Agenda and minutes

Governance, Risk and Audit Committee - Tuesday, 16th June, 2020 2.00 pm

Venue: remotely via Zoom. View directions

Contact: Matt Stembrowicz  Email: matthew.stembrowicz@north-norfolk.gov.uk

Items
No. Item

1.

TO RECEIVE APOLOGIES FOR ABSENCE

Minutes:

None received.

2.

SUBSTITUTES

Minutes:

None.

3.

PUBLIC QUESTIONS

To receive public questions, if any.

Minutes:

None received.

4.

ITEMS OF URGENT BUSINESS

To determine any items of business which the Chairman decides should be considered as a matter of urgency pursuant to section 100B(4)(b) of the Local Government Act 1972.

Minutes:

None.

5.

DECLARATIONS OF INTEREST

Members are asked at this stage to declare any interests that they may have in any of the following items on the agenda. The code of conduct for Members requires that declarations include the nature of the interest and whether it is a disclosable pecuniary interest.

Minutes:

None declared.

6.

MINUTES pdf icon PDF 224 KB

To approve as a correct record, the minutes of the meeting of the Governance, Risk & Audit Committee held on 3rd December 2019.

Minutes:

Minutes from the meeting held on 3rd December 2019 were approved as a correct record and signed by the Chairman.

 

7.

Progress Report on Internal Audit Activity: 13 March 2020 to 4 June 2020 pdf icon PDF 10 KB

Summary:

This report examines the progress made between 13 march 2020 to 4 june 2020 in relation to delivery of the annual internal audit plan for 2019/20.

Conclusions:

Progress in relation to delivery of the internal audit plan is line with expectations; and positive assurance has been awarded in the audit reviews finalised in this period.

Recommendations:

It is recommended that the Committee notes the outcomes of the assurance audit completed between 13 March 2020 to 4 June 2020.

 

 

All

All

Contact Officer, telephone number, and e?mail:

Faye Haywood, Internal Audit Manager for North Norfolk DC

01508 533873, fhaywood@s-norfolk.gov.uk

 

Additional documents:

Minutes:

The Internal Audit Manager introduced the report and informed Members that it covered the last of the scheduled audit work from the 2019-20 municipal year. She added that 182 days of work had been completed as originally agreed, and a further 10 days had been completed at the request of the Committee.  It was noted under point 3.3 that due to the impact of the Coronavirus Pandemic, four reports were still in draft, though the executive summary and grading had been completed for each. The Internal Audit Manager explained that the audit plan in its entirety could be viewed in appendix 1, and that the executive summaries of all audit reports were included in appendix 2. It was noted that the Internal Auditors had no concerns and that all reports had received positive assurance ratings.

 

Questions and Discussion

 

The Chairman referred to item 4.4 and asked in reference to the reasonable assurances given, how long these would be expected to stay reasonable. The Internal Audit Manager replied that it depended on the result of the review, and stated that there was not a specific timeframe that would be given to these items. She added that when scoping for the next audit, these areas would be expected to have improved, but the Committee had to take into account changes in circumstances or new risks that might have arisen.

 

Cllr C Cushing referred to the review of procurement arrangements, and the maintenance of the contracts register, where it was noted that some contracts gave rise to actions required, and asked which contracts these were. The Internal Audit Manager replied that the first action referred to the maintenance of the register itself, in order to review aggregated spend over a given time period, and for this to be added to the control framework. The second action was for exemptions, which required all exemption forms to be signed and stored in a single location. Cllr C Cushing asked if there was any particular individual responsible for ensuring that these would be implemented. The Internal Audit Manager replied that these would be assigned to a procurement officer, but individual finance officers may also be involved in monitoring the control.

 

RESOLVED

 

To note the outcomes of the assurance audit completed between 13th March 2020 and 4th June 2020.

 

8.

Follow Up on Internal Audit Recommendations 21 November 2019 to 31 March 2020 pdf icon PDF 10 KB

Summary:

This report provides an overview of progress made in implementing agreed audit recommendations due for completion between 21 November 2019 to 31 march 2020.

Conclusions:

Progress continues to be made in addressing audit recommendations.

Recommendations:

It is recommended that the Committee notes management action taken to date regarding the delivery of audit recommendations.

All

All

Contact Officer, telephone number, and e?mail:

Faye Haywood, Internal Audit Manager for North Norfolk DC

01508 533873, fhaywood@s-norfolk.gov.uk

 

Additional documents:

Minutes:

The Internal Audit Manager introduced the item and informed Members that it was the year-end report, and managers were requested to provide a response to any outstanding recommendations not completed in the given timeframe. Members were referred to appendix 2 in which one outstanding recommendation from 2011 was still being monitored as incomplete. The Internal Audit Manager noted that the responsible officer had requested an extension of the completion date to April 2021, as a result of the delays caused by Covid-19. On appendix 3, the Internal Audit Manager noted that the responsible officer had requested their team members to forward the relevant information for completion, though this was yet to be received.

