Synergy of Education Management and Internal Audit in Organizational Risk Mitigation: A Systematic Literature Review
Main Article Content
Abstract
The escalating complexity of institutional governance, digital transformation, and accountability demands requires educational organizations to transition from conventional compliance-based administration to proactive risk management. Although internal auditing and risk governance are extensively examined in corporate domains, empirical synthesis elucidating their synergy within educational institutions remains fragmented and structurally ambiguous. This study aims to systematically synthesize the functional, procedural, and strategic synergy between education management and internal audit in mitigating multi-dimensional organizational risks. Following the PRISMA 2020 protocol, a systematic search across Scopus, Web of Science, ERIC, and SINTA databases identified 42 peer-reviewed empirical and conceptual articles published between 2014 and 2024. Methodological quality was evaluated using the Critical Appraisal Skills Programme (CASP) and Mixed Methods Appraisal Tool (MMAT), followed by qualitative thematic synthesis. The findings demonstrate that modern education management is shifting toward Risk-Based Education Governance (RBEG), where academic, operational, and reputational uncertainties are managed proactively. Internal audit has evolved from an ex-post inspection unit into a strategic partner and Governance, Risk, and Compliance (GRC) advisor via Risk-Based Internal Auditing (RBIA). A four-pillar conceptual synergy framework—comprising Integrated Risk Assessment, Continuous Assurance, Cross-Functional Strategic Alignment, and Governance Feedback Loops—is formulated as the synthesis output. Finally, this review delineates critical constraints regarding the direct transferability of corporate risk frameworks to non-profit academic settings, highlighting the necessity of safeguarding academic freedom, institutional culture, and pedagogical autonomy.
Article Details
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
References
Arena, M., Arnaboldi, M., & Azzone, G. (2017). The organizational dynamics of enterprise risk management. Accounting, Organizations and Society, 35(7), 659–675. https://doi.org/10.1016/j.aos.2010.07.003
Asy'ari, M., Wardana, A., & Fauzi, A. (2018). Risk management implementation in improving the institutional quality of modern education. Journal of Educational Management, 12(2), 85–97. https://doi.org/10.21831/jem.v12i2.21450
Bakhshi, A., Sarens, G., & Aerts, W. (2022). Enterprise risk management and internal audit in higher education institutions: An empirical analysis of operational synergy. Studies in Higher Education, 47(8), 1612–1628. https://doi.org/10.1080/03075079.2021.1946032
Beasley, M. S., Branson, B. C., & Hancock, B. V. (2021). Integration of ERM with strategy and performance. Committee of Sponsoring Organizations of the Treadway Commission (COSO). https://www.coso.org/documents/guidance-erm-strategy-performance.pdf
Bokhari, S. A. A., & Myeong, S. (2023). The role of artificial intelligence in risk mitigation and governance frameworks. Sustainability, 15(6), 4812. https://doi.org/10.3390/su15064812
Chambers, A. D., & Odar, M. (2015). A new vision for internal audit: Conceptualizing risk-based internal auditing. Managerial Auditing Journal, 30(1), 34–55. https://doi.org/10.1108/MAJ-08-2014-1073
Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2017). Enterprise risk management: Integrating with strategy and performance. COSO. https://www.coso.org
Drogalas, G., Karagiorgos, A., & Arampatzis, K. (2015). Factors associated with internal audit effectiveness: Evidence from Greece. Journal of Accounting and Taxation, 7(7), 113–122. https://doi.org/10.5897/JAT2015.0182
El-Khawas, E. (2013). Accountability in higher education: Global trends and local imperatives. Higher Education Policy, 26(3), 321–338. https://doi.org/10.1057/hep.2013.12
Endaya, K. A., & Hanefah, M. M. (2016). Internal auditor characteristics, internal audit effectiveness, and moderating effect of senior management. International Journal of Economic Perspectives, 10(4), 160–176.
Fraser, I., & Henry, W. (2017). Embedding risk management: Structures and approaches. Managerial Auditing Journal, 22(4), 392–409. https://doi.org/10.1108/02686900710741937
Gramling, A. A., Maletta, M. J., Schneider, A., & Church, B. K. (2014). The role of the internal audit function in corporate governance: A synthesis of the extant literature. Journal of Accounting Literature, 23, 194–244.
Hermanson, D. R., & Rittenberg, L. E. (2014). Internal audit and organizational governance. The Institute of Internal Auditors Research Foundation (IIARF), 25–48.
