• Section 1 - Overview
• Section 2 - Scope
• Section 3 - Rule
• Principles
• What UNE Representatives must do under this Rule
• Authorisation and Compliance
• Section 4 - Definitions

Section 1 - Overview

(1) To maintain and support the University's commitment to a high standard and quality experience for our Students, and an ethical and secure workplace for our staff, a commitment to compliance with all applicable laws, regulations, standards and internal rules and policies is essential. The University's approach to compliance management is shaped by the values and objectives within our strategic plan, and is implemented via an enterprise-wide Compliance Management System (CMS) which assists in promoting a culture within the University that values compliance, enables efficient processes and practices, avoids duplication of effort, and is continually evolving and improving.

(2) The purpose of this Rule is to ensure the University's business is conducted in accordance with its Compliance Requirements and commitments, and managed in a uniform way within the Compliance Management System (CMS). The CMS is based on the principles in Australian Standard AS ISO 19600:2015 Compliance management systems — Guidelines.

(3) The CMS is facilitated by the University's purpose built online tool, the Compliance Register System (CRS). The CRS is the tool relied upon to inform, record, manage and report upon the University's Compliance Obligations.

Section 2 - Scope

(4) This Rule will apply to all UNE Representatives.

Section 3 - Rule

(5) Australian Standard AS ISO 19600:2015 provides principles for the development, implementation, evaluation and maintenance of an effective and responsive CMS. These principles are adopted by the University and underpin the design of the CRS.

Principles

(6) Understand the environment the University operates in. The CMS is contextualised to reflect both the external environment and the internal issues that affect the operation of the University. This includes:

1. Establishing the scope of the CMS and ensuring it reflects the University's mission, vision, values and its strategic priorities and principles of good governance.
2. Identifying obligations - both Compliance Requirements and Compliance Commitments.
3. Assessing the risks of non-compliance.
4. Building processes to identify new and changed Compliance Requirements and commitments.

(7) Effective leadership and support of the CMS: The Council and Senior Executive provide support and demonstrate leadership and commitment to the CMS by:

1. Establishing and upholding the University's values, and setting the right tone from the top.
2. Ensuring the CMS is consistent with the University's mission, vision, values and strategic priorities.
3. Providing the resources needed for the establishment, development, implementation, evaluation, maintenance and continual improvement of the CMS.
4. Assigning responsibilities and authority for relevant roles.
5. Regularly communicating the value of the CMS to stakeholders.

(8) Effective management and controls to meet compliance obligations: The University plans, implements and controls the processes needed to meet compliance obligations, and to implement the actions to address compliance risks. This includes:

1. Putting in place effective controls to ensure that the University's compliance obligations are met and that non-compliance is prevented or detected and corrected.
2. Ensuring due diligence around the outsourcing of processes to ensure adherence to expected levels of behaviour.

(9) Continuous Improvement: The CMS drives continuous improvement. This means:

1. When non-compliance occurs, the University takes action to control and correct it, and/or manage the consequences. This includes a clear and timely escalation process to ensure all relevant non-compliance are raised, reported and escalated to relevant management, and the compliance function is informed and able to support the escalation
2. The University seeks to continually improve the suitability, adequacy and effectiveness of the CMS.
3. Identifying opportunities for improvement of the compliance performance of the University.

(10) Performance is monitored, evaluated and reported upon. The CMS will be monitored to ensure it is effective, current, and can identify instances where non-compliance has occurred. Compliance indicators and reporting will be established to help with this aspect. This includes:

1. Establishing a plan for continual monitoring, setting out monitoring processes, schedules, resources and the information to be collected.
2. Conducting audits at least at planned intervals to provide information on whether the Compliance Management System (CMS) is meeting its objective.

(11) The University plans to ensure the CMS can achieve its intended outcome. Planning includes:

1. Actions to address risks of non-compliance.
2. Establishing compliance objectives.
3. Preventing, detecting and reducing undesired effects of the CMS.
4. Achieving continual improvement in the CMS.

What UNE Representatives must do under this Rule

(12) The Council is committed to an effective CMS, maintaining an effective management capability, and ensuring all compliance risks associated with the University objectives are effectively managed.

(13) All UNE Representatives are responsible for behaving in a manner that creates and supports compliance, and ensuring their activities on behalf of the University comply will all applicable laws, regulations and University rules and policies.

(14) All UNE Representatives have a responsibility to undertake their duties in accordance with the CMS.

(15) The Vice-Chancellor and Chief Executive Officer is responsible for developing and implementing an effective CMS; and is accountable for the regular review of the adequacy and performance of the CMS in managing compliance, and reporting of any significant compliance breaches.

(16) The Vice-Chancellor and Chief Executive Officer is responsible for ensuring appropriate resources are allocated to develop, implement, maintain and improve the CMS.

(17) Senior Executive is responsible for the effective management of, and compliance with, all applicable University obligations, and ensuring all breaches are reported and appropriately managed.

(18) Managers have a duty to uphold and monitor compliance within their areas of responsibility, and to ensure that employees who report to them receive necessary training and instructions to enable them to fulfil their compliance obligations.

(19) The controls and compliance processes the University puts in place will be proportionate to the level of risk that the University faces in relations to a particular compliance obligation.

Authorisation and Compliance

(20) The Council, pursuant to Section 29 of the University of New England Act 1993 (NSW), makes this University Rule.

(21) UNE Representatives must observe it in relation to University matters.

(22) The Rule Administrator, Director Governance and University Secretary, is authorised to make policies and associated information for the operation of this University Rule. The policies and associated information must be compatible with the provisions of this Rule.

(23) This Rule operates as and from the Effective Date.

(24) The previous Rule and associated Compliance Management Framework and Procedures and related documents, are replaced. They have no further operation from the Effective Date of this new Rule.

(25) Notwithstanding the other provisions of this University Rule, Council may approve an exception to this Rule where it is determined that the application of the Rule would otherwise lead to an unfair, unreasonable or absurd outcome. Approvals by Council under this clause must be documented in writing and must state the reason for the exception.

(26) All UNE Representatives must comply with this Rule. A failure to comply with this Rule may amount to misconduct/serious misconduct and/or unsatisfactory performance.

Section 4 - Definitions

(27) Compliance - means meeting all the University's compliance obligations.

(28) Compliance obligation - means a compliance requirement or a compliance commitment.

(29) Managers - A person responsible for controlling or administering a group of employees.