Cybersecurity – What’s New, What’s Next?
2026-01-29 13:00 - 14:00 (America/New_York)
Cybersecurity – What’s New, What’s Next?

Thursday, January 29, 2026 1:00 PM – 2:00 PM ET

Register Today!

Cybersecurity continues to be a key area of focus for colleges and universities. Institutions are managing ongoing risks related to ransomware, phishing, and third-party exposure, while also adapting to the growing use of cloud services and artificial intelligence. Regulatory expectations have matured. Colleges and universities are responding to a range of evolving requirements including the finalized NIST Cybersecurity Framework (CSF) 2.0 released in 2024, and expanding state, federal, and data privacy mandates. Internal audit teams play an important role in evaluating how institutions are responding to this changing landscape.

After attending this webinar, participants will be able to…

Summarize current cybersecurity trends and risks relevant to higher education.

Identify how emerging technologies such as cloud platforms and artificial intelligence impact cyber risk.

Describe the regulatory environment affecting higher education institutions, including NIST CSF 2.0 and evolving state and local data protection requirements.

Explain internal audit’s role in supporting cybersecurity oversight and risk management.

Apply cybersecurity considerations in audit planning and stakeholder communication.

Delivery Method: Group InternetField of Study: Information TechnologyAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Resources

Host Information

Nick Russell

Managing Director

Protiviti

Nick is a Managing Director based in Dallas, bringing over 15 years of internal audit and risk consulting experience to his role. He leads technology audit efforts, guiding teams to solve complex client challenges across a wide range of industries. He supports clients throughout the full internal audit lifecycle and in implementing and sustaining internal control over financial reporting (ICFR) programs. His core areas of focus include IT audit, project risk advisory services, and Sarbanes-Oxley (SOX) compliance.

A recognized thought leader, Nick is a frequent public speaker on topics such as the evolving role of the internal audit advisor, project risk, emerging IT risks, and the development of the technology audit universe. In 2024, he was honored for his leadership in learning and development through the creation of a Project Risk Advisory training program, which earned a prestigious Brandon Hall Excellence Award.

Mohammed Shaikh

Protiviti

Mohammed has over ten years of experience in Internal and External Audit engagements leading Sarbanes-Oxley Compliance (SOX) engagements, SOX advisory, and managing security and operational IT Audits. Mohammed is a member of Protiviti’s higher education team and has supported client in this industry for over five years. Prior to joining Protiviti, Mohammed managed and executed IT SOX projects for multiple domestic and international clients working in an external auditor capacity at a Big 4 accounting firm.

Fraud Risk Fundamentals: Awareness, Prevention, and Mitigation Strategies
2026-03-05 13:00 - 14:00
Fraud Risk Fundamentals: Awareness, Prevention, and Mitigation Strategies

Thursday, March 5, 2026 1:00 PM – 2:00 PM ET

Register Today!

This session will provide a refresher on the fundamentals of fraud and the common risk factors facing higher education institutions. Participants will gain clarity on fraud risk roles and responsibilities across the institution, emphasizing shared accountability, stewardship of resources, and alignment with institutional mission and values. The session will also examine real world examples of higher education fraud, waste, and abuse and emerging trends, highlighting key lessons learned, common control breakdowns, and practical indicators of elevated risk. Attendees will strengthen their understanding of how to proactively identify, assess, and mitigate fraud risks in support of ethical operations, regulatory compliance, and long-term institutional sustainability.

After attending this webinar, participants will be able to…

Refresher on the basics of fraud and common risk factors for higher education institutions

Identify fraud risk roles and responsibilities for prevention and detection

Understand common fraud, waste, and abuse schemes in higher education through case examples and lessons learned

Delivery Method: Group InternetField of Study: AuditingAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Host Information

Ashley Deihr

Principal

Baker Tilly

Ashley is a principal in Baker Tilly’s higher education practice. With nearly 20 years of experience, Ashley assists institutions to achieve strategic and financial success, optimize operational effectiveness and enhance compliance. Ashley drives innovation through strategic and enterprise risk assessments, internal audit and compliance reviews and investigations and business process reviews. She has assisted clients in developing and reengineering infrastructures, governance practices, internal controls and business processes to mitigate risk and enhance efficiency, effectiveness and compliance in such areas as budgeting and resource management, financial management and reporting, sponsored research administration, compliance governance, student support and wellbeing and international operations. Ashley is a Certified Public Accountant, a Certified Internal Auditor, and a Certified Fraud Examiner.

Will Hoffer

ManagerBaker Tilly

Will is a Manager in Baker Tilly’s Risk Advisory practice with over 7 years of experience serving higher education institutions, not for profit organizations, and government contractors. He leads outsourced and co sourced internal audit engagements, helping institutions strengthen governance, risk management, and internal controls. Will facilitates enterprise and fraud risk assessments and has extensive experience conducting investigations for colleges and universities. He specializes in helping institutions identify, assess, and mitigate fraud risk in alignment with their mission and regulatory requirements. He frequently presents at industry conferences on fraud related topics and is a Certified Internal Auditor (CIA).

The Benefits of ACUA: Hear directly from our ACUA leaders
2026-03-12 14:00 - 15:00
The Benefits of ACUA: Hear directly from our ACUA leaders

Thursday, March 12, 2026 2:00 PM – 3:00 PM ET

Register Today!

