) • Left and right boundaries of behavior • Checked as often as necessary to manage risk 1 2 3

11. The Challenge (Partner Interaction) • Help me with what, not how • Don’t need a shadow leadership structure • Partner fully before, during and after the formal visit • Whatmakes the heart grow fonder?

12. Musings, comments, a discussion