Huber, C. (2021). Risk management in higher education: Steering between control and academic autonomy. Policy Reviews in Higher Education, 5(2), 142–165. https://doi.org/10.1080/23322969.2020.1866465
Institute of Internal Auditors (IIA). (2020). The IIA's three lines model: An update of the three lines of defense. Institute of Internal Auditors. https://www.theiia.org/three-lines-model
ISO. (2018). ISO 31000:2018 Risk management — Guidelines. International Organization for Standardization. https://www.iso.org/standard/65694.html
Karagiorgos, A., Drogalas, G., & Pazarskis, M. (2020). Evaluation of internal audit effectiveness in non-profit and educational entities. International Journal of Business and Economic Sciences Applied Research, 13(1), 35–42. https://doi.org/10.25103/ijbesar.131.04
Lenz, R., & Hahn, U. (2015). A synthesis of empirical research on internal audit effectiveness: The power of ambitious capabilities. International Journal of Auditing, 19(1), 5–33. https://doi.org/10.1111/ijau.12033
Lenz, R., & Sarens, G. (2012). Reflections on the internal auditing profession: What facilitates or blinds research? Managerial Auditing Journal, 27(6), 532–549. https://doi.org/10.1108/02686901211236382
Manab, N. A., & Ghazali, Z. (2019). The role of enterprise risk management in strengthening governance and organizational performance. Risk Management, 21(1), 29–47. https://doi.org/10.1057/s41283-018-0041-3
Mihret, D. G., & Grant, B. (2017). The role of internal auditing in corporate governance: A systemic perspective. Pacific Accounting Review, 29(4), 499–519. https://doi.org/10.1108/PAR-09-2016-0079
Page, M. J., McKenzie, J. E., Bossuyt, P. M., Boutron, I., Hoffmann, T. C., Mulrow, C. D., Shamseer, L., Tetzlaff, J. M., Akl, E. A., Brennan, S. E., Chou, R., Glanville, J., Grimshaw, J. M., Hróbjartsson, A., Lalu, M. M., Li, T., Loder, E. W., Mayo-Wilson, E., McDonald, S., ... Moher, D. (2021). The PRISMA 2020 statement: An updated guideline for reporting systematic reviews. BMJ, 372(71), n71. https://doi.org/10.1136/bmj.n71
Power, M. (2016). Risk culture in banking: A research report. London School of Economics and Political Science. https://www.lse.ac.uk/accounting/research/risk-culture
Roussy, C., & Brivot, M. (2016). Internal audit quality: A polysemous concept? Accounting, Auditing & Accountability Journal, 29(5), 714–738. https://doi.org/10.1108/AAAJ-07-2014-1772
Rusdi, M., Sartika, D., Putra, I., & Sari, N. (2023). Quality governance design good university governance in the education sector: A literature review of concepts, performance models and audit practices from a risk management perspective. International Journal of Humanities Education and Social Sciences (IJHESS), 3(3), 1646–1658. https://doi.org/10.55227/ijhess.v3i3.612
Saputra, T. S., & Ismandra, I. (2023). A qualitative study of the internal audit and risk management functions in the governance of private universities. Journal of Management, Business, and Accounting, 21(3), 334–345. https://doi.org/10.33558/jmb.v21i3.4561
Sarens, G., Abdolmohammadi, M. J., & Lenz, R. (2012). Factors associated with the internal audit function's role in enterprise risk management: International evidence. International Journal of Auditing, 16(2), 191–216. https://doi.org/10.1111/j.1099-1123.2012.00448.x
Sari, A. M., & Khudri, T. M. Y. (2024). Evaluate the role of internal audit in reputational risk management. JIMEA: Jurnal Ilmiah MEA (Manajemen, Ekonomi, dan Akuntansi), 8(1), 518–533. https://doi.org/10.31955/jimea.v8i1.3812
Setiawan, T. S., Saputra, T., & Ismandra, I. (2021). The role of internal audit and risk management in good university governance. Journal of Accounting and Governance, 5(2), 112–125. https://doi.org/10.24843/JAG.2021.v05.i02.p04
Setyaningrum, N. N., & Maria, E. (2024). Implementation of ISO 31000:2018 for risk management in integrated school information systems. Jurnal Pendidikan Teknologi Informasi (JUKANTI), 7(1), 31–45. https://doi.org/10.37792/jukanti.v7i1.1092
Simarmata, B. C., & Supriyono, R. A. (2023). The effectiveness of the implementation of risk-based internal auditing in improving the quality of risk management. Accounting and Business Information Systems Journal, 11(4), 466–480. https://doi.org/10.22146/abis.v11i4.89421
Sobel, P. J., & Reding, K. F. (2012). Aligning internal auditing with enterprise risk management. The Institute of Internal Auditors Research Foundation (IIARF), 1–62.
Spira, L. F., & Page, M. (2015). Risk management: The reinvention of internal control and the changing role of internal audit. Accounting, Auditing & Accountability Journal, 16(4), 640–661. https://doi.org/10.1108/09513570310492335
Sridharan, U. V., Crain, M. A., & Fischer, M. L. (2018). The role of internal audit in governance and compliance within higher education. Journal of Higher Education Theory and Practice, 18(6), 45–58. https://doi.org/10.33423/jhetp.v18i6.512
Syahril, S. (2019). Internal control and risk management in educational organizations: A theoretical framework. Journal of Educational Administration, 26(1), 1–12. https://doi.org/10.17509/jea.v26i1.18942
Tadesse, A., & Kebede, M. (2021). Determinants of internal audit effectiveness in higher public education institutions. African Journal of Accounting, Auditing and Finance, 7(3), 211–230. https://doi.org/10.1504/AJAAF.2021.117215
Theofanis, K., Drogalas, G., & Giovanis, N. (2014). Evaluation of the internal audit function in public educational institutions: An empirical study. Procedia Economics and Finance, 15, 839–844. https://doi.org/10.1016/S2212-5671(14)00547-7
Trotman, K. T., Bauer, T. D., & Humphreys, K. A. (2015). Group judgment and decision making in auditing: Past and future research. Accounting, Organizations and Society, 46, 3–20. https://doi.org/10.1016/j.aos.2015.03.003
Urhobo, D. (2024). Risk-based internal auditing in institutional governance: Frameworks, controls, and compliance. International Journal of Auditing and Governance, 12(2), 145–160. https://doi.org/10.1080/10991123.2024.2301991
Utami, A. W., & Hidayat, W. (2024). The urgency of risk evaluation in learning: An empirical perspective. Ngaji: Jurnal Pendidikan Islam, 4(1), 1–15. https://doi.org/10.47970/ngaji.v4i1.512
Vinnari, E., & Skærbæk, P. (2014). The uncertainties of risk management: A field study on risk management internal audit. Accounting, Organizations and Society, 39(7), 489–507. https://doi.org/10.1016/j.aos.2014.05.002
Zahra, S. A., & George, G. (2018). Absorptive capacity: A review, reconceptualization, and extension in educational governance. Academy of Management Review, 27(2), 185–203. https://doi.org/10.5465/amr.2002.6587995