 

Questions and Discussion

 

Cllr C Cushing asked about the level of risk posed to the Council by the outstanding recommendation NN1807 on environmental health policies and procedures. The Internal Audit Manager replied that this was an important priority recommendation, which required policies and procedures to be updated to ensure guidance followed legislation. She added that it had been delayed and needed to be resolved as soon as possible. Cllr C Cushing added that there appeared to be no progress on several recommendations, and asked what the Committee could do to address this. The Chairman suggested that he would form a recommendation to SLT to ensure that the recommendations were implemented. The internal Audit Manager noted that there was an additional recommendation for environmental health on data sharing, for which a new deadline was needed.

 

On procurement, the Internal Audit Manager stated that the procurement strategy was due to be reviewed. She added that it was not ideal, however given the circumstances, with teams being redeployed to help residents during lockdown, it was understandable that the implementation of some recommendations would slip.

 

The Chairman summarised the points raised and suggested that he would like to see SLT follow-up on the outstanding recommendations, as it was frustrating that some had still not been resolved after several years. He added that in some cases no response had been received on outstanding recommendations, and this wasn’t good enough. It was then proposed by Cllr C Cushing and seconded by Cllr S Penfold that the outstanding recommendations be placed on the agenda for SLT to review and implement as soon as possible.

 

RESOLVED

 

1.    That the outstanding recommendations be placed on the agenda for SLT to review and implement the recommendations as soon as possible.

 

2.    To note the report.

 

9.

Annual Report and Opinion 2019/20 pdf icon PDF 127 KB

Summary:

This report concludes on the internal audit activity undertaken during 2019/20, it provides an annual opinion concerning the organisation’s framework of governance, risk management and control and concludes on the effectiveness of internal audit and provides key information for the annual governance statement. 

Conclusions:

On the basis of Internal Audit work performed during 2019/20, the Head of Internal Audit is able to give a reasonable (positive) opinion on the framework of governance, risk management and control at North Norfolk District Council.

 

Recommendations:

 

1.    Receive and consider the contents of the Annual Report and Opinion of the Head of Internal Audit.

2.    Note that a reasonable audit opinion has been given in relation to the framework of governance, risk management and control for the year ended 31 March 2020.

3.    Note that the opinions expressed together with significant matters arising from internal audit work and contained within this report should be given due consideration, when developing and reviewing the Council’s Annual Governance Statement for 2019/20.

4.    Note the conclusions of the Review of the Effectiveness of Internal Audit.

 

 

All

All

Contact Officer, telephone number, and e?mail:

Emma Hodds, Head of Internal Audit

01508 533791, ehodds@s-norfolk.gov.uk

 

Additional documents:

Minutes:

The Internal Audit Manager introduced the report and informed Members that it was a full year review of the work completed in 2019/20, and allowed the Head of Internal Audit to give an opinion of the governance risk and control framework at NNDC. She then referred to point 2.2 which outlined the opinion as a reasonable assurance rating, which was a positive grading. It was noted that sixteen reviews were carried out, and all were given positive assurance grading, with four given a substantial assurance grading. Overall, this meant that the governance framework at NNDC was in a healthy position. The Internal Audit Manager stated that whilst four reports were still in draft at this time, there was no reason to doubt the assurances given. The quality assurance and performance indicator outcomes were discussed, and it was noted that there were no issues of concern.

 

Questions and Discussion

 

The Chairman referred to the limited assurance for IT hardware disposal highlighted in the report for 2016/17, and asked for further details. The Internal Audit Manager stated that she did not know the full details, but the fact that it had not been revisited suggested that any issues had likely since been resolved. She added that she would look for further details and follow-up the issue.

 

The Chairman referred to item 5.1.2 on external assessment, and noted that the attribute standards were required to be reviewed every five years, which had last been completed in January 2017. He then asked how long this review would take to complete. The Internal Audit Manager replied that this was not a large piece of work, and would be completed well within that timeframe.

 

The Chairman proposed the recommendations en bloc, and were seconded by Cllr J Stenton.

 

RESOLVED

 

1.    To receive and consider the contents of the Annual Report and Opinion of the Head of Internal Audit.

 

2.    To note that a reasonable audit opinion has been given in relation to the framework of governance, risk management and control for the year ended 31 March 2020.

 

3.    To Note that the opinions expressed together with significant matters arising from internal audit work and contained within this report should be given due consideration, when developing and reviewing the Council’s Annual Governance Statement for 2019/20.

 

4.    To note the conclusions of the Review of the Effectiveness of Internal Audit.

 

10.

RISK MANAGEMENT POLICY/FRAMEWORK AND CORPORATE RISK REGISTERS pdf icon PDF 132 KB

Summary:

 

 

 

 

 

Options considered:

This report highlights recent and proposed improvements to both the Corporate Risk Register (CRR) and the Risk Management Policy and Framework as part of the Council’s ongoing improvements to the governance framework.

