Cabinet- 4 September 2024

Strategic Risk Register

Purpose

For Decision

Classification

Public

Executive Summary

The Strategic Risk Register (Appendix 1), now included within this report contains the significant risks, as identified by senior and executive council officers in consultation with the Portfolio Holders, in the Council achieving the priorities set out in the ‘For people, place, prosperity Corporate Plan 2024-28’

Recommendation

Cabinet are asked to recommend Council adopt the Strategic Risk Register.

Reasons for recommendation

Risk Management Policy 2022 confirms the role of Cabinet is to endorse the content of the Strategic Risk Register.

Wards

All

Portfolio Holders

Councillor Jill Cleary – Leader / All

Strategic Director

Alan Bethune – Strategic Director Corporate Resources S151 and Transformation

Officer Contact

James Clarke

Insurance and Risk Officer

023 8028 5002

James.Clarke@nfdc.gov.uk

 

 

Introduction and background

1.        Risk management aims to identify the risks that may impact on the Council achieving its objectives. Its purpose is to evaluate, design and implement effective measures to reduce both the likelihood and potential impact of these risks occurring.

2.        The Council has a statutory responsibility to have in place arrangements for managing risks under the Accounts and Audit Regulations; which require a sound system of internal control, facilitates the effective exercise of the body’s functions and includes arrangements for the management of risk. As such it features strongly in the Council’s Local Code of Practice for Corporate Governance and is one of the primary assurance strands in the Annual Governance Statement, which places significant reliance on a robust risk management framework.

Strategic Risk Register

3.        The Strategic Risk Register (Appendix 1) outlines the most significant overarching risks to achieving the current Corporate Plan and details the proposed measures to address these risks effectively. The Strategic Risk Register (Appendix 1) captures the most significant cross cutting risks to the delivery of the current Corporate Plan and the proposed actions to mitigate these risks.

4.        These risks have been identified through collaboration between senior and executive council officers and Portfolio Holders to ensure a unified approach in identifying and recording these risks.

5.        The strategic risk register covers a total of eight significant risks. The updated register in Appendix 1 provides a comprehensive description of the actions needed to adequately control residual risks. Some actions are ongoing, while others have specific completion points.

6.        In the narrative detailing the current circumstances and risk controls, each paragraph is labelled with a corresponding letter that matches the narrative in the Risk Control section. For instance, a paragraph labelled 'A' aligns with a reference 'A1' in the Risk Control column, maintaining this lettering system followed by sequential numbers.

7.        The column titled 'Further control to mitigate risk' suggests additional measures to enhance the existing risk controls.

8.        The term 'Action Owner,' indicates the responsible job title for taking on each action.

9.        The below table provides an explanation to the coding used for the CPTC Column (Corporate Plan Priority Theme Code).  This ensures each action is geared towards the relevant themes within the Corporate Plan.


 

 

People Priorities

Code

Priority 1: Helping those in our community with the greatest need

PE1

Priority 2: Empowering our residents to live healthy, connected and fulfilling lives

PE2

Priority 3: Meeting housing needs

PE3

Place Priorities

 

Priority 1: Shaping our place now and for future generation

PL1

Priority 2: Protecting our climate, coast, and natural world

PL2

Priority 3: Caring for our facilities, neighbourhoods, and open spaces in a modern & responsive way

PL3

Prosperity Priorities Code

 

Priority 1: Maximising the benefits of inclusive economic growth and investment

PR1

Priority 2: Supporting our high-quality business base and economic centres to thrive and grow

PR2

Priority 3: Championing skills and access to job opportunities

PR3

 

Corporate plan priorities

10.    The recommendations are designed to enhance the successful delivery of all corporate plan priorities by proposing risk mitigation strategies that address cross-cutting vulnerabilities facing the Council.

Options appraisal

11.    A strategic risk register is essential for the council to effectively identify, assess, and manage risks. Without this register, we may face considerable operational, financial, and reputational repercussions, underscoring the importance of prioritising and managing risks appropriately.

Consultation undertaken

12.    Service managers and the Executive Management Team (EMT) conducted an initial review of the Strategic Risk Register. It was determined that specific columns require updates to align with the recent recommendations provided by the internal audit. Additionally, a proposal was made to replace individual names in the action owners' section with job titles to enhance clarity and reference efficiency. 

13.    The Audit Committee contributed valuable feedback regarding the recent global ICT outage, which has been integrated into Strategic Risk 3A. This includes revisions to Risk Control A14 and the revision of Further control to mitigate risk, No 9. Moreover, input related to Strategic Risk 7 has been addressed, resulting in enhancements to Current Circumstance A, as well as corresponding updates to Risk Controls A4 and A5.

Financial and resource implications

14.    There are none arising directly from this report, although strong risk management and a solid understanding of risk helps to support robust financial management.

Legal implications

15.    There are no direct legal implications arising from this report.

Risk assessment

16.    The Strategic Risk Register is evidence of the risk assessment for the cross-cutting risks.

Environmental / Climate and nature implications

17.    There are no direct environmental or climate and nature implications arising from this report.

Equalities implications

18.    There are no direct equality implications arising from this report.

Crime and disorder implications

19.    There are no direct crime and disorder implications arising from this report.

Data protection / Information governance / ICT implications

20.    There are no direct Data protection / Information governance / ICT implications arising from this report.

 

Appendices

 

Appendix 1 – Strategic Risk Register

Background Papers:

 

N/A.