Organizational structure also appears to affect the quality and frequency of communications. For
instance, the internal audit and information systems security functions were physically located near one
another at Institution C and the participants reported that they had frequent interactions. In contrast, at
Institution B, internal audit reported directly to the Board of Regents and did not have a formal channel to
communicate with the information systems function on campus.