Case in Point

Many of our readers know that my career background is in the internal audit profession. Technically, I still hold the Chief Audit Executive (CAE) role at AU, though recently my focus has been more on campus security related issues. You may not know that May is Internal Audit Awareness Month. There are many misconceptions about internal audit which is by definition: 

“Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.”

For Internal Audit Awareness Month, I thought I’d interview Traci McGill, AU’s Director of Internal Audit, to help educate our readers about this important and often misunderstood function.

•    What should people know about internal auditing in higher education?

Internal Audit takes a risk-based, university-wide perspective to help leadership anticipate challenges, improve processes, and operate effectively in a complex regulatory environment. Our work is aligned with university priorities and emphasizes internal controls, accountability, and practical solutions.

•    What is the most common misconception about internal audit?

A common misconception is that Internal Audit’s role is to “find fault” or act as an enforcer. In reality, Internal Audit serves as a collaborative partner, focused on identifying risks, strengthening processes, and supporting continuous improvement. The goal is not to assign fault, but to help the institution strengthen operations.

•    What types of projects does internal audit perform?

Internal Audit conducts a wide range of projects, including operational, financial, and IT audits; compliance reviews; advisory projects; and fraud, waste, and abuse investigations. Project selection is guided by a risk-based approach aligned with the university’s strategic priorities.

Thank you, Traci, for giving us a better understanding of internal auditing and its important role within the institution. I’d also like to note that effective June 1, 2026, I’m taking off that CAE hat and handing it to Traci, who will serve in that role and administratively report to me.  

Whether you are in an internal audit role or another administrative function in higher education, you have plenty of risks to manage, so we again invite you to review the events occurring across our industry with a view toward proactively managing risk.

May 20: SCUHS Data Breach Impacts 2,206 Individuals - Data Breach: Southern California University of Health Sciences, a private nonprofit university in Whittier, California, experienced a data breach that affected approximately 2,206 people in the United States. The breach was disclosed to attorneys general in California and Maine on May 19, 2026.

May 20: Villa Maria College Data Breach Compromises Student and Employee Information - Data Breach: Villa Maria College, a small private Catholic college in Buffalo, N.Y., disclosed a data breach involving unauthorized access to its computer network. On Aug. 12, 2024, Villa Maria College identified unusual activity within its network. The college began investigating the incident to determine what had happened.

May 19: Grinnell College faces class-action lawsuit alleging privacy violations - Privacy: A proposed class-action lawsuit has been filed against Iowa’s Grinnell College, alleging the school "secretly sells, shares and tracks" data collected from users of its website.

May 19: Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches - Cybersecurity: Attackers couldn’t get enough of the vulnerabilities at their disposal last year, making exploits the top initial access vector across more than 22,000 breaches Verizon analyzed in its latest Data Breach Investigations Report released Tuesday.

May 14: Lawsuits Follow Disruptions from Cyber Attack on Canvas - Cyberattack: A cyber attack that crippled schools and universities last week during final exams is already the subject of more than two dozen federal lawsuits across the U.S., including one in Texas.

May 04: SDCCD campus network, websites down after failed weekend cyberattack - Cyberattack: A potential cyberattack on the San Diego Community College District network was thwarted over the weekend, according to messages from the district. San Diego City College students received an alert with details about the attack Monday morning.

May 04: Data BreachesEdtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats - Data Breach: Education technology company Instructure over the weekend scrambled to restore services affected by a cyberattack that also resulted in a data breach. Based in Salt Lake City, Utah, the edtech firm is best known for Canvas, one of the most widely used learning platforms across educational institutions and other organizations.

May 14: Former College of Charleston officer scheduled for plea hearing in grand larceny case - Occupational Fraud: A former College of Charleston police officer is scheduled to appear in court Thursday morning for a plea hearing. [The former officer] was accused of searching a person’s car during an arrest and finding a red bag containing nearly $3,000, SLED agents said. Agents said he took the bag and placed it in the trunk of his patrol car, intending to keep the money for himself.

