Log in
Issue

Risk Management

17 stories · discussed at 48 council meetings · 24 councils

Councils are currently assessing the effectiveness of their risk management arrangements, addressing specific threats like cyber security, and refining governance structures.

Hackney Council's Scrutiny Panel is scrutinising its performance monitoring framework, raising concerns about target setting and data quality, and the integration of risk management (October 2026). Kingston Council's Chief Audit Executive described its risk management arrangements as "reasonable" in June 2026, prompting councillors to question the distinction from "substantial assurance." Wandsworth Council's Audit Committee reviewed its risk management and risk appetite in March 2026, with a follow-up review scheduled for summer 2026.

Cyber security remains a key concern, with Hammersmith and Fulham Council identifying a high risk of attacks in March 2026 following a November 2025 incident, and Sutton Council addressing cyber-attack risks to pension fund data in December 2025. Tower Hamlets Council's Audit Committee flagged 'red' assurance levels in financial areas in March 2026, leading to a disclaimed audit opinion for 2024/25 due to significant weaknesses in financial reporting and internal control.

Lewisham Council is reviewing and updating its Corporate Risk Register, including cyber security and IT asset management (November 2025). Enfield Council is considering renaming its General Purposes Committee to the Audit Committee to sharpen its focus on finance and risk management (October 2025). Looking ahead, the City of London's Finance and Risk Committee is scheduled to review internal audit updates and risk reports in September 2026, and Sutton Council's North East Surrey Crematorium Board will conduct its annual review of risks in September 2026.

Key facts

  1. Hackney Council's Scrutiny Panel raised concerns about target setting, data quality, and the integration of risk management into performance tracking in October 2026. Source
  2. Kingston Council's Chief Audit Executive described its risk management arrangements as "reasonable" in June 2026. Source
  3. Hammersmith and Fulham Council identified a high risk of cyber attacks in March 2026, following a November 2025 incident. Source
  4. Tower Hamlets Council's Audit Committee flagged 'red' assurance levels in financial areas in March 2026, leading to a disclaimed audit opinion for 2024/25. Source
  5. Wandsworth Council's Audit Committee reviewed its risk management and risk appetite in March 2026, with a follow-up review scheduled for summer 2026. Source
About this summary

This summary was written automatically from our published stories and the council meeting records they draw on. It describes what councils have discussed and decided; it does not take a view on any decision. Each key fact links to the story it comes from. Updated 23 October 2026. Spotted a mistake? Email community@opencouncil.network.

Stories, page 2

  1. Audit Committee Reports Strong Control Environment and Positive Assurance on Internal Controls Hammersmith and Fulham Council's Audit Committee has reported a strong control environment, according to its annual report for the 2024/25 municipal year. The committee reviewed... Hammersmith and Fulham 30 January 2026
  2. Sutton Council Addresses Cyber-Attack Risk to Pension Fund Data Sutton Council is taking proactive steps to safeguard pension fund data against potential cyber-attacks, as highlighted during a recent Pension Committee meeting. Sutton 13 December 2025
  3. Tower Hamlets Auditor Finds 'Significant Weaknesses' in Financials and Governance; Council Responds Tower Hamlets Council is grappling with 'significant weaknesses' in its governance and financial management, according to a new report from external auditor Ernst & Young LLP... Tower Hamlets 5 December 2025
  4. Lewisham Council Assesses Key Risks in Corporate Risk Register Update Lewisham Council is actively reviewing and updating its Corporate Risk Register to better manage potential threats to its objectives, including key risks such as cyber security... Lewisham 17 November 2025
  5. Merton Council Internal Audits Reveal Concerns Over Assurance Levels and Recommendation Implementation Merton Council's Governance Standards and Audit Committee has reviewed internal audit findings that reveal areas of concern within the council's operations. The meeting on 13... Merton 17 November 2025
  6. Hounslow Council Recovers £35,000 in Planning Enforcement Case Hounslow Council has recovered £35,000 following a breach of a Planning Enforcement Order, according to the Audit and Investigation Performance Report Q1 presented at the Audit... Hounslow 8 November 2025
  7. Enfield Council Considers Renaming Committee to Audit Committee for Finance Focus Enfield Council is considering renaming its General Purposes Committee to the Audit Committee, a move intended to sharpen the committee's focus on finance and risk management. Enfield 28 October 2025
  8. Hackney Pension Board Enhances Risk Management Role and Updates Terms of Reference Hackney Council's Pensions Board has updated its Terms of Reference to include a greater focus on risk management and ensure members possess the necessary knowledge and skills.... Hackney 15 September 2025