The Specific Role of the University Compliance Office

1. Verify that effective compliance is occurring in all activities governed by federal law and regulation, and by University policy. Verification does not mean performing the work of compliance. It means making sure that all relevant activities have effective compliance organizations. It means making sure that these compliance organizations have effective policies and procedures, effective training programs, and effective techniques for monitoring compliance.

2. Conduct compliance audits. Auditing is not the same as monitoring. Auditing and monitoring are both means of checking to see if compliance has occurred. However, there are important differences:

 

a. Monitoring is typically done by the activity that is being monitored. Auditing is done by an outside entity. Another way to say this is that auditing is arm's length monitoring.

The arm's length feature is important because, when checking is done by an office or individual that can be perceived to have an interest in protecting the activity, this perception can diminish the credibility of the checking. Auditing, on the other hand, because its connection to the activity being checked is more distant, may have greater credibility. This is the reason that audits are conducted by an office that does not report to a dean or an administrator responsible for the success of a given activity. Instead, the office reports directly to the Chancellor, and, if necessary, directly to the Board of Trustees.

b. Monitoring typically occurs much more frequently than auditing. Audits are more occasional. Audits may occur with or without advance notice.

c. Monitoring is less formal. It checks mechanically for compliance. Audits, on the other hand, are governed by formal protocols that involve the checking process itself, discussions with department heads, communications with other outside entities such as the dean and the Office of General Counsel, and systematic follow-up for the purpose of curing deficiencies.

d. Monitoring and auditing should work together. Monitoring may uncover deficiencies that suggest the need for audits. Audits may uncover deficiencies that suggest the need for better monitoring. In other words, monitoring and auditing should complement each other.

3. Develop, revise, and maintain a University Code of Conduct.

4. Maintain a University compliance hotline for the reporting of suspected violations or concerns.

5. Maintain effective and ongoing communication with the University's senior management and with the Audit Committee of the Board of Trustees concerning the state of compliance in University activities that require compliance. This communication should include regular reports of compliance activity - audits, hotline activity, etc. ­ and also of plans for future compliance activity.

Back to home page