risk management
Councils are currently assessing the effectiveness of their risk management, focusing on governance, cyber security, and financial stability.
Merton Council recently approved a Corporate Landlord Model to manage its property portfolio, aiming to ensure assets are safe and fit for purpose. In July 2026, an audit of Tower Hamlets Council's schools revealed significant governance gaps, while Kingston Council's risk management was described as "reasonable" in June 2026, prompting questions about assurance levels.
Councils are also addressing specific risks, including cyber attacks, with Hammersmith and Fulham Council facing a high risk in March 2026 following a November 2025 incident. Several councils, including Hillingdon, Ealing, Islington, and Hackney, are scheduled to discuss risk management at their Pensions Committees or Boards in September 2026.
Risk management involves identifying, assessing, and controlling threats to an organisation's capital and earnings. This includes ensuring effective internal controls and governance, which Tower Hamlets Council's external auditor highlighted as having "significant weaknesses" in March 2026, leading to a disclaimed audit opinion for 2024/25.
Key facts
- Merton Council approved a Corporate Landlord Model for property management on September 21, 2026. Source
- An audit of Tower Hamlets Council's schools revealed "significant gaps" in governance on July 23, 2026. Source
- Kingston Council's risk management was described as "reasonable" by its Chief Audit Executive on June 24, 2026. Source
- Hammersmith and Fulham Council faced a high risk of cyber attacks in March 2026 after a November 2025 incident. Source
- Tower Hamlets Council received a disclaimed audit opinion for its 2024/25 financial statements in March 2026. Source
About this summary
This summary was written automatically from our published stories and the council meeting records they draw on. It describes what councils have discussed and decided; it does not take a view on any decision. Each key fact links to the story it comes from. Updated 30 September 2026. Spotted a mistake? Email community@opencouncil.network.