Appendix A
Corporate level risk update
During December 2015 senior officers and Members from the Council took part in a risk identification workshop facilitated by Grant Thornton. This resulted in the identification of risks that operate at a corporate level.
In February 2017 we met with all risk owners to update and re-assess the risks, and to document any planned controls.
The tables below outline the proposed updates, including further information on existing key controls and, where necessary, planned controls and the resulting mitigated risk. The following is a summary of the changes made:
· Corporate 1: Risk score adjusted to reflect action already taken by the Council and a clearer understanding of the likelihood.
· Corporate 2: Risk score adjusted to reflect action already taken by the Council.
· Corporate 3: Risk redefined from ‘significant commercial failure’ to more specifically relate to the commercial strategy. The risk score is adjusted to reflect action taken by the council and a clearer understanding of the likelihood.
· Corporate 4: Risk updated from ‘not agreeing the local plan’ to reflect the residual (decreased) risk of the plan not being adopted.
· Corporate 5: Risk and associated score amended from ‘MKIP fails to develop a coherent vision for its’ future’ to reflect wider implications from the devolution agenda.
· Corporate 6: Risk score adjusted to reflect action already taken by the Council and a clearer understanding of the likelihood.
· Corporate 7: Changes to clarify risk description.
· Corporate 8: Risk description clarified and score adjusted based on the wide ranging implications already being faced by the Council and anticipated for the future.
· Corporate 9: Changes to clarify risk description.
· Corporate 10: Changes to clarify risk description.
The risks have been plotted onto the risk matrix below. These show each risk (numbered 1-10) and the risk score in terms of impact and likelihood. The residual matrix shows the movement of risks scores after taking into consideration planned controls.
Likelihood |
5 |
|
|
1 |
|
|
4 |
|
|
2, 8 |
3, 6 |
|
|
3 |
|
|
|
|
|
|
2 |
|
9 |
7 |
4 |
5 |
|
1 |
|
|
10 |
|
|
|
|
|
1 |
2 |
3 |
4 |
5 |
|
|
Impact |
Figure 1: Inherent risk scores Figure 2: Residual risk scores
Likelihood |
5 |
|
|
|
|
|
4 |
|
8 |
|
|
|
|
3 |
|
|
2, 6 |
3 |
|
|
2 |
|
9 |
7 |
1, 5 |
|
|
1 |
|
|
10 |
4 |
|
|
|
|
1 |
2 |
3 |
4 |
5 |
|
|
Impact |
Corporate risk register
Below is an extract from the risk register of the corporate risks for the Council. The register includes a detailed record of each risk, the assessment of impact and likelihood and the key controls in place to manage the risk:
Ref |
Risk (title & full description) |
Risk Owner & lead |
Key Existing Controls |
Inherent rating |
Rating change and key factors |
||
I |
L |
∑ |
|||||
COR1 |
Lack of progress on infrastructure
delivery |
William Cornall & Rob Jarman |
- Communication and liaison with
partners including regular meetings - Escalation plan for handling a lack of partner cooperation |
3 |
5 |
15 |
I ↓ from 4, L ↑ from 4
Key Impact: Reputation, Legal and Financial
Likelihood: almost certain based on current experience |
COR2 |
Recruitment & Retention |
Alison Broom & Steve McGinnes |
- Workforce strategy - Flexible and adaptive recruitment processes and packages in place to attract skill shortage areas - Commitment to investing in learning, development and professional qualifications - Embedded shared service arrangements offer resilience and news ways of working - External accreditation and assessment – via IIP and Best Companies |
3 |
4 |
12 |
I ↓ from 4, no change in L
Key impact: Service Delivery & Finance
Likelihood: Probable based on real challenges faced over the last 12 months |
COR3 |
Failure to deliver commercial
strategy |
William Cornall |
- Regular update reports to Policy & Resources Committee - Corporate Projects team in place to ensure delivery of projects |
4 |
4 |
16 |
I ↓ from 5, L ↑ from 3
Key Impact: Financial
Likelihood: Probable
|
Ref |
Risk (title & full description) |
Risk Owner & lead |
Key Existing Controls |
Inherent rating |
Rating change and key factors |
||
I |
L |
∑ |
|||||
COR4 |
Not having an adopted local plan |
William Cornall & Rob Jarman |
