Higher Education Risk Consortium

Higher Education Risk Consortium
Name	Higher Education Risk Consortium
Abbreviation	HERC
Formation	2010s
Type	Consortium
Headquarters	Cambridge, Massachusetts
Region served	United States; international partners
Membership	Universities, insurers, research institutions

Higher Education Risk Consortium

The Higher Education Risk Consortium is a collaborative network of universities, insurers, research institutions, and policy organizations focused on identifying, quantifying, and managing risks facing postsecondary institutions. It develops shared risk management tools, promotes best practices for campus safety and continuity planning, and convenes stakeholders from academic, insurance, and governmental sectors to coordinate responses to physical, financial, technological, and reputational threats. The Consortium engages with a broad range of partners including major research universities, specialty insurers, philanthropic foundations, and intergovernmental bodies.

Overview

The Consortium brings together members such as Harvard University, Massachusetts Institute of Technology, Stanford University, University of California, Berkeley, and Columbia University with stakeholders including Allianz, AIG, Prudential Financial, The Rockefeller Foundation, and Bill & Melinda Gates Foundation. It emphasizes synthesis of methods from National Institute of Standards and Technology, Federal Emergency Management Agency, Centers for Disease Control and Prevention, World Health Organization, and United Nations Office for Disaster Risk Reduction. The Consortium maintains ties to academic centers like Harvard Kennedy School, Stanford Law School, Yale School of Management, Oxford University, Cambridge University, and École Polytechnique Fédérale de Lausanne.

History and Formation

The Consortium was established through dialogues initiated by leaders from University of Pennsylvania, Princeton University, University of Chicago, and New York University in response to events including the Hurricane Sandy impact on campuses, cyber incidents linked to Equifax breach, and pandemic planning motivated by the 2009 swine flu pandemic and later the COVID-19 pandemic. Founding conveners included administrators formerly affiliated with JPMorgan Chase, McKinsey & Company, KPMG, and think tanks such as Brookings Institution and The Heritage Foundation. Early workshops were hosted at venues including Johns Hopkins University, Northwestern University, and Duke University with seed funding from Andrew W. Mellon Foundation and Alfred P. Sloan Foundation.

Membership and Governance

Membership spans large research universities, liberal arts colleges, community colleges, and international partners like University of Toronto, University of Melbourne, National University of Singapore, and Tsinghua University. Corporate partners include Munich Re, Swiss Re, CNA Financial, and Berkshire Hathaway, and technology collaborators include Microsoft, Google, Amazon Web Services, and IBM. Governance is overseen by a board with representatives from Association of American Universities, American Council on Education, National Association of College and University Business Officers, and legal advisors from firms such as Skadden, Arps, Slate, Meagher & Flom. Executive leadership has included former administrators from University of Michigan and policy experts from RAND Corporation.

Risk Assessment Framework and Methodologies

The Consortium's framework integrates frameworks developed by ISO, NIST Cybersecurity Framework, ISO 31000, and methodologies used by Moody's Investors Service, Standard & Poor's, and Fitch Ratings. Analytical models draw on work by scholars at Massachusetts Institute of Technology, Princeton University, Stanford University, and London School of Economics. Tools incorporate scenario analysis used in Intergovernmental Panel on Climate Change assessments, stress testing similar to those by Federal Reserve System, epidemiological modeling from Centers for Disease Control and Prevention, and catastrophe modeling techniques from RMS, Inc. and AIR Worldwide. The Consortium publishes standardized templates for loss modeling, continuity planning, and incident response aligned with guidance from National Collegiate Athletic Association and Institute of International Education.

Programs and Initiatives

Programs include a campus resilience index piloted with University of Texas at Austin, a cyber incident tabletop series run with Carnegie Mellon University and SANS Institute, a pandemic preparedness initiative developed with Johns Hopkins Bloomberg School of Public Health and World Health Organization advisors, and a climate adaptation consortium with Intergovernmental Panel on Climate Change contributors and The Nature Conservancy. Initiatives also include training academies co-led by Harvard T.H. Chan School of Public Health, grant competitions funded by Gates Foundation and Rockefeller Foundation, and an insurance pooled-risk product negotiated with Munich Re and Swiss Re.

Partnerships and Funding

Funding sources comprise philanthropic grants from Andrew W. Mellon Foundation, Rockefeller Foundation, and Gates Foundation; research grants from National Science Foundation and Department of Homeland Security; and underwriting partnerships with Allianz, AIG, and Munich Re. Research collaborations involve RAND Corporation, Brookings Institution, Urban Institute, Pew Research Center, and university research centers such as Belfer Center for Science and International Affairs and Hoover Institution. The Consortium has memorandum of understanding arrangements with accreditation bodies like Council for Higher Education Accreditation and international agencies including UNESCO.

Impact and Criticism

Advocates cite improved campus preparedness demonstrated at Rutgers University and Ohio State University during extreme weather events, enhanced cyber breach response coordinated with Department of Justice, and pooled insurance savings negotiated with Swiss Re. Critics argue the Consortium risks privileging elite institutions like Ivy League members and large research universities while underrepresenting community colleges and minority-serving institutions such as Historically Black Colleges and Universities and Hispanic-Serving Institutions. Other critiques reference concerns raised by privacy advocates associated with Electronic Frontier Foundation about data sharing, and policy analysts from Center for Democracy & Technology and American Civil Liberties Union regarding surveillance and liability shifting.

Category:Consortia