May 11: Coastal Bend College confirms arrest in firearms theft case involving former police chief - Occupational Fraud: A former Coastal Bend College employee who once served as acting police chief has been arrested on charges of stealing college firearms.

May 09: After USDA request, Indiana plant biologist locked out of lab by school - Research Security: A faculty member at Indiana University (IU) Bloomington who has sharply criticized the government’s recent prosecution of several Chinese scientists accused of smuggling biological materials into the United States has been locked out of his laboratory by the school in response to a request by one of his federal funders.

May 05: Georgetown 'Islamophobia' Initiative Required To 'Consult' With Qatar on Guest Speakers, University Contract With Qatari Regime Reveals - Foreign Ties: A contract between an "Islamophobia" initiative at Georgetown University and Hamas-allied Qatar, where Georgetown operates a satellite campus, includes a clause that requires Georgetown to consult with a Qatari government group when selecting "speakers" and "themes" for events in Washington, D.C., documents released by the House Education Committee and reviewed by the Washington Free Beacon show.

May 04: ORI announces 15-year debarment against former Rice University scientist - Research Misconduct: The U.S Office of Research Integrity has formally announced a 15-year funding debarment against a former Rice University scientist for research misconduct, resolving allegations that arose 17 years ago.

May 01: ASU professors raise alarms over AI site repackaging course content without consent - Intellectual Property Rights: Arizona State University professors have been concerned that students are cutting corners on coursework with AI. Now professors are accusing university leadership of doing the same thing. A new ASU website uses AI to repackage lectures and course notes into what one professor calls "slop."

May 27: Student sues Lebanon Valley College over alleged Title IX violations - Title IX: Lebanon Valley College is being sued by an anonymous plaintiff for three alleged Title IX violations.

May 27: SUNY Cortland daycare workers hurt children, ordered kids to beat child: ‘No, don’t, it hurts’ - Employee Conduct: Employees of a daycare at SUNY Cortland became violent with children and one worker encouraged kids to hit and kick another child, according to police. SUNY Cortland police and university officials as well as the SUNY Cortland Child Care Center have refused to say what led to the arrest in April and May of four workers at the daycare center, including the director.

May 27: Trump Administration Sues U.C.L.A. Again Over Antisemitism - Title VI: The Trump administration on Tuesday filed its second antisemitism lawsuit against the University of California, Los Angeles in four months. The lawsuit accused the school of taking "no serious action whatsoever" to prevent the harassment of Jewish and Israeli students during pro-Palestinian protests in 2024.

May 20: MSU agrees to dissolve Ph.D. diversity partnership after fed investigation - Title VI: The U.S. Department of Education found Montana State University racially discriminated against students by participating in a nationwide organization that helps connect minority prospective Ph.D. students to university programs.

May 19: UNC settles sexual misconduct case, details sealed - Title IX: UNC Chapel Hill appears to have struck a deal to settle a lawsuit from a former student from Morganton who said he was improperly drummed out of the university after four women accused him of sexual misconduct.

May 19: Pro-Palestinian protestors sue UT Dallas leaders, police officers over alleged punishment - Civil Rights Lawsuit: Current and former University of Texas at Dallas students are suing school leaders and police officers over their arrests while protesting the war in Gaza and for allegedly suspending the university's chapter of a pro-Palestinian student organization.

May 18: Supreme Court to decide if university staff can sue over sex discrimination - Title IX: The Supreme Court added a dispute over a landmark civil rights law to its docket on Monday, agreeing to hear a sex discrimination appeal from two former Georgia university employees. MaChelle Joseph and Thomas Crowther sued their respective universities under Title IX, which prohibits sex-based discrimination in education programs that receive federal funding.

May 18: U. Washington scrubs ‘all-gender’ restroom page from website in wake of complaint - Title IX: The University of Washington recently removed a page from its website about “all-gender” restrooms in its Health Sciences Education Building after a conservative watchdog group filed a federal complaint alleging civil rights violations against women.

