8:45 – 9:10 Login / Register / Networking
09:10 – 09:15 Welcome to Conference - Bridget Bishop, Chair of CHEIA
9:15 – 10:15 Session 1 - Higher Education on the Horizon: Navigating Risk, Resilience, and Reform
Speaker: Annie Bell, Associate Director of Education, Public First
Annie Bell, Associate Director at Public First, will explore the emerging trends shaping UK higher education. Against a backdrop of regulatory reform, financial constraint, and shifting public expectations, this talk will examine the key risks and strategic opportunities facing the sector. With a focus on what these developments mean for internal audit, Annie will offer insights into how audit functions can evolve to remain agile, add value, and support institutional resilience in an increasingly complex and uncertain environment.
Annie is Associate Director, Higher Education at Public First. She has spent over a decade working to influence higher education policy at a national level at the National Union of Students, Universities UK and most recently as Head of Communications and External Affairs at University Alliance. Her work has appeared in The Guardian, The Independent, Times Higher Education and more.
Annie has extensive experience of leading campaigns, public affairs and branding strategies at a senior level. She led University Alliance’s rebrand and positioning strategy in 2023 and developed a strategy for positioning the UK as a study destination globally whilst at Universities UK. She has worked on campaigns that influenced key moments in higher education policy, including the Higher Education and Research Act 2017, the 2019 International Education Strategy and higher education policy surrounding the UK’s withdrawal from the European Union
10:40 – 11:40 Session 2 - Driving growth and cutting costs: the role of the operating model in future proofing our universities
Speaker: David Becker, Chief Operating Officer, SUMS
The HE sector is facing unprecedented pressure to evolve, from financial challenges and digital transformation to shifting student expectations and global competition. But the answer isn’t just “do more for less.” It’s designing operating models that are resilient, people-centred and future-proof. David will share insights from his extensive experience developing and implementing target operating models and leading transformation across politically complex institutions.
David is Chief Operating Officer for the SUMS Group, a not-for-profit and registered charity that supports more than 160 providers within the UK and overseas to improve all aspects of their operations. David specialises in organisational transformation, particularly the co-creation and implementation of fit-for-the-future target operating models, and his leadership experience cuts across sectors including higher education, local government and international trade. He has designed and implemented target operating model programmes across multiple institutions and has a track record of driving measurable improvements across metrics including financial efficiency, service satisfaction and income diversification. He has also led on several lessons learned audits of 'transformation gone wrong' and brings that learning to bear for SUMS Group members across their portfolio of transformation initiatives.
12:00 – 13:00 Session 3 - Balancing Inclusion and Expression: The New Landscape of Free Speech in Higher Education
Speaker: Alex Hall, General Counsel, City St George’s, University of London
Freedom of speech in UK universities is under renewed scrutiny, and institutions must navigate the complex task of protecting freedom of speech while upholding legal obligations around discrimination and harassment. In this session, Alex will unpack the latest guidance from the OfS on freedom of speech and the Higher Education (Freedom of Speech) Act 2023, explaining the legal responsibilities now placed on universities. Alex will explore the practical impact of these developments on university governance, policy, and culture, and outline steps institutions can take to ensure compliance.
Alex Hall joined City St George's, University of London, as General Counsel and Director of Governance and Legal Services in April 2025.Prior to that, he worked for the University of Hertfordshire for ten years, latterly as Director of Legal and Compliance Services and University Solicitor.
Before working in Higher Education, Alex was a commercial litigator in the City of London and acted in a series of high-profile claims in the High Courts in London, for a wide variety of clients, including hedge fund managers, London restaurants, Russian oligarchs, and the Libyan sovereign wealth fund. Alex read history at Balliol College, Oxford, and holds postgraduate legal diplomas from Oxford and Oxford Brookes Universities. He is also a Principal Fellow of the Higher Education Academy.
Alex was elected Chair of the Association of University Legal Practitioners (AULP) in December 2021, and has previously been legal adviser to University Alliance. He has extensive governance experience, including as an award-winning chair of governors at a local secondary school, as company secretary to various university subsidiary companies, and as a university governor.
14:00 – 15:00 Session 4 - Staying Ahead of the Threat: Cyber Risk and Assurance in HE
Speaker: Paul Kelly, Head of Cyber and Data Privacy Services, Azets
Paul will provide an update on the evolving cyber security landscape in UK higher education and explore emerging threats, vulnerabilities, and the implications for institutional resilience. This session will highlight what internal auditors should be looking for when assessing cyber risk, governance, and response readiness, with recent practical examples to illustrate key points. Paul will also link back to the IIA’s recently published ‘Topical Requirements’ on Cyber Security.
Paul leads Azets’ Cyber and Data Privacy Services in the UK. Paul has almost 30 years of cyber security experience across a wide range of clients and sectors. Paul’s clients range from higher education institutes, large corporate and public bodies to small and medium sized businesses. Paul also holds the CISSP qualification and is also a certified ISO27001 Lead Auditor. Paul has extensive experience in supporting clients manage their cyber security risk and enhance their cyber security resilience. Paul’s work with clients includes compliance audits, maturity assessments, improvement planning strategy, and development of risk management as well as governance arrangements.
15:15 – 16:00 Breakout Discussion 1 - Open Mic: Speak freely about Free Speech
This interactive session invites internal auditors to discuss the practical challenges of upholding the new free speech duties in their universities. Delegates will share experiences from their institutions and reflect on how audit functions can support governance and risk management in this evolving area.
Chairs: Bridget Bishop & Steve Stanbury, CHEIA Executive
15:15 – 16:00 Breakout Discussion 2 - Acting Ethically in Times of Uncertainty
With financial pressures, shifting priorities, and increasing scrutiny across the higher education sector, internal auditors face growing ethical challenges. This interactive session offers a safe space to explore sector-relevant dilemmas and strengthen ethical decision-making through open discussion and peer learning.
