An increasing emphasis on enterprise risk management drives university to seek external assessment University