October 8, 2026 - Audit & Compliance Committee, University of Minnesota Board of Regents

The University of Minnesota Board of Regents’ Audit & Compliance Committee met on October 8, 2026, to review its 2026–27 work plan and internal audit activity. The Chief Auditor reported that the audit plan remained on track overall, but staffing constraints and longer-than-expected audits had affected progress. The office has 14 auditors against a fully staffed complement of 16 and is pausing recruitment while it awaits clarity on potential FY2028 and FY2029 budget reductions, in addition to existing structural deficits. Audit findings included issues involving the Bell Museum’s collection inventory and appraisal, HIPAA governance, and IT governance at the Clinical and Translational Sciences Institute; the committee also heard results from audits of export controls and Buy America, Medical School Duluth, and other university functions.

The committee received notice of an engagement with KPMG to conduct a HIPAA security assessment, reported as an information item under Board Operations and agenda guidelines. No contract value or vote on the engagement was stated, and no procurement award or spending motion was identified. The committee also discussed its upcoming work plan, including a December information-security and data-management session and future compliance and risk-management updates.