405
The Committee considered a report providing members with an overview of the
Council’s risk management activity during the period from 01 April to 30 September
2023.
Hayley McGrath, Corporate Governance Manager, attended the meeting to present
the report and assist the Committee with its enquiries. The Committee received a
report every 6 months which outlined the up-to-date position in respect of the
Council’s Strategic Risks, which were contained in a Strategic Risk Register which
was owned by the Council’s Senior Leadership Team, and which was reviewed on a
monthly basis. The Register was presented to the Committee, and this contained a
matrix of what were considered to be the key, high level, risks faced by the Council
at the current time. Risks which were of particular significance were organisational
resilience and the budget strategy, cyber and data security, workforce wellbeing and
financial inequality. Although risks could never be negated completely, it was
necessary for the Council to have controls in place to reduce the risks as far as
possible. Accordingly, the Register contained two scores, the initial risk score, and
the risk score following stated mitigations.
A substantive amount of work had been undertaken in relation to the Council’s
subsidiary companies, and the Committee had received a number of reports on this
topic in recent months. Governance recommendations which had been contained in
the external reviews of the Council’s wholly owned companies were being developed
and implemented. Part of this work had included amending the arrangements for the
Committee to reflect the fact that it was the designated shareholder committee for
the subsidiary companies, and the creation of a cross-party oversight group.
A streamlined process for dealing with housing disrepair claims had been set up, and
senior Officers from both Colchester Borough Homes and the Council were triaging
the claims which had been received.
The Risk Register reporting programme had been altered, changing from a quarterly
meeting with the Council’s Senior Leadership Board to discuss, review and update
the Register, to monthly meetings which reflected the importance of the Council’s
governance arrangements in the current financial climate. It was intended to create a
central, digital, storage site for all the Councils Risk Registers, guidance and training,
and this resource would also be available to Councillors.
The Risk Management Strategy had been approved by Cabinet and Full Council and
the Council’s Policy Framework had been updated accordingly.
A Committee member noted that it had been common practice to include a line in the
Council’s budget in previous years associated with transformational, cost cutting,
programmes, but that the budget target which had been set had rarely been met. It
was suggested that the cost savings which had historically been offered as part of
the budget were not realistically achievable given the range of services which the
Council offered, could consideration be given to including the testing of any such
transformational programme as a risk mitigation? The Council needed to decide
whether it wished to provide a wide range of services to a poor standard or a smaller
range of services to a high standard.
The Committee noted the budgetary pressures which the Council was under, but
considered that the Council also had a wide remit for a very diverse community, and
any reduction in the levels of service provided would have to be carefully considered
and balanced.
A Committee member expressed some concern that it was difficult to accurately
monitor staff morale, although the Council’s use of surveys was a good indication to
some of the risks to morale that were faced. Was it possible to include some wording
which recognised that some staff were potentially uneasy about talking honestly to
their line manager about concerns they may be experiencing, and to encourage
honesty wherever possible?
The Committee considered that the risk management document which had been
presented to it was of very high quality, and it was encouraged by the fact that this
was reviewed regularly. It was suggested that the first 2 risks which had been
identified in the document should be taken very seriously, and it seemed that the
Council’s senior leadership team had concerns that it may not be possible to balance
the budget. It was noted that the Council had worked successfully with other local
authorities in the past to deliver shared services such as the Museum Service and
the North Essex Parking Partnership, and it was important to ensure that savings
were being achieved. If sufficient savings could not be realised, then it may be
necessary to consider withdrawing some non-statutory services which would be
extremely regretful. The Council was not alone in this position, as it was recognised
that local authorities throughout the country were now experiencing similar budget
constraints. Any savings which were proposed through the use of shared services
should be monitored very closely to ensure that the savings were delivered.
The risk management dashboard which had been presented to the Committee was
praised, however, a Committee member sought clarity on the methodology which lay
behind this. She sought reassurance that a sufficient level of rigour was applied to
what appeared to be qualitative judgements. What degree of confidence could be
found in the risk rating scores which had been assigned to risks? It seemed that the
difference between the initial risk score and the risk score following mitigation was
quite high, and there was concern that the effects of mitigation may have been
treated too optimistically. There was concern that an overly optimistic reduction to a
risk score through mitigation led to a residual score that felt more comfortable to
senior leadership, and there could potentially be a significant gap between the
outcome which was hoped for, and the outcome which was more likely in practical
terms. The Corporate Governance Manager would relay these concerns to the
Council’s senior leadership team after the meeting.
The Corporate Governance Manager explained to the Committee that risk by its
nature was subjective, and all about personal views, the lived experience and the
perception of how likely something was to go wrong. What the Council had done was
set out some parameters for risk score definitions which were contained in the
agenda pack for this meeting, and which offered guidance used for determining
scores. The Council’s senior leadership were asked to look at probability of
something happening, and then the impact of this. When an assessment was carried
out by a team in this way, it was very likely that some people would have opposing
views, and the score definitions provided parameters for an agreed approach for
assessing the risks. The Corporate Governance Manager did challenge senior
management on their assessment of risk, and interviewed every senior manager
individually once a year to ask challenging questions on where they perceived the
risks to the organisation to be. National indicators were also used to identify risks
that may be upcoming. The risks that had been identified were an honest
assessment of the risks facing any local authority at this time. The access to the
Council’s senior management team which was enjoyed by the Corporate
Governance Manager, was unusual in local authorities, and the Council’s senior
management team was very conscientious in demonstrating that it had given full
consideration to the risks faced. It was not always possible to be 100% correct, but
the Council needed to be in the best position possible to meet the challenges of the
future.
Responding to the concerns which had been raised in respect of the monitoring of
staff morale, the Committee heard that every effort was made to create an
environment in which staff were at ease communicating their concerns to their
managers. The Council did have a Whistleblowing Policy, and the Council’s Chief
Executive regularly made herself available for any member of staff to speak to, and
these sessions had proved popular.
Cllr King, Leader of the Council and Portfolio Holder for Strategy, attended the
meeting and, at the invitation of the Chair, addressed the committee. He advised the
Committee that the Council’s Risk Register would inform the conversations which
were had at a senior level in the Council, and he offered assurance that the
Corporate Governance Manager enjoyed full support from the Council’s senior
leadership, who took the risk assessment process very seriously. It would be
necessary to accept changing and challenging circumstances as a Council, and it
was hoped that a balance would be struck which would provide Councillors with the
necessary assurance that future changes would be effectively delivered. Addressing
staff morale, he knew that the attitude of the Council was as had been described in
the meeting. The Committee were reminded of the Council’s ‘Speak Up Now’
scheme for staff, and the fact that the Council’s senior leadership team carried out
weekly visits to different parts of the organisation.
RESOLVED that:
- the Council’s progress and performance in managing risk during the period from
April to September 2023 be noted,
- the current Strategic Risk Register be noted.