Projekt-Charter

Together with an external management consultant and expert in information security and risk management, a Project-Charter specifically tailored to the needs of BOKU was developed.

The aim of the Project-Charter is to implement a defined CMS at BOKU and to create the basis for the longer-term operation of a transparent, efficient and effective CMS and to draw up a compliance-manual.

The concept developed is based on generally accepted auditing standards and norms, in particular IDW PS 980 and ISO 19600.

According to this, a CMS consists of several elements/building blocks, i.e. regulations, awareness-raising measures and processes that maintain the operation of such a system.

The Project-Charter is implemented by means of several pilot activities/sub-projects, which are or have already been identified on the basis of a risk analysis. The sub-projects go through two project phases (pilot phase and roll-out phase) according to the PDCA cycle (Plan, Do, Check, Act), which in turn are subdivided into several project steps.

Next Steps for Implementing the Project Charter at BOKU

A Code of Conduct (CoC) has been established as a formal regulatory framework, which defines the basic principles for behaviour within BOKU and towards external partners/stakeholders. This is intended to set out BOKU's position on corporate ethics and integrity and to raise awareness among BOKU-members accordingly. The CoC was published in the University Gazette on February 12, 2026.

The Code of Conduct is supplemented by a Compliance Policy, which serves to ensure the organizational and procedural implementation and support of the CoC. The previously existing BOKU Compliance Guidelines have been replaced by the Compliance Policy, which was published on October 29, 2026. BOKU’s Anticorruption Guideline will be revised on the basis of the published CoC and the published Compliance Policy, i.e. updated and, where necessary, expanded.

After that, we will prepare a Compliance Handbook which will document our CMS and its individual components, including communication, awareness-raising, and training measures.