Independent publication. Not a reporting channel and not an emergency service. If someone is in danger now, contact campus security or local emergency services immediately.
CampusSafety.college
The Incident Ledger - classify, report, keep the evidence

A self-audit of policy statements

A plain guide to a self-audit of policy statements for colleges: what the duty is, how the decision is made, and what must be filed so the record can be checked.

Report file: Ledger 16Department: Audit and readinessRecord type: Working guide

This guide is general information about a reporting duty. It is not a reporting channel and not an emergency service, and it does not decide any specific incident. If someone is in danger now, contact campus security or local emergency services immediately.

What does a self-audit of policy statements mean in practice?

In short, a self-audit of policy statements is where the general rule meets a particular case, and the meeting point is the working note.

For a self-audit of policy statements, the most common source of error is not ignorance of the rule but inattention to the facts of the particular case. A campus that treats a self-audit of policy statements as a once-a-year task will find that the file for the rest of the year is thin, and thin files do not survive reviews.

The annual report is where a self-audit of policy statements becomes public, but the work that makes the report trustworthy happens months earlier, entry by entry, in files nobody outside the team sees. The question behind a self-audit of policy statements is not whether the team cared, but whether the team can demonstrate, from its own records, that the duty was met. For a self-audit of policy statements, the institution should keep its method stable across years unless the regulation changes, because a changing method makes trends unreadable.

Who has to act on a self-audit of policy statements, and where does it bite?

For a self-audit of policy statements, the victim's privacy shapes how the file is written, and a file that protects a name while preserving the decision is doing its job properly. The training for a self-audit of policy statements should be refreshed when the regulation or the guidance changes, not on a fixed calendar that ignores those changes. The registrar and the conduct office may both hold pieces of a self-audit of policy statements, and the ledger is only complete when those pieces are brought together under one entry.

The registrar's data can affect a self-audit of policy statements in unexpected ways, for example through enrolment records that establish who counts as a student. For a self-audit of policy statements, an institution that relies on one expert should train a second, because expertise that leaves with a person leaves a gap behind.

How is a self-audit of policy statements handled, step by step?

When a self-audit of policy statements involves a residence hall, draw the geography question on the map before deciding anything else, since place often decides the column before category is even reached. If a report relevant to a self-audit of policy statements arrives through an unusual channel, file it through the normal route anyway, and note the channel it arrived by, so the route itself can be audited. A practical check for a self-audit of policy statements is to read the draft entry as if you were a reviewer who knows nothing about the case, and to fix every sentence that assumes knowledge.

When working a self-audit of policy statements, separate the incident from the person reporting it in the file, so that the decision follows the facts rather than the source. A method for a self-audit of policy statements should be tested on a closed case before it is trusted on a live one, and the test should be filed like any other entry.

Where do ledgers go wrong on a self-audit of policy statements?

For a self-audit of policy statements, a mistake is to keep the procedure in a binder that nobody opens, while the real procedure lives in a chat thread that nobody can search. For a self-audit of policy statements, a common error is to treat a student organisation's incident as the institution's incident, or the institution's as the organisation's, without checking the boundary. For a self-audit of policy statements, a mistake is to assume that a vendor's system understands the regulation, when the system only stores what a human entered.

In a self-audit of policy statements, the error of the vague note is widespread: a note that says a case was handled, without saying how, by whom, or on what definition, is barely a note at all. For a self-audit of policy statements, the error of the unowned correction is common: everyone agrees a published number is wrong, nobody is named to correct it, and it stays wrong.

What must be filed for a self-audit of policy statements, and for how long?

For a self-audit of policy statements, the institution should be able to produce, on request, the list of records, their locations, and their retention dates, without a search through personal drives. When a self-audit of policy statements produces a correction to a published report, the correction file should contain the old figure, the new figure, the reason, and the date, all in one place. The file for a self-audit of policy statements should note every person who accessed sensitive material in it, where the institution's policy requires that, so that access itself is auditable.

For a self-audit of policy statements, the record of access to sensitive material should be kept where the institution's policy requires it. For a self-audit of policy statements, the record should show the version of the regulation or guidance relied on, because a file that cites only a title cannot show that the current version was used.

What is the next move on a self-audit of policy statements?

The next move on a self-audit of policy statements is to compare the institution's policy statement for this duty with the published report, and to close any gap between what is promised and what is done. The next move on a self-audit of policy statements is to test the notification or warning system for this duty, if it has not been tested in the current cycle, and to file the test record. The next move on a self-audit of policy statements is to reconcile the log with the tables for this duty, so that the daily record and the annual record tell the same story.

Finally, the next move on a self-audit of policy statements is to hold the standard: no invented figures, no determination for a specific incident, no claim that an institution complies because a guide says so. The next move on a self-audit of policy statements is to check that the published report and the internal file agree on the figures for this duty, and to correct any disagreement openly.

Sources and evidence on the record

  • 34 CFR 668.46, Institutional security policies and crime statistics, eCFR - definitions, geography, crime categories, logs, warnings, notifications and the annual security report.
  • 20 U.S.C. 1092(f), the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act, Cornell Law Institute - the Clery Act statute, renamed the Jeanne Clery Campus Safety Act by the Stop Campus Hazing Act.
  • Department of Education Campus Safety and Security Survey, surveys.ope.ed.gov - the system through which institutions submit crime and fire statistics to the Department.

Evidence basis: General information drawn from the statute, the regulation and official guidance listed below; worked examples are labelled illustrations, not measurements. Applies when: When a college must decide a self-audit of policy statements and file the decision so it can be checked afterwards.

Next in the ledger