- Local Plan external examination - Regular monitoring by CLT and the Strategic Planning Committee |
4 |
2 |
8 |
No change in I, L ↓ from 3
Key Impact: Service, Financial and Reputational
Likelihood: Unlikely as plan has successfully passes external examination |
COR5 |
Shared Services / Combined Working |
Alison Broom & Steve McGinnes |
- Strong governance practices over existing shared service arrangements - Legal safeguards provided through collaboration agreements for shared services - Active participation in devolution discussions across Kent at the Leader and Chief Executive level - Awareness of Kent Districts shared cross partner working proposals |
5 |
2 |
10 |
I ↑ from 4, L ↓ from 3
Key impact: Service Delivery, Finance & Legal
Likelihood: Unlikely given no known government or other plans for changes to local government arrangements in Kent |
COR6 |
Financial restriction / pressure
Instability or volatility of Business Rates cause the Council to seek further savings outside of those already identified |
Mark Green & Ellie Dunnet |
- Adopted efficiency statement / savings plans - Robust MTFP and realistic
forecasting / assumptions - Protected Council reserves - Budget risks identified and monitored – scrutinised by AGS Committee |
4 |
3 |
12 |
I ↓ from 5, L ↑ from 2
Key impact: Service Delivery & Finance
Likelihood: Probable based on Autumn 2016 decision of Central Government
|
Ref |
Risk (title & full description) |
Risk Owner & lead |
Key Existing Controls |
Inherent rating |
Rating change and key factors |
||||
I |
L |
∑ |
|||||||
COR7 |
Over cautious administration |
Alison Broom & Angela Woodhouse |
- The Committee system is becoming more embedded and better understood - Regular Member, Group and Officer engagement and communication - Strong Governance process and constitution to support decision making processes - Elections process remain high on the Councils agenda
|
3 |
2 |
6 |
No change in scoring
Key impact: Reputation and Finance
Likelihood: Unlikely based on past 12 months |
||
COR8 |
Growing Population |
Alison Broom & WLT |
- Comprehensive and robust strategies and policies – Local Plan, MTFS, Economic Development Strategy - Clear understanding of population growth provided through statistical data from Office of Notional Statistics, census and Resident Survey - Population growth data incorporated into Waste Service provision |
3 |
4 |
12 |
I ↑ from 2, L ↑ from 2
Key impact: Reputation & Finance
Likelihood: Probable as already a challenge for the Council |
||
COR9 |
Informed Decision Making |
Mark Green & Angela Woodhouse |
- Sound guidance and framework for decision making provided through the Constitution and overseen by Democracy Committee - Good levels of Member and Officer engagement via work programme, agenda setting and Chairman’s briefing, prior to decisions being made - Clearly defined process of escalation and quality checking of reports through Modern.gov, CLT and Statutory Officers - Failsafe processes within the Governance process to enable call-in and scrutiny of decisions |
2 |
2 |
4 |
No change in scoring
Key impact: Reputation, Legal and Financial
Likelihood: Unlikely based on last 12 months of operating |
||
Ref |
Risk (title & full description) |
Risk Owner & lead |
Key Existing Controls |
Inherent rating |
Rating change and key factors |
|||||
I |
L |
∑ |
||||||||
COR10 |
Technology |
Mark Green & Chris Woodward |
- Well embedded governance arrangements provided via the Shared Service Boards with regular budget and performance reporting - Active ICT Commissioning Groups across all three partner Councils - Well integrated ICT services enabling service needs and requirements to be captured and assessed - Transformation Challenge Award (TCA) project making investment funds available achieve major ICT improvements in key areas |
3 |
1 |
3 |
No change in scoring
Key impact: Service and Financial
Likelihood: Rare based on past 12 months of operating |
|||
Planned controls
Following from the assessment of the risk, a number of planned actions and controls have been identified for those risks that are of a higher impact and likelihood level. Risk actions and planned controls are designed to manage risks to an acceptable level to ensure that the consequences of risks are being appropriately considered and where possible mitigated.
