Agenda item

Report from the S.151 Officer attached

The Risk Manager submitted a report of the S.151 Officer which provided an updated position with regards to the risks identified and assessed on the Council’s Corporate Risk Register up to 28 February 2026

26 risks were currently present on the Corporate Risk Register and had been identified as those that have the potential to disrupt the Council’s strategic objectives and service delivery.

The report presents all relevant information and scoring of these risks, an overview being:

17 risks are currently rated as Significant (risk score 15-25)

7 risks are currently rated as High (risk score 8-12)

2 risks are currently rated as Moderate (risk score 4-6) 

0 have increased in score

4 have decreased in score

21 have remained static

1 is newly introduced

3 are proposed for closure

Members were given the opportunity to ask questions, and the following points were raised:

• Councillor Moss raised the following questions.

In relation to CR28 Asylum & Immigration, what is the justification for the reduction in the Likelihood score from 4 to 3. 

In relation to CR41 Cyber Crime & Digital Threats, what is the justification for the reduction in the Impact score from 4 to 3. 

In relation to CR4 Digital Transformation, what is the justification for the reduction in the Likelihood score from 3 to 2

The following information was provided:

CR28 – of all the mitigating actions. A complete staffing structure is now in place, alongside clearly defined pathways, which significantly reduces both risk and impact. Data from the past year provides strong evidence of a reduction in fast-track decision making by the Home Office, with decisions becoming more stable and predictable. This has enabled the service to plan more effectively for families moving on from Home Office accommodation. At a national level, Bury has been placed on a maintain and replace model for asylum dispersal. This means there is an agreed cap on bed spaces within the, and no additional properties will be procured beyond this limit. Arrivals through the Ukraine schemes have decreased significantly, and the council has a dedicated Migration Officer supporting the managed closure of the Ukraine pathway within the next 18 months.

It should also be noted that this justification was completed in February 2026, prior to the conflict involving Iran. While there is currently an increased level of global risk, there is no Homel Office confirmation of this stage that the UK has been directly impacted by displacement related to this situation.

CR41 – The reason for the reduction in the impact score is because of the additional investment the Council agreed last financial year to improve our data recovery and backup software. These systems have now been fully procured and installed. This, combined with our Cyber Security management arrangement with Salford City Council means that we are more prepared for when, not if, a cyber-attack occurs. The steps we have taken have included ensuring that we have up to date scenario planning for different types of cyber threats and have upgraded our digital estate to allow these threats to be isolated and managed, reducing the overall threat of loss of service to the council as a whole. We continue to act on updates from the National Cyber Security Centre (NCSC) and Government Cyber Coordination Centre (GC3) and we will shortly be applying for our Public Services Network (PSN) Certificate to provide further assurance to the organisation that our infrastructure meeting the necessary security standards to be compliant with the PS Code of Connection (CoCo).

CR4 - During 2026/27, following an assessment of the delivery programme for Digital, Data and Technology (DDAT) against the original objectives of the new operating model, additional funding was agreed via a business case to the Performance, Delivery & Transformation Board and Finance Board to strengthen the team.

Additional posts were created within the Technology & Infrastructure Pillar of the team to support the work on key business systems such as Unit 4 and the Liquid Logic system for Children’s Services. In addition, the introduction of the new Service Desk software has supported the team in prioritising work more effectively, thereby ensuring that problems are dealt with earlier, reducing the wider impact on the team’s capacity and the rest of the organisation.

• Mr Webster referred to the proposed closure of CR36 – Project Safety Valve agreement delivery and asked if this was in relation to the recent government announcement that it will cover around 90% of local authorities’ historic SEND-related Dedicated Schools Grant (DSG) deficits, including those previously managed through Project Safety Valve (PSV) arrangements. Mr Webster state that the grant would not be considered until autumn so asked if the closure of the risk was too hasty.

The S.151 Officer explained that Bury were already making good progress in relation to PSV before the announcement was made, therefore it was justifiable to close the risk. It was explained that the risk would go to Directorate level so would remain to be reviewed.

• Councillor Berry referred to CR6, Climate Change and the reference made within the planned actions to ‘Schools Streets’. Councillor Berry stated that as nothing was happening in relation to this why was reference made in the register.

It was stated that this question would be passed to the risk owner for an update.

It was agreed:

1. Note the report;

2. Approve the closure of:

CR29 - Reinforced Autoclaved Aerated Concrete (RAAC), 

CR36 – Project Safety Valve agreement delivery

CR42 - Elections

Confirm that CR40 – Community Tensions and Global Conflict receive a deep dive presented at the next meeting of the Audit Committee.