33 Risk Management – Corporate Risk Register Update PDF 255 KB
This report updates councillors on the position of the council’s Corporate Risk Register. The main updates are as follows:
· CR4 – Loss or disruption to IT Systems and Networks from cyber attack – The score of this risk has been updated;
· CR14 – Continuity of Public Health arrangements for health protection – The risk has been updated and consideration will be given in the next quarter to its continuation as a Corporate Risk
· No new risks were added;
· No risks were removed during the quarter.
Material updates to the risks are summarised at section 8.
Additional documents:
Minutes:
The Risk and Insurance Manager presented a report, a copy of which had been circulated to each Member and a copy of which appears as Appendix 'C' to these Minutes in the Minute Book.
The Committee received an update on the position of the Council’s Corporate Risk Register. Material updates to the risks were summarised within the report and it was particularly noted that Corporate Risk 4 (Loss or disruption to IT Systems and Networks from cyber attack) had been updated and that Corporate Risk 14 (Continuity of Public Health arrangements for health protection) had been updated and consideration would be given in the next Quarter to its continuation as a Corporate Risk. No new risks had been added nor existing risks removed during the Quarter although it was reported that ongoing review of the Corporate Risks would now begin to reflect and align with the policies of the new Council.
In response to questions, it was agreed that risk relating to ‘SEND’ funding would be discussed with the risk lead and further update included within the next report to the Committee. Similarly, further detail would also be provided under the Corporate Risk 13 heading (Failure to deliver the transformation programme) with particular focus on the effect of mitigations introduced.
In response to comments about the apparent lack of movement within each risk, the Committee was reminded that, as the report only set out high level Corporate Risks, more minor changes were unlikely to be reflected in the overall risk score. Whilst accepting this, there was agreement that an indication of ‘direction of travel’ would be useful for the Committee and this could be included within future reports. The Portfolio Holder for Finance, also present at the meeting, underlined the importance of Member involvement in risk management at this level and confirmed his commitment to the process.
RESOLVED that the Audit and Governance Committee note the update provided in this report relating to corporate risks.
Voting: Unanimous