Transparency & good governance

,

Governance structure and responsibilities

Governing bodies

Institutional strategy, budgets, appointments, risk policy, and compliance.

Executive management, partnerships, and legal representation.

Teaching quality, curriculum, faculty, and academic assurance.

  • Academic Quality

  • Ethics & Dual-Use / Research

  • Safety & RAMS / HSE

  • Data, Privacy & Cybersecurity (GDPR / OT / IT)

  • Export Controls

  • ESG & Sustainability

  • Risk & Audit

  • Review of relevance, employability, and tech radar by verticals.
  • Operational management (schools, laboratories, procurement) — manages day-to-day risks.

  • Risk & Compliance — policies, training, and independent monitoring.

  • Internal Audit — assurance to the Board: finance, processes, data, and controls.

We publish the organisation chart, regulations, committee charters, and the session calendar.

Principios rectores

Active advertising

We publish key information by default without the need for a prior request.

Accountability

Each relevant decision identifies responsible parties, criteria, and metrics.

Traceability

Versions, datasets, technical annexes, and summary minutes available with timestamp.

Universal accessibility

Easy-to-read content and WCAG 2.2 AA (documents, tables, dashboards).

Responsible protection

Personal data, trade secrets, or matters regulated by export controls are excluded where applicable, with express justification (see §17).

Continuous improvement

internal and external audits, suggestion channel, and annual improvement plan.

Three lines of defenseEconomic and contractual information

Budgets and accounts

Procurement and purchasing

Academic transparency

Laboratories, safety, and measurement quality

,

Integrity, whistleblowing, and whistleblower protection

Gestión de riesgos y auditoría

ERM (Enterprise Risk Management) with risk map: personal/laboratory safety, compliance (GDPR, export), reputation, continuity, cyber-OT/IT, financial, climate, and third-party risks.

Risk appetite approved by the Board and operational limits (e.g., “zero tolerance” in personal safety).

External audits: financial, accreditation (EN 17025, EN 9100), ESG assurance (where applicable).

Annual internal audit plan; public summary reports and follow-up on findings.

Participation and active listening

Algorithmic transparency and automated decisions

If we use analytics or AI to support processes (e.g., scholarship prioritization or learning analytics), we apply:

Service Level Agreement (SLA)

Indicative commitments

  • We publish compliance indicators and improvement plans when targets are not met.

How to request information (access and limits)

Programación

Limits and exceptions (why and when)

Whenever we apply an exception, we publish an anonymized or aggregated version whenever possible and the reason for the restriction.

Verification and improvement mechanisms

Indicative commitments

Scroll to Top