Governance Is Not Enough: Building Assurance Capability in Higher Education

Universities are rarely short of governance.

Most institutions have mature committee structures, policies, quality processes, risk registers, dashboards, annual monitoring arrangements and action plans. These mechanisms matter. They demonstrate accountability, provide oversight and help meet external expectations.

Yet many leaders still find themselves asking a deceptively simple question:

How confident are we that students are experiencing the education we believe we are providing?

That is a governance question before it is a regulatory one.

But the current regulatory environment is testing something more demanding: whether institutions can see what is happening, understand what it means and act quickly enough to change the conditions producing risk.

That is not simply a compliance question.

It is an assurance capability question.

Governance Is Necessary But Not Sufficient

Governance structures can show that issues have been considered. They can record decisions, allocate responsibility and provide assurance to committees, executives and governing bodies. But governance does not automatically create institutional understanding.

A committee can receive a report without knowing whether the issue is isolated or systemic. A dashboard can show a trend without explaining what is producing it. A policy may define what should happen without demonstrating whether it happens consistently in practice.

This distinction matters because many of the risks now facing universities do not sit neatly within one function.

Student outcomes are shaped by curriculum, assessment, advising, support services, data, timetabling, digital systems, belonging and employability. Partnership quality depends on approval, delivery, communication, support and escalation. Assessment credibility depends not only on regulations, but on how those regulations interact with assessment design, marking practice, award algorithms and academic judgement.

Each part may be governed.

The question is whether the institution can understand the combined effect.

What Assurance Capability Means

I define assurance capability as the organisational ability to detect, interpret and act on risks to quality, standards and student outcomes before those risks become regulatory failures or lived student harm.

It is not a replacement for governance.

It is the capability that makes governance effective.

Assurance capability comprises five connected abilities:

• Visibility – Can the institution see what is happening in practice?
• Interpretation – Can it distinguish data noise from meaningful risk?
• Authority – Can anyone change the conditions producing the risk?
• Responsiveness – Can action happen quickly enough to benefit current students?
• Learning – Does assurance change practice, or mainly produce documentation?

These capabilities are easy to describe and difficult to build. They require evidence, judgement, trust, authority and cross-institutional working.

Why This Matters Now

Recent regulatory developments point in the same direction.

Changes to quality regulation and TEF place greater emphasis on how providers evidence educational quality, student experience and student outcomes. Regulatory attention to degree classification algorithms raises questions about award credibility and public confidence. Partnership scrutiny asks whether governance and student support remain adequate as provision grows. AI is testing whether institutions can maintain confidence in assessment as educational practice changes.

These may look like separate issues.

They are also examples of the same institutional challenge:

Can the university see, explain and change the conditions shaping the outcome?

The Risk of Mistaking Activity for Assurance

There is a danger that universities respond to regulatory pressure by creating more activity: more templates, more monitoring, more action plans and more dashboards.

Sometimes that will be necessary.

But more assurance activity is not the same as stronger assurance capability.

The better test is whether the institution can answer practical questions.

• What evidence would demonstrate whether something is working?
• Who can interpret that evidence in context?
• Who has authority to act?
• How do we know whether action has improved the student experience?

These questions move assurance from a reporting cycle to an institutional capability.

Questions for Governing Bodies and Executive Teams

Senior teams and governing bodies might ask:

• Do our assurance reports explain causes, or mainly describe outcomes?
• Where does authority sit to change the conditions producing risk?
• How quickly can evidence become action?
• What evidence gives us confidence that students are experiencing the education we intend?

These questions shift the conversation from whether a process exists to whether it enables institutional understanding and improvement.

The Leadership Challenge

For Registrars, Secretaries, COOs, PVCs, DVCs and governing bodies, the challenge is not simply to ask whether appropriate processes exist.

The harder question is whether those processes generate institutional understanding and timely action.

One question may be especially useful:

How does the institution know that students are experiencing the education it believes it is providing?

That question is deliberately simple.

It cannot be answered by pointing to a single committee, dataset, policy or annual report. It requires institutions to connect academic standards, student experience, assessment, support, data, partnerships, professional services, student voice and governance.

That may be where the next stage of governance maturity lies: not in producing more assurance for its own sake, but in strengthening the institutional capability to understand educational reality and act on it.

The regulatory environment is unlikely to become simpler. But the deeper issue is not only regulatory compliance. It is whether universities can build the assurance capability needed to deliver the outcomes they say matter.

Governance tells us whether responsibilities have been discharged.

Assurance capability tells us whether the institution understands educational reality well enough to improve it.

In an increasingly complex regulatory environment, the institutions that thrive will not simply be those with strong governance, but those with the capability to understand educational reality and act on it.

---

About the author

Tom Bennett is a higher education leader working across educational transformation, academic quality, student success, partnership governance and institutional capability.

Skip past comments, to footer Skip past comments, to main