 

Not to update the Policy and Framework.

 

Conclusions:

 

The improvements outlined within the report will help both officers and Members to monitor and track any outstanding actions designed to help mitigate and manage the various corporate risks.

 

Recommendations:

 

 

 

 

Reasons for

Recommendations:

 

 

1.    To note and adopt the Risk Management Policy and Framework

 

2.    To note the Risk Registers.

 

Better understanding our risk appetite and embedding risk management will help to support the aspirations contained within the Corporate Plan and help to support the delivery of the MTFS and the desire to achieve financial sustainability without reliance on central government grants.

 

LIST OF BACKGROUND PAPERS AS REQUIRED BY LAW

(Papers relied on to write the report, which do not contain exempt information and which are not published elsewhere)

 

 

Cabinet Member(s)

 

Ward(s) affected

All

Contact Officer, telephone number and email:

Duncan Ellis, +441263 516330, Duncan.Ellis@north-norfolk.gov.uk

Emma Duncan +441263 516045, Emma.Duncan@north-norfolk.gov.uk

Additional documents:

Minutes:

The Head of Finance & Asset Management introduced the report and informed members that the Risk Management Policy and Framework was reviewed on a bi-annual basis. It was noted that the new policy included additional information from training sessions that had taken place, such as those on identifying the Council’s risk appetite. On the risk registers, it was noted that new headings had been added to cover issues raised during training. A Covid-19 specific risk register had also been created to focus solely on the risks raised by the pandemic.

 

Questions and Discussion

 

Cllr C Cushing referred to section ten of the policy on risk scoring, and suggested that if a risk was given over a 90% probability rating, then it should be recorded as an assumption elsewhere, as opposed to remaining on the risk register. The Head of Finance & Asset Management replied that he was unsure whether the Council had used assumptions logs previously, but he would be happy to look into whether it would be possible.

 

Cllr N Dixon referred to previous points made on paying attention to optimism bias on the risk register, and stated that even with the best risk policy and framework, the Council still appeared to have a systemic weakness in its business and project planning and analysis. He added that until these issues were resolved, the Council remained at a high risk of project failure, and for that reason asked whether there should be an additional line in the risk register to address these issues. It was noted that in addition to the impact of optimism bias, it was also important that the Council had the appropriate skill set in place, to enable these tasks to be completed. Cllr N Dixon then suggested that the Committee should give consideration, as to whether these issues had been fully addressed. The Chairman noted that a new performance management system was in the process of being introduced, and asked whether this might help to resolve some of these issues. The Head of Finance and Asset Management stated that the Inphase system did have a built in risk register module, which it was hoped could be used to support the existing risk registers, that were currently kept on spreadsheets. He added that the system would also enable the risk registers to be presented online, with a trajectory for each risk as mitigations are put in place to manage them. In relation to project risks, the Head of Finance and Asset Management suggested that clearly defining the desired outcomes would help to avoid scope creep, clearly identify project success, and help to mitigate risks. He added that another option would be to apply gateway tests to projects, which would improve transparency of the requirements for each stage of a project. On report papers, it was suggested that adding high level summaries as standard, could help to highlight the key issues and risks for members.

 

The Head of Legal Services stated that optimism bias remained a cultural issue at the  ...  view the full minutes text for item 10.

11.

GOVERNANCE, RISK AND AUDIT COMMITTEE UPDATE AND ACTION LIST pdf icon PDF 7 KB

To monitor progress on items requiring action from the previous meeting, including progress on implementation of audit recommendations.

Minutes:

The Democratic Services Officer informed Members that as a result of March’s meeting being cancelled due to Covid-19, the actions list was from the December meeting. He added that the recommendation for SLT to follow-up outstanding audit recommendations had now be reiterated.

 

12.

GOVERNANCE, RISK AND AUDIT COMMITTEE WORK PROGRAMME pdf icon PDF 227 KB

To review the Governance, Risk & Audit Committee Work Programme.

Minutes:

The Chairman informed Members that there was a scheduled meeting date in the calendar for 14th July, however due to significant delays in the sign-off of annual accounts and the impact of Covid-19, it was unlikely that reports would be ready for this date. As a result, he suggested that it would be useful to hold an additional meeting prior to September to avoid a build-up of reports, such as the Counter Fraud Policy, Annual Governance Statement, and the additional Egmere and Splash reports. It was suggested that August 4th was provisional date, though it would be confirmed nearer the time.

 

13.

EXCLUSION OF THE PRESS AND PUBLIC

To pass the following resolution, if necessary:

 

“That under section 100A(4) of the Local Government Act 1972 the press and public be excluded from the meeting for the following items of business on the grounds that they involve the likely disclosure of exempt information as defined in part 1 of schedule 12A (as amended) to the Act.”