May 15: UMass Amherst faces discrimination complaint over student program - TItle VI: The Equal Protection Project, a nonprofit organization, has filed a civil rights complaint against UMass Amherst. The complaint was submitted to the U.S. Department of Education’s Office of Civil Rights, alleging racial discrimination within the university’s "SBS RISE" program.

May 14: Justice Dept. Accuses Yale Medical School of Discriminating Against White and Asian Applicants - Title VI: The Justice Department on Thursday accused the Yale School of Medicine of violating anti-discrimination laws, the second major medical school targeted in the past eight days by the Trump administration over admissions policies the government said illegally favored Black and Hispanic applicants over more qualified white and Asian students.

May 11: Judge Orders Texas State to Reinstate Robinson - First Amendment: A federal court judge ruled today that Texas State University must reinstate philosopher Idris Robinson, whom the university fired from his assistant professorship over a talk he gave about the Israeli-Palestinian conflict.

May 07: More than a dozen former NFL players join sex abuse lawsuits against Ohio State University - Lawsuit: Thirty former Ohio State University football players, including more than a dozen who went on to play in the NFL, signed on to the class action lawsuit brought by other ex-OSU students who say they were sexually abused decades ago by campus doctor Richard Strauss.

May 06: NCAA hits LIU athletics with three-year probation following report into widespread student-athlete eligibility violations - NCAA Compliance: Long Island University allowed more than 1,000 student-athletes to compete or practice while ineligible to do so, a newly released report from the National Collegiate Athletic Association (NCAA) found.

May 06: Allegations Against UAB Softball Coach Taylor Smartt Include Abuse, Racist Remarks and NCAA Violations - Employee Conduct: When the American Athletic Conference Softball Tournament begins on Wednesday with a contest between the University of Alabama Birmingham Blazers and the Tulsa Golden Hurricane, one team will be without its head coach.

May 06: GWU grad sues university, EY after fallout from anti-Israel speech - First Amendment: A former student commencement speaker at George Washington University is suing the university and the accounting firm Ernst & Young after claiming both institutions retaliated against her for delivering an anti-Israel graduation speech that accused Israel of committing "genocide."

May 06: UCLA medical school illegally uses race in admissions, Justice Department investigation says - Title VI: UCLA’s David Geffen School of Medicine intentionally discriminated against applicants on the basis of race in admissions - in particular white and Asian Americans - for the last three years, according to U.S. Department of Justice allegations released Wednesday by the agency’s Civil Rights Division.

May 05: Department of Education opens investigation into Smith College for admitting trans women - Title IX: In the Trump administration’s latest move to limit trans rights, the Department of Education has launched a Title IX investigation into Smith College, an all-women’s college in western Massachusetts, for admitting trans women.

May 04: Ex-UC San Diego student sues over arrest, discipline stemming from protest encampment - Lawsuit: A former UC San Diego graduate student who was arrested at a pro-Palestinian protest encampment on the campus has filed a lawsuit against San Diego County and the Regents of the University of California, in which she alleges she was unlawfully arrested, then put through an "adversarial" disciplinary process by the school.

May 01: Jury awards former Rice University football player more than $1.3 million in discrimination lawsuit - Title IX: A former Rice University football player has been awarded more than $1.3 million by a jury, which found the prestigious private university in Houston discriminated against him after another student accused him of purposely spreading a sexually transmitted disease.

May 01: Former U of I cop convicted again after second sexual assault trial - Employee Conduct: A LeRoy man has been convicted a second time by a Champaign County jury connected to a sexual assault while he was an officer with the University of Illinois Police Department. In 2022,[the man], 54, was sentenced to five years in prison for official misconduct. Prosecutors said he used police records to gain information on women, including one who accused him of drugging and assaulting her.

May 01: Federal Complaint Alleges Antisemitic Housing Discrimination at Williams College - Discrimination: A federal complaint filed with the US Department of Housing and Urban Development accuses Williams College in Massachusetts of practicing housing discrimination against an Orthodox Jewish student whom it allegedly denied kosher foods and other religious accommodations that would have promoted his integration into the mainstream campus culture.

