Agenda item - Corporate Risk Assurance Framework (CRAF)

Report of the Executive Lead Officer, Strategy, Governance & Law and the Executive Director, Finance & Resources (copy attached).

That the Audit & Standards Committee:

1)           Note the CRAF at Appendix 1.

2)           Agree for a working group of the Committee to carry out a “deep dive” to review the CRAF to:

·         enable members to consider whether the council has sufficient assurance over its governance arrangements and risks

·         inform the Annual Governance Statement (AGS) and the Internal Audit plan for 2017/18.

3)            Note that the CRAF will replace the Risk Management Strategy as outlined in paragraphs 6.2 to 6.4.

66.1      The Committee considered a report of the Executive Lead Officer, Strategy, Governance & Law and the Executive Director, Finance & Resources that was designed to better protect the council’s reputation and contribute to keeping the council safe, support managers to obtain the assurance they need to plan and deliver their services, replace the Risk Management Strategy and inform Internal Audit work.

66.2      Diane Bushell asked if there would be corporate monitoring of the areas where no 3^rd line of defence had been identified.

66.3      The Head of Internal Audit noted that that this was the first occasion that the CRAF had been prepared and reported and identifying a 3^rd line of defence for every area was the desired outcome long-term.

66.4      Councillor Sykes stated that the CRAF was based upon an international framework that might be a level above the council. Councillor Sykes asked how the CRAF would be used in a practical sense.

66.5      The Risk Management Lead stated that the council was following guidance from CIPFA/SOLACE, Delivering Good Governance in Local Government Framework and the CRAF would allow the council to map itself against the framework and help assist the Annual Governance Statement. The Risk Management Lead added that she did believe the CRAF would apply to the council as it fitted how it ran it affairs.

66.6      Dr Horne welcomed the report stating that he hoped that any gaps in assurance could be targeted in the Internal Audit Plan and that the framework may also help identify any over engineered controls.

66.7      RESOLVED- That the Audit & Standards Committee:

1)           Note the CRAF at Appendix 1.

2)           Agree for a working group of the Committee to carry out a “deep dive” to review the CRAF to:

·         enable members to consider whether the council has sufficient assurance over its governance arrangements and risks

·         inform the Annual Governance Statement (AGS) and the Internal Audit plan for 2017/18.

3)            Note that the CRAF will replace the Risk Management Strategy as outlined in paragraphs 6.2 to 6.4.