The NCAA has a "code of conduct" authority, which is why they are "sitting back" while the official PA investigation continues. If there's a violation of conduct, the NCAA can sanction the athletic program of member schools.