All institutions are required to have an internal control system to ensure achievement of goals and performance requirements, efficient operation, compliance with statutory requirements and reliable reporting.

Internal control systems shall contribute to continuous improvement and are based on common principles to achieve this purpose. The work shall be planned, systematic and documented.

Safety and security management systems should be integrated with the institution’s other management systems.

Control and management systems (internal control) are required in the following areas:

• Health, Safety and Environment (HSE)
• Data security
• Protection of privacy
• Emergency preparedness

The Ministry of Education and Research sets safety management requirements for all higher education institutions. The requirements are set out in the allocation letter and in the Governing document for civil protection and emergency preparedness in the education sector (regjeringen.no)  (NO).