To provide an update on the status of corporate risks at the end of Quarter 4 2025/26 (March 2026) and provide assurance that risks are being managed effectively across the council.

Councillor Stoddart cabinet member for finance and corporate services introduced the report.

It was noted that effective risk management was essential to delivering the priorities set out in the Council Plan, including the commitment to strengthen corporate and directorate-level risk management through the Corporate Risk Strategy.

Members were advised that the updated Risk Management Strategy 2025/26 and Risk Appetite Statement were approved in June 2025. The Corporate Leadership Team (CLT) reviewed the Corporate Risk Register as at 31 March 2026, considering risk scores, controls, mitigations, and any emerging risks and opportunities linked to the Council Plan 2024-28. No new corporate risks were identified for inclusion at Quarter 4.

The Committee noted that all nine corporate risks had been reviewed. Risk 7, relating to the council’s ability to respond to a significant emergency, increased from a score of 9 to 12 due to the growing threat posed by cyber security risks and the potential impact on service delivery, public confidence, and finances.

It was reported that CLT is continuing to embed the revised risk management approach across the organisation. The 2025/26 Internal Audit Plan had been reviewed to align with the updated Risk Management Strategy and Corporate Risk Register and was approved by the Audit and Governance Committee in September 2025.

It was noted that risk management arrangements will continue to be monitored through the council’s governance framework, with relevant matters to be reported through the 2025/26 Annual Governance Statement to the Audit and Governance Committee.

The report and its recommendations were commended for approval.

Comments from cabinet members:

None

Group Leaders were invited to offer their views:

The representative for Independents for Herefordshire outlined the views of their group and raised that:

The clearer presentation of changes within the risk register was welcomed and asked whether future reports highlight amendments more clearly.

There was an outstanding issue regarding member training on the Corporate Risk Register.

Questions were raised about whether there was evidence that the Corporate Risk Register was improving decision-making across the council, acknowledging that the benefits of risk management can be difficult to measure. The member invited Cabinet's views on the effectiveness of the register in supporting informed decisions.

Particular concern was expressed regarding Risk 4 (Failure to deliver capital and major projects within identified resources and planned timeframes resulting in significant overspend and reduced project outcomes), which the member considered to be the most significant threat facing the council. Clarification was sought on the actions and mitigations that had been implemented since the previous report, noting changes to the narrative and references to external support and project assurance activity. The member queried whether the reported actions were sufficiently addressing the risk and whether progress could be demonstrated over the reporting period.

The member also invited Cabinet members to comment on which corporate risks they regarded as the most significant and which posed the greatest concern to them.

The representative for Liberal Democrat Group outlined the views of their group and raised that:

Risk R8 (Risks  ...  view the full minutes text for item 103