Subject. The article investigates the construction of a system of risk-oriented internal control of educational organizations’ activities.
Objectives. The purpose is to develop a classification of risks associated with various activities of an educational organization, identify entities of internal control responsible for risk management, create a portfolio and risk register that serve as a basis for organizing an effective system of risk-oriented internal control and improving the quality of university management.
Methods. The study draws on methods of detailing, observation, generalization, comparison, classification, etc.
Results. Using the university case, I disclose approaches to risk classification, considering the specifics of educational organization's activities, the formation of a passport and risk register, enabling through internal control tools to identify opportunities for their mitigating and to make appropriate management decisions.
Conclusions. It is possible and advisable to apply a risk-based approach to the organization of internal control in an educational organization along with traditional approaches that are aimed at identifying violations of the requirements of legitimate, targeted and rational spending of budgetary and extra-budgetary funds. It is necessary to classify and assess risks associated with various activities of an educational organization, to monitor the implementation of risk management initiatives.
Information risk management in the organization