May 28: Kentucky State University campus closed, evacuated due to campus safety threat - Threat: Kentucky State University’s main campus was closed and evacuated on Thursday morning because of a "potential threat to campus safety," the university said in an alert.

May 27: Texas A&M shares campus crime alert after multiple indecent assault reports - Assault: Texas A&M University has issued a campus crime alert after multiple incidents involving alleged unwanted physical contact were reported to campus authorities.

May 26: Second Rutgers fraternity suspended this school year for alleged hazing - Hazing: A second Rutgers fraternity in the past seven months has been suspended while the university investigates hazing claims. Kappa Sigma’s Rutgers chapter has been ordered to cease and desist all operations, as of May 19.

May 22: Alpha Eta Rho fraternity suspended after hazing incident - Hazing: Saint Louis University suspended the Alpha Eta Rho fraternity after an investigation into a "physical hazing incident." In a statement, the university said the incident occurred on April 27. The university was notified by its department of public safety a day after the incident.

May 21: Raccoon causes widespread power outage at the University of Akron - Power Outage: There was a widespread power outage at the University of Akron for several hours on Thursday. According to university officials, a raccoon ate through a power line, which affected multiple buildings.

May 20: Former Southern Adventist student charged with threatening university, Collegedale Police - Threat: A former Southern Adventist University student is facing charges after Collegedale Police say an investigation spanning nearly two years linked him to a series of threatening messages directed at the university and law enforcement.

May 20: FIU suspends former campus Republican leaders for 2 years over racist group chat - Speech: Two former campus Republican leaders have been barred from stepping foot on Florida International University’s campus, after the school suspended the students for two years over a racist group chat created by the Miami-Dade GOP’s then secretary.

May 20: Harvard police searching for suspect after alleged assault in dorm room - Assault: Concern on campus from Harvard students after an alleged assault happened Tuesday night in a dorm room. According to an email sent to students and staff, the victim was attacked when someone entered the dorm without permission. Students say there is no piggyback policy at the dorms to prevent something like this from happening.

May 18: Menlo College student charged with raping 12-year-old on campus - SA: A Menlo College student is facing three felony charges for allegedly raping a 12-year-old girl in his dorm room after giving her alcohol and marijuana on May 5.

May 15: $20K university bill set off campaign of threats, harassment from BU Law student, police say - Threats: A Boston University Law student accused of repeatedly threatening and harassing university officials was ordered held without bail pending a dangerousness hearing at his arraignment Friday morning, records show. The case against [the student] can be traced back to Jan. 30, when he became upset after receiving a $20,000 bill from the university.

May 14: CSU student arrested on sexual assault charges; Fort Collins police seek additional victims - SA: Police in Fort Collins said a Colorado State University student was arrested on multiple felony sexual assault charges and investigators believe there could be additional victims.

May 14: Family of UCSB sexual assault survivor urges public to help find dorm attacker - SA: The family of a UCSB freshman who authorities say was strangled and sexually assaulted inside university housing late Saturday pleaded on Thursday for students and the wider public to help find her attacker--before the school year ends next month and memories fade.

May 13: 2 protesters arrested outside Arizona State University graduation - Protest: Two dining hall employees were arrested on May 11 while protesting before Arizona State University’s graduation ceremony. The two protesters were picketing to bring attention to an ongoing contract dispute between the union representing dining workers contracted across ASU’s campuses.

May 11: Woman charged in connection to SVSU social media threat - Threat: A woman has been charged after police said a threat was made to Saginaw Valley State University on Friday.

May 11: 19-year-old student stabbed to death at off-campus UW apartments - Homicide: Police are searching for a suspect after a 19-year-old student was fatally stabbed at a University of Washington student housing building Sunday night, according to university officials.

May 10: Police blotter: Holyoke Comm. College student suspended for alleged peeping - Voyeurism: Students and staff at Holyoke Community College received a warning from administrators that someone may have been filming others while they were using a campus bathroom.

