Ashton Jolley
Security Analyst,
University of Tennessee at Chattanooga
Building a Shared GRC Program across the UT Campuses and Institutes
Friday, October 02, 2026 | 8:00AM–8:45AM MT
Session Type:
Breakout Session
Delivery Format:
Presentation
The University of Tennessee is in the early stages of building a shared Governance, Risk, and Compliance program across its campuses and institutes. This journey began with one campus establishing foundational GRC elements such as data classification, risk and controls assessments, a risk register, and a structured technology and vendor review process. As these efforts developed, UT System Administration began scaling the approach through a shared services model designed to support campuses with varying resources and levels of maturity. This session explores what it looks like to start and scale GRC in higher education, highlighting early lessons learned, shared vendor assessments, and the challenges of building consistency while the program continues to evolve.