Join us for our New Member Webinar series highlighting the benefits of ACUA and hear directly from our ACUA leaders (President – Nichole Pittman, Vice President – Jana Phelps, Secretary & Treasurer – Eulonda Whitmore, and Immediate Past President – Laura Buchhorn). You’ll learn more about the benefits of being part of ACUA and hear firsthand how the organization has shaped their professional journey and what ACUA resources they find handy and use in their institutions — a testament to the lasting impact we hope to make in the lives and careers of each of our members. The second half of the session will be an interactive Q&A — a chance for new and prospective members to ask questions, share perspectives, and learn how to make the most of your membership.

Participants will be able to…

Hear directly from our ACUA Leaders and learn more about the benefits of being part of ACUA.

Delivery Method: Group InternetField of Study: Personal DevelopmentAdvance Preparation: NonePrerequisites are required: NoCost: Free for members and non-membersRecommended CPEs: 0

Moderator Information

Nichole Pittman

ACUA President

Jana Phelps

ACUA Vice President

Eulonda Whitmore

ACUA Secretary & Treasurer

Laura Buchhorn

ACUA Immediate Past President

2026 ACUA Virtual Spring Summit
2026-03-24 07:00 - 2026-03-26 17:00
The 2026 ACUA Virtual Spring Summit is March 24 – 26, 2026. This three-day professional education event, designed to deliver 18 CPE hours across three dynamic tracks, will be a platform for higher education internal auditors from across the country to share their expertise and learn from each other.

Learn More & Register Now

From Risk to Recommendations: Part II (Conforming to Standards Domain V for Advisory Services)
2026-04-15 13:00 - 14:00
From Risk to Recommendations: Part II (Conforming to Standards Domain V for Advisory Services)

Wednesday, April 15, 2026 1:00 PM – 2:00 PM ET

Register Today!

Continue the conversation with ACUA’s Auditing and Accounting Principles sub-committee. How does your internal audit function conform with Domain V of the Standards when performing advisory services? Join us in several breakout discussions exchanging experiences with your peers.

After attending this webinar, participants will be able to…

After attending this webinar, participants will be able to

Plan activities specific to your institution to achieve conformance with the new IIA Global Standards 13.2, 14.2, & 15.2 when performing advisory services.

Articulate expectations of the new IIA Global Standards 13.2-Engagement Risk Assessments, 14.2-Analysis and Potential Engagement Findings, and 15.2-Confirming the Implementation and Recommendations or Action Plans when performing advisory services.

Identify operational changes your organization has made, or needs to make, to conform with the new IIA Global Standards 13.2, 14.2, & 15.3 when performing advisory services.

Delivery Method: Group InternetField of Study: AuditingAdvance Preparation: NonePrerequisites are required: NoCost: Free for members; members onlyRecommended CPEs: 1

Resources

Moderator Information

Jennifer Dent, CPA, CISA, CFE

University of South Florida

15+ year audit experience in Public Accounting and Government with 3 years in Higher Ed.

Erin Egan, CPA, CIA

Rutgers University

25 years audit and advisory experience. 9 years in public accounting. 16 years in higher education.

Susie Geiger

The University of Kansas

4 years in higher education internal auditing.

Melissa Primus, CPA, CIA

Minnesota State

25+ years in audit and advisory in higher education and 4 years of external auditing experience.

John McDaniel, CPA, CIA, CISA, CRMA

University of Alabama System

20+ years of audit and operational experience in higher ed and 5 years external auditing experience.

Endpoint Security
2026-04-23 13:00 - 14:00
Endpoint Security

Thursday, April 23, 2026 1:00 PM – 2:00 PM ET

Register Today!

Endpoint security is vital for higher education institutions due to diverse devices, including university-owned systems, personal devices, research tools, and IoT, all accessing sensitive data. Weak security can lead to breaches, data theft, and operational disruption. This audit program evaluates endpoint security controls to protect confidentiality, integrity, and availability of information assets. It offers flexibility for comprehensive or targeted audits based on institutional needs. Key risk areas include malware, unpatched software, access management, data exfiltration, inadequate monitoring, device loss, phishing, shadow IT, BYOD/BYOC, open-source tools, and IoT. Addressing these ensures resilience against traditional and emerging cyber threats.

After attending this webinar, participants will be able to…

Understand the importance of endpoint security in higher education.

Identify common endpoint risks and vulnerabilities.

Assess the effectiveness of endpoint security controls.

Apply flexible audit methodologies based on institutional needs.

Delivery Method: Group InternetField of Study: Information TechnologyAdvance Preparation: MaterialsPrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Resources

Host Information

Mayur Patel

Director, IT Audit

Columbia University

I am a senior technology and risk executive with over 20 years of experience leading enterprise technology, cybersecurity, and governance functions across higher education, financial services, and publicly traded organizations. My career has focused on aligning technology strategy with institutional and business objectives while maintaining strong operational discipline, risk management, and regulatory compliance.

I currently serve as Director of Information Technology Audit at Columbia University, where I provide enterprise-wide oversight of technology governance, cybersecurity, and control environments supporting complex academic and financial operations. I work closely with senior leadership to enhance technology resilience, modernize processes, and improve risk visibility across critical systems.

Previously, I have held leadership roles at Yext, Panasonic, Vonage, and Prudential Financial, advising executive management and boards on technology risk, cloud security, regulatory readiness, and large-scale transformation initiatives. My experience spans infrastructure, application development, cloud platforms, vendor management, and business continuity.

I hold a Master’s degree in Cybersecurity and a Bachelor’s degree in Computer Science, and I maintain multiple industry certifications including CISSP, CISM, CISA, and CRISC.

AuditCon 2026
2026-09-27 08:00 - 2026-10-01 17:00 | Sheraton New Orleans Hotel, 500 Canal Street, New Orleans, Louisiana, 70130, United States
Save the Date for AuditCon 2026!
