Issue - meetings

Consideration of recommendations of the Audit Committee of 21 July 2025 in respect of risk management.

Consideration was given to the recommendations of the Audit Committee of 21 July 2025 in respect of the risk management process and the Strategic Risk Register (SRR).

Due regard was given to the views of the Committee, the financial and value for money considerations and the legal implications and  a number of changes made to the current Register, including the deletion of some risks that were no longer felt to be strategic risks, were noted.    The number of ‘red’ risks on the SRR were 3 as set out below:

·       Achievement of Savings and Transformation Strategy

·       Failure to agree a Local Plan

·       Managed exit from the Agile System.

Cllr Betts proposed, Cllr Boughton seconded and Cabinet

RESOLVED:  That

(1)             the updates to the Strategic Risk Register since the last iteration, with particular emphasis on those risks categorised as RED as shown in Annexes 1 and 1a of the report be noted; and

(2)             the service risks identified in Annex 2 of the report be noted.

(Decision Notice D250102CAB)

Consideration was given to the recommendations of the Audit Committee of 21 July 2025 in respect of the risk management process and the Strategic Risk Register (SRR).

Due regard was given to the views of the Committee, the financial and value for money considerations and the legal implications and  a number of changes made to the current Register, including the deletion of some risks that were no longer felt to be strategic risks, were noted.    The number of ‘red’ risks on the SRR were 3 as set out below:

·       Achievement of Savings and Transformation Strategy

·       Failure to agree a Local Plan

·       Managed exit from the Agile System.

Cllr Betts proposed, Cllr Boughton seconded and Cabinet

RESOLVED:  That

(1)             the updates to the Strategic Risk Register since the last iteration, with particular emphasis on those risks categorised as RED as shown in Annexes 1 and 1a of the report be noted; and

(2)             the service risks identified in Annex 2 of the report be noted.

The report of the Management Team provides an update on the risk management process and the Strategic Risk Register.  An update is also provided in respect of the work being undertaken within the Council to champion risk management.

The report of the Management Team provided an update on the risk management process and the Strategic Risk Register.  An update was also provided in respect of the work being undertaken within the Council to champion risk management.

An executive summary of the RED risks was provided at Annex 1 to the report and a full update on the current strategic risks and how they were being managed as at the time of writing were set out at Annex 1a to the report.  The risks that were categorised RED at the time of the April 2025 meeting were:

·         Achievement of Savings and Transformation Strategy

·         Failure to agree a Local Plan

·         Managed exit from the Agile System

Following a review of the risks on the Strategic Risk Register, updates had been made with notes in red to reflect the current strategic risks and mitigations, although it was noted that risks categorised RED remained as above.

Reference was made to the risk in respect of ‘Devolution and Reorganisation in Kent Local Government’, which remained as ‘Amber’ at this stage, although it was recognised that the ongoing risk assessment would be informed by the work underway regarding the submissions from the Kent authorities with the assistance of an appointed strategic partner.

During discussion, particular concern was raised by Members on the level of risk associated with cyber-attack given the significant impact it could have on the operation of an organisation.  Although ‘Cyber Security’ risk was currently categorised as ‘Amber’ on the Strategic Risk Register, the importance of ensuring appropriate and robust mitigation measures in place was reinforced.

A schedule of ongoing risks and risks identified by Service Management Teams and Management Team since the last report to the Committee were set out at Annex 2 to the report.

In addition, Members were updated on the progress in respect of the review of the Risk Management Strategy led by the officer Risk Champions Group, with particular reference made to the proposal regarding the matrix model used in the Council’s Strategic Risk Register.   An updated Strategy was anticipated to be presented to the Committee to review in September 2025.

It was proposed by Councillor Cannon (Chair), seconded by Councillor Lark and the Audit Committee

RECOMMENDED*:  That

(1)          the updates to the Strategic Risk Register since the last iteration, with particular emphasis on those risks categorised as RED as shown in Annexes 1 and 1a of the report, be noted; and

(2)          the service risks identified in Annex 2 of the report, be noted.

*Recommended to Cabinet