The table below shows a number of key planned actions and controls for the corporate risks. The original assessment scores have been included to illustrate the effect on the impact and likelihood scores of the risks.
Overall there is a reduction in either impact or likelihood for all of the higher level risks. One risk (COR3 – Commercial strategy) remains with an overall score of 12 and will continue to be monitored on a regular basis. However, due to very nature of the corporate level risks it is important that these risks are regularly reported and reviewed and so will continue to be reported to CLT quarterly and to P&R Committee every six months.
Ref |
Planned Controls |
Residual (Mitigated) rating |
|
Inherent rating |
||||
I |
L |
∑ |
|
I |
L |
∑ |
||
COR1
|
- Use of planning enforcement regulations to encourage partner cooperation |
4 |
2 |
8 |
|
3 |
5 |
15 |
COR2
|
- Actions will be taken to implement findings from the 2016/17 IIP assessment - Regular monitoring and reporting of workforce strategy by CLT - Appointment of permanent MKS Director role to provide strategic direction and vision for shared services |
3 |
3 |
9 |
|
3 |
4 |
12 |
COR3 |
- Develop a more detailed delivery plan for approval of Policy & Resources Committee - Provide training for relevant officers |
4 |
3 |
12 |
|
4 |
4 |
16 |
COR4 |
- Ensure due process is followed - Provision of adequate support and advice to Members - Agree a budget for annual reviews of the Local Plan to ensure a continuous process Have a ‘critical friend’ review of the Planning department |
4 |
1 |
4 |
|
4 |
2 |
8 |
COR5
|
- Improve information provided to Members and Officer - Review and appraisal different governance options and possibilities - Keep devolution on the CLT agenda and keep aware of Kent discussions |
4 |
2 |
8 |
|
5 |
2 |
10 |
COR6 |
- Rolling out of budget management / monitoring training programme in 17/18 - Unspent transition grant available - Delivery of income generation programmes will help the Council to become more financially resilient / sufficient |
3 |
3 |
9 |
|
4 |
3 |
12 |
COR7 |
No additional controls needed |
3 |
2 |
6 |
|
3 |
2 |
6 |
COR8 |
- Communication and circulation of growth information across Council service areas - Integrating service planning with growth information - Improved planning through better population evidence collection and collation |
2 |
4 |
8 |
|
3 |
4 |
12 |
COR9 |
No additional controls needed |
2 |
2 |
4 |
|
2 |
2 |
4 |
COR10 |
No additional controls needed |
3 |
1 |
3 |
|
3 |
1 |
3 |
Next Steps
We have made substantial progress since the initial review in January 2015, particularly over the last year, to improve the risk management arrangements. This wouldn’t have been possible without the great deal of positive engagement and support of Senior Officers, Managers and Members of the Council.
We know that risk management is a continuous process, and to be valuable it must be updated and maintained. We will therefore continue to build on this work to embed and improve the arrangements for 2017/18 focussing on the following areas:
· Update the corporate risk register to align with the updated strategic plan – June 2017
· Review updated operational risks and ensure all services have reconsidered their risks - Upon completion of service planning
· Adoption and publication of risk appetite statement – June 2017
· Ongoing monitoring in accordance with the risk management framework
· Ongoing work with Policy & Information to adapt Covalent to reflect the Risk Management Framework and upload all identified risks into the system
· Follow-up and reporting of risk actions to CLT quarterly and P&R six monthly
Appendix B
Maidstone Risk Management Process: One Page Summary
Appendix C
Impact & Likelihood Scales