Chairs: Christine Edwards & Sonia Howard, CHEIA Executive
8:45 – 9:10 Login / Register / Networking
09:10 – 09:15 Welcome to Day 2 - Bridget Bishop, Chair of CHEIA
9:15 – 10:15 Session 1 - Student Wellbeing and Institutional Duty: Responding to Condition E6
Speaker: Steve Hall, Director of Student Experience, University of Bristol
In this practical session, Steve will guide delegates through the implementation of the Office for Students’ new Condition of Registration (E6). Drawing on over a decade of experience in the higher education sector—including roles at the OfS and HEFCE—Steve will outline Bristol’s approach to meeting the condition, exploring key considerations for institutional policies and processes. He will also highlight the governance and risk management challenges involved, offering insights into how universities can develop effective, student-centred responses.
As director of student experience at the University of Bristol, Steve Hall has responsibility for a wide range of student-facing support services. Before joining Bristol, Steve was a civil servant for 10 years, working at the Department for Work & Pensions, the Cabinet Office and the Higher Education Funding Council for England. He has a degree in English literature from the University of Exeter and a master’s in the same subject from King’s College London.
10:40 – 11:40 Session 2 - REF Readiness 2029: What Should Be on Your Audit Radar?
Speaker: Pauline Muya, Director, Research Management
With the next Research Excellence Framework submission on the horizon, many universities are embedding REF readiness into their internal audit plans for 2025/26. Pauline will offer practical guidance for internal auditors on how to assess institutional preparedness, identify key risks and opportunities, and understand the systems and processes that underpin a successful submission. Drawing on over 30 years of experience in HE research management, Pauline will explore what questions auditors should be asking their institutions — from governance and data integrity to research environment and impact case studies.
Pauline Muya has over 25 years of experience in the UK higher education sector, working across all aspects of research management, including research strategy and policy, operations (pre- and post-award, contracts, governance, ethics and integrity), research development (including EU and international research) and creating a supportive and inclusive research culture at all career stages, including Doctoral College and oversight of doctoral training programmes.
Pauline has worked in six UK institutions over the past 25 years, in a range of roles at a senior level, working in both central and departmental positions and across scientific disciplines. As well as detailed knowledge and understanding of the UK research landscape, Pauline has extensive experience of leading and managing diverse, large teams. As a result, she is experienced in managing resources and budgets, leading teams through change, reviewing operations and processes, planning for projects and aligning services with institutional strategies.
Pauline has notable expertise on the Research Excellence Framework, having overseen institutional and departmental submissions to four prior exercises. For REF2021, she was seconded to Research England to work directly with the assessment panels and the REF team as a Panel Adviser.
12:00 – 13.00 Session 3 - International Recruitment Agents - Managing Compliance and Performance - A Lifecycle Model
Speaker: Sayaz Miah, Director of International, University of Hertfordshire
With international student recruitment facing growing scrutiny, universities must ensure their use of recruitment agents is both compliant and strategically effective. Sayaz will introduce a lifecycle model for managing agent relationships—from initial selection and contracting, through ongoing monitoring and performance review, to renewal or exit. Internal auditors will gain insights into key risk areas, governance challenges, and how assurance activities can support ethical, transparent, and well-managed recruitment practices.
Sayaz Miah is Director of International at the University of Hertfordshire. He oversees global student recruitment, transnational education, and strategic international partnerships. As the Director of International at Herts, Sayaz plays a pivotal role in expanding the institution’s global reputation and reach, fostering meaningful international collaborations, and enhancing the international student experience. Sayaz has led initiatives that have increased student mobility, strengthened institutional alliances, and opened new pathways for academic cooperation worldwide. In 2024 the University was recognised for its outstanding internationalisation strategy and was the only UK University to be awarded a King’s Award for Enterprise in International Trade. Considered the UK’s highest business honour, the award recognises those who are leading in their fields in international trade, innovation, and sustainable development.
14:00 – 15:00 Session 4 - Navigating the complexities of competition law and consumer protection laws in Higher Education
Speaker: Kate Newman, Catherine Savage & Katrina Anderson, Mills & Reeve
Kate Newman, Catherine Savage & Katrina Anderson, specialists in competition law and consumer protection at Mills and Reeve, will explore how recent legal developments are reshaping the responsibilities of higher education providers. This session will look at the implications of competition law on potential sector mergers/acquisitions, as well as the new OfS condition C5 for new providers on “treating students fairly”. It will also explore the impact of the Digital Markets, Competition and Consumers Act 2024 which came into force in April 2025.
Kate is a specialist in competition law with over 22 years of experience. Kate's expertise includes advising corporate clients on how to structure their commercial strategies and trading practices to be compliant with competition law; achieving clearances for complex transactions; and steering clients through investigations by the competition authorities.
Catherine specialises in academic litigation. She has over 15 years of experience in advising Universities and Colleges in connection with all types of disputes. This includes Equality Act claims brought by students; breach of contract and negligence claims; applications for judicial review; consumer protection matters and immigration disputes.
Katrina is an specialist in compliance with regulation that touches on businesses’ relationships with consumers. This includes consumer protection, food labelling, digital & e-commerce regulation and advertising/marketing law.
15:15 – 16:00 Breakout Discussion 1 - The Gillies Report: Lessons for internal audit
Given the Gillies Report’s findings on the breakdown of financial oversight and the culture of suppressed challenge at the University of Dundee, what early warning signs should internal auditors in HEIs be more attuned to—and how can we ensure those signals are not ignored or downplayed by leadership?
Chairs: Bridget Bishop & Irene Mortimer, CHEIA Executive
