Issue

Risk Management

16 stories · discussed at 38 council meetings · 24 councils

Councils are scrutinising risk management effectiveness and addressing specific threats like cyber attacks and financial weaknesses.

Hackney Council's performance monitoring framework, which integrates risk management, faced scrutiny in October 2026 over target setting and data quality, a report to the Scrutiny Panel said. Earlier, in June 2026, Kingston Council's Chief Audit Executive described its risk management arrangements as 'reasonable,' prompting questions from councillors about assurance levels. Tower Hamlets Council's Audit Committee flagged 'red assurance levels' in financial areas in March 2026, leading to a disclaimed audit opinion for 2024/25 due to significant weaknesses, according to an external auditor's report.

Cyber security remains a key concern, with Hammersmith and Fulham Council facing a high risk of attacks in March 2026 after a November 2025 incident, a report to the Audit Committee said. Sutton Council is also addressing cyber-attack risks to pension fund data, identified as an amber-rated risk in December 2025. Separately, an audit of Tower Hamlets schools in July 2026 revealed significant governance gaps, including issues with governing body terms of reference and DBS checks.

Councils are also reviewing their risk management governance and processes. Lewisham Council updated its Corporate Risk Register in November 2025, while Hackney Pension Board updated its terms of reference in September 2025 to include a greater focus on risk management. Enfield Council considered renaming its General Purposes Committee to Audit Committee in October 2025 to sharpen its focus on finance and risk management. No future meetings are currently scheduled in the provided material.

Key facts

  1. Hackney Council's performance monitoring framework, integrating risk management, faced scrutiny in October 2026. Source
  2. Kingston Council's risk management arrangements were described as 'reasonable' by its Chief Audit Executive in June 2026. Source
  3. Tower Hamlets Council's Audit Committee flagged 'red assurance levels' in financial areas in March 2026. Source
  4. Hammersmith and Fulham Council faces a high risk of cyber attacks, identified in March 2026. Source
  5. Sutton Council is addressing cyber-attack risk to pension fund data, identified in December 2025. Source
About this summary

This summary was written automatically from our published stories and the council meeting records they draw on. It describes what councils have discussed and decided; it does not take a view on any decision. Each key fact links to the story it comes from. Updated 9 October 2026. Spotted a mistake? Email community@opencouncil.network.

Stories, page 2

  1. Sutton Council Addresses Cyber-Attack Risk to Pension Fund Data Sutton Council is taking proactive steps to safeguard pension fund data against potential cyber-attacks, as highlighted during a recent Pension Committee meeting. Sutton 13 December 2025
  2. Tower Hamlets Auditor Finds 'Significant Weaknesses' in Financials and Governance; Council Responds Tower Hamlets Council is grappling with 'significant weaknesses' in its governance and financial management, according to a new report from external auditor Ernst & Young LLP... Tower Hamlets 5 December 2025
  3. Lewisham Council Assesses Key Risks in Corporate Risk Register Update Lewisham Council is actively reviewing and updating its Corporate Risk Register to better manage potential threats to its objectives, including key risks such as cyber security... Lewisham 17 November 2025
  4. Merton Council Internal Audits Reveal Concerns Over Assurance Levels and Recommendation Implementation Merton Council's Governance Standards and Audit Committee has reviewed internal audit findings that reveal areas of concern within the council's operations. The meeting on 13... Merton 17 November 2025
  5. Hounslow Council Recovers £35,000 in Planning Enforcement Case Hounslow Council has recovered £35,000 following a breach of a Planning Enforcement Order, according to the Audit and Investigation Performance Report Q1 presented at the Audit... Hounslow 8 November 2025
  6. Enfield Council Considers Renaming Committee to Audit Committee for Finance Focus Enfield Council is considering renaming its General Purposes Committee to the Audit Committee, a move intended to sharpen the committee's focus on finance and risk management. Enfield 28 October 2025
  7. Hackney Pension Board Enhances Risk Management Role and Updates Terms of Reference Hackney Council's Pensions Board has updated its Terms of Reference to include a greater focus on risk management and ensure members possess the necessary knowledge and skills.... Hackney 15 September 2025
  8. Internal Audit Finds Weaknesses in Lambeth Council Governance, Raising Financial Stability Concerns Lambeth Council's Corporate Committee recently reviewed an internal audit that revealed weaknesses in the council's governance, raising concerns about financial stability and... Lambeth 25 July 2025