To provide assurance of the adequacy of the council’s risk management framework and internal controls in 2025/26. 

The committee received an update on risk management activity. At Quarter 4, Risk 7 relating to the council’s ability to respond adequately to a significant emergency was increased from a score of 9 to 12, reflecting a possible likelihood and major impact rating. The increase followed consideration by CLT and extended leadership team of the continuing and evolving cyber security threats facing the council. Updates to mitigating actions were also included within the report.

In response to questions, it was noted.

1. In relation to R9, it was explained that previous analysis of supplier dependency data had identified some limitations and, due in part to cost considerations, the council had not progressed with an external service previously considered. However, robust procurement processes remained in place, including financial assessments of suppliers, and further consideration would be given to whether additional analysis of supplier exposure was required.
2. In relation to R6 regarding workforce recruitment and retention, it was highlighted the council’s strong retention rates and organisational development offer. The leadership programme supported career progression, leadership development and succession planning across the organisation, while employee survey feedback is used to inform future workforce development initiatives. It was noted that not all employees seek progression, but opportunities are available for those wishing to develop their careers.
3. In relation to R8 and environmental risks, it was acknowledged that recent climate-related events could inform future reviews of risk ratings and confirmed that the impact of such events would be considered as part of future updates. It was noted that current information from Welsh Water indicated no immediate risk of water shortages or hosepipe bans in the county.
4. In relation to R3, risks relating to children’s placements. It was confirmed whilst local capacity remained a challenge, out-of-county placements continued to be used to meet demand. Further information on wider out-of-county placement capacity would be sought and reported back with consideration for its inclusion on the risk register. Action 2026/27-9

The committee noted the report and confirmed its frequency to be brought to the committee quarterly, following each Cabinet meeting, at which the Risk Register is considered.