May 08: U.P. university nixes saunas due to costly repairs, ‘ongoing concerns and incidents’ - Campus Risk: Northern Michigan University has put a unique amenity out of commission due to costly repairs and "ongoing concerns and incidents," including inappropriate behavior, officials announced.

May 08: University of Iowa student accused of rape - SA: A 19-year-old University of Iowa student is facing a sexual assault charge from an incident in February at Hillcrest Hall.

May 06: Arson suspect with prior convictions arrested after fires in NMSU campus in Las Cruces - Arson: A 58-year-old Las Cruces woman with a history of arson convictions was arrested Wednesday as authorities had been looking for her on suspicion that she set fires at the New Mexico State University campus.

May 06: Rideshare driver arrested in alleged scheme targeting Ivy League students for sex: prosecutors - Safety Threat: A New Jersey rideshare driver has landed behind bars after authorities say he allegedly harassed Princeton University students and attempted to lure them into his car for sex.

May 05: 'SWATTING' call prompts heavy police presence at Wake Forest University - Swatting: A heavy police presence on Wake Forest University's campus Tuesday morning was the result of a false emergency call, according to campus police. University police, working alongside the Winston-Salem Police Department, responded to what was initially reported as a serious incident on the Reynolda campus. After investigating, authorities determined the call was a swatting attempt - meaning the reported emergency was fake.

May 06: Rutgers University withdraws invite to a graduation speaker over his criticism of Israel - Speech: Rutgers University has canceled a planned graduation speech by business leader Rami Elghandour after some students raised concerns about his criticism of Israel on social media.

May 05: Chemical spill reported at Michigan State University water plant - Chemical Spill: A small chemical spill was reported Tuesday inside a Michigan State University water plant. Michigan State University police, along with Environmental Health and Safety staff, the East Lansing Fire Department and the Lansing Metro Hazmat Team, responded to a call from the university’s Chilled Water Plant around noon.

May 05: 3 arrested in deadly Lincoln University mass shooting planned to rob homecoming attendees - Shooting: Authorities in Chester County have announced new arrests in connection with a deadly mass shooting during homecoming festivities last October at Lincoln University. The three suspects have been identified.

May 05: One person shot on Delaware State University campus; DSU says suspect identified - Shooting: A shooting on the Dover campus of Delaware State University is under investigation. Someone who is not a DSU student was wounded Monday night. Injuries are apparently not life-threatening.

May 05: Three teens arrested in connection to vehicle break-ins at Kentucky university - Break-ins: Police have made three arrests in a string of vehicle break-ins at Union Commonwealth University. The Barbourville Police Department announced on Monday that it had received a complaint that several vehicles had been broken into on Sunday morning and opened an investigation into the matter.

May 04: Another Fraternity at University Of Arizona Under Investigation For Hazing Allegations - Hazing: The University of Arizona is investigating a fourth fraternity this month after new allegations of hazing surfaced involving Sigma Phi Epsilon. The University of Arizona is investigating a fourth fraternity this month after new allegations of hazing surfaced involving Sigma Phi Epsilon.

May 04: 19-year-old arrested after brandishing weapon in FSU parking garage early Saturday morning - Threat: A 19-year-old is behind bars after brandishing a gun in the St. Augustine parking garage on Florida State University’s campus early Saturday morning, according to arrest papers.

May 03: NC State police searching for man they say sexually assaulted student at campus apartment - SA: Police officers say they are searching for a man they believe sexually assaulted an NC State student at a campus apartment over the weekend. According to campus authorities, the assault happened on Saturday at the E.S. King Village, an on-campus apartment community for non-freshman students and students with families.

May 02: Marshall women arrested after reported Wiley University threat - Threat: Two Marshall women were arrested after Marshall police investigated a reported threat at Wiley University. The investigation began after Marshall police responded to a disturbance Sunday at Wiley University.

May 04: Cornell president accused of backing car into protester says he was victim of 'harassment' - Protest: The president of Cornell University claimed on Monday that he was victim "harassment and intimidation" following a confrontation with protesters in which he appeared to get into his car and back into one of the demonstrators.