Ashton Jolley
Security Analyst,
University of Tennessee at Chattanooga
From Campus Innovation to System-Wide Impact: Launching a Shared Governance, Risk, and Compliance Model across the University of Tennessee
Wednesday, April 29, 2026 | 3:15PM–4:00PM PT | California Promenade, Second Floor
Session Type:
Poster
Delivery Format:
Poster Session
The University of Tennessee is in the early stages of building a shared Governance, Risk, and Compliance program across its campuses and institutes. This journey began with one campus establishing foundational GRC elements such as data classification, risk and controls assessments, a risk register, and a structured technology and vendor review process. As these efforts developed, UT System Administration began scaling the approach through a shared services model designed to support campuses with varying resources and levels of maturity. This session explores what it looks like to start and scale GRC in higher education, highlighting early lessons learned, shared vendor assessments, and the challenges of building consistency while the program continues to evolve.
