Log in
Issue

Risk Management

17 stories · discussed at 48 council meetings · 24 councils

Councils are currently assessing the effectiveness of their risk management arrangements, addressing specific threats like cyber security, and refining governance structures.

Hackney Council's Scrutiny Panel is scrutinising its performance monitoring framework, raising concerns about target setting and data quality, and the integration of risk management (October 2026). Kingston Council's Chief Audit Executive described its risk management arrangements as "reasonable" in June 2026, prompting councillors to question the distinction from "substantial assurance." Wandsworth Council's Audit Committee reviewed its risk management and risk appetite in March 2026, with a follow-up review scheduled for summer 2026.

Cyber security remains a key concern, with Hammersmith and Fulham Council identifying a high risk of attacks in March 2026 following a November 2025 incident, and Sutton Council addressing cyber-attack risks to pension fund data in December 2025. Tower Hamlets Council's Audit Committee flagged 'red' assurance levels in financial areas in March 2026, leading to a disclaimed audit opinion for 2024/25 due to significant weaknesses in financial reporting and internal control.

Lewisham Council is reviewing and updating its Corporate Risk Register, including cyber security and IT asset management (November 2025). Enfield Council is considering renaming its General Purposes Committee to the Audit Committee to sharpen its focus on finance and risk management (October 2025). Looking ahead, the City of London's Finance and Risk Committee is scheduled to review internal audit updates and risk reports in September 2026, and Sutton Council's North East Surrey Crematorium Board will conduct its annual review of risks in September 2026.

Key facts

  1. Hackney Council's Scrutiny Panel raised concerns about target setting, data quality, and the integration of risk management into performance tracking in October 2026. Source
  2. Kingston Council's Chief Audit Executive described its risk management arrangements as "reasonable" in June 2026. Source
  3. Hammersmith and Fulham Council identified a high risk of cyber attacks in March 2026, following a November 2025 incident. Source
  4. Tower Hamlets Council's Audit Committee flagged 'red' assurance levels in financial areas in March 2026, leading to a disclaimed audit opinion for 2024/25. Source
  5. Wandsworth Council's Audit Committee reviewed its risk management and risk appetite in March 2026, with a follow-up review scheduled for summer 2026. Source
About this summary

This summary was written automatically from our published stories and the council meeting records they draw on. It describes what councils have discussed and decided; it does not take a view on any decision. Each key fact links to the story it comes from. Updated 23 October 2026. Spotted a mistake? Email community@opencouncil.network.

Latest stories

  1. Waltham Forest Council reviews financial health and scrutiny work The Council meeting on Thursday, 22 October 2026, saw a comprehensive review of the council's financial management and the work undertaken by its scrutiny committees. Waltham Forest 23 October 2026
  2. Hackney Council's performance monitoring framework faces scrutiny over target setting and data quality Hackney Council's performance monitoring framework is facing scrutiny from the Scrutiny Panel, with significant concerns raised about the appropriateness of target setting and... Hackney 9 October 2026
  3. Merton Council Adopts Corporate Landlord Model for Property Management Merton Council has approved a new property management model, adopting a Corporate Landlord Model to oversee its extensive property portfolio. This strategic shift, confirmed at... Merton 25 September 2026
  4. Schools audit reveals 'significant gaps' in governance An audit of Tower Hamlets Council's schools has revealed significant gaps in governance, with two schools receiving a limited assurance opinion. The findings, presented to the... Tower Hamlets 24 July 2026
  5. Kingston Council's 'reasonable' risk management questioned over assurance levels Kingston Council's risk management arrangements have been described as reasonable by its Chief Audit Executive, a term that has prompted questions from councillors regarding the... Kingston upon Thames 26 June 2026
  6. Cyber attack risk high for H&F Council Hammersmith and Fulham Council faces a high risk of cyber attacks, according to a report presented to the Audit Committee. The council's IT systems were compromised in a cyber... Hammersmith and Fulham 17 March 2026
  7. Audit Committee Flags 'Red' Assurance on Key Financial Areas, Leading to Disclaimed Audit Opinion Tower Hamlets Council's Audit Committee has flagged red assurance levels in several key financial areas, according to the latest external auditor's report. The Audit Results... Tower Hamlets 15 March 2026
  8. Wandsworth Audit Committee Reviews Risk Management and Risk Appetite Amidst Funding Challenges Wandsworth Council's Audit Committee convened on Wednesday, March 11, 2026, to review the authority's risk management and risk appetite, with a particular focus on the huge,... Wandsworth 13 March 2026