|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_10 |
Title |
Housing Regulations |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev AD Hou |
|
||
|
Risk Description |
Failure to comply with housing legislation including the Social Housing (Regulation) Act and achieve a satisfactory grade with the Regulator of Social Housing, resulting in injury or ill health of tenants, prosecution with subsequent financial penalty, reputational damage to the council and loss of control of the service. |
Risk Group |
Housing |
Linked Risk(s) |
CHO_8; CRR_11 |
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Improvement plan and strategy; new governance arrangements through housing improvement board; O&S committee; new structure for tenant engagement; new suite of performance indicators; ongoing customer satisfaction arrangements through TSMs; regular engagement with the social housing regulator; critical friend challenge from Savilles; |
|
|||||||||
|
Current Probability |
H |
Current Impact |
VH |
Current Risk Score |
20 |
Current Risk Category |
Very High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CHO_22 |
Ensure we have full understanding of data quality and assurance, in order to meet legal and regulatory requirements; baseline known but further work to establish a sustainable view on data (date is next review) |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_29 |
Ensure compliance with the 'big seven' H&S requirements – ongoing |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_30 |
Ensure delivery of the stock condition survey programme |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_31 |
Ensure there is sufficient resource to address the impact of the improvement plan work, including predicted increases in demand for responsive repairs, demand for responsive surveys in respect of damp and mould and increased complaints - ongoing |
ComDev AD Hou |
31-Jul-2026 |
|
|
|
||||
|
RR_CHO_32 |
Work to ensure we are compliant with the Rent Standard (currently being supported by Veritau) |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_33 |
Deliver the Governance and Oversight element of the improvement plan |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_34 |
Deliver the Understanding Stock Quality element of the improvement plan |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_35 |
Deliver the Keeping Homes Safe and Compliant element of the improvement plan |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_36 |
Deliver the Understanding Tenants and Responding to Diverse Needs element of the improvement plan |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_37 |
Deliver the Effective Repairs and Maintenance Service element of the improvement plan |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_38 |
Deliver the Working with Others to Ensure Safe Neighbourhoods element of the improvement plan |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
RR_CHO_39 |
Deliver the Allocate and Let Homes Fairly and Manage Tenancy element of the improvement plan |
ComDev AD Hou |
31-Aug-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
M |
Target Impact |
H |
Target Risk Score |
12 |
Target Risk Category |
Medium High |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Respond as necessary to any incident, carry out lessons learned review |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_8 |
Title |
Local Plan |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev AD Plan |
|
||
|
Risk Description |
Failure to develop a Local Plan by 2029 as a framework to promote growth and support decision making around planning and development in North Yorkshire resulting in risk of appeals with resulting financial and workload implications adverse implications for the local economy and the Council’s ambitions for growth and place making |
Risk Group |
Strategic |
Linked Risk(s) |
CPSG_10 |
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Local Plan in preparation; Head of Service appointed and Policy and Place team established; Local Plan working group; member engagement and decision making via the Development Plan Committee; consolidated information system (Objective) procured; Budget and key milestones agreed by council; cross council officer working group established; terms of reference for growth board agreed; Local Plan Development Risk Assessment regular monitored |
|
|||||||||
|
Current Probability |
H |
Current Impact |
H |
Current Risk Score |
16 |
Current Risk Category |
High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_44 |
Develop and implement a full Engagement Strategy; ongoing early stakeholder engagement well underway; Initial stage complete |
ComDev PSG HoPP&P |
31-Jul-2025 |
|
31-Jul-2025 |
|
||||
|
RR_CDE_45 |
Consult on the issues and options for growth strategy and other local plan policy areas |
ComDev PSG HoPP&P |
31-Jul-2025 |
|
31-Jul-2025 |
|
||||
|
RR_CDE_55 |
Begin consultation on the draft local plan in accordance with the engagement strategy |
ComDev PSG HoPP&P |
31-Dec-2026 |
|
|
|
||||
|
RR_CDE_56 |
Develop partnership and the opportunity for joint working with the MCA on the Spatial Development Plan |
ComDev PSG HoPP&P |
31-Dec-2027 |
|
|
|
||||
|
RR_CDE_57 |
Ensure there is sufficient capacity to deliver the plan and additional work with the MCA as well as support through the Target Operating Model and other service areas (e.g. transport) |
ComDev PSG HoPP&P |
31-Dec-2028 |
|
|
|
||||
|
RR_CPL_23 |
Continue proactive engagement with elected members and other key stakeholders |
ComDev PSG HoPP&P |
31-Aug-2026 |
|
|
|
||||
|
RR_CPL_24 |
Develop a robust evidence base to support the policies in the plan; some delay due to jointly commissioning work with the MCA and the scale of evidence following revised housing need figure |
ComDev PSG HoPP&P |
31-Aug-2026 |
|
|
|
||||
|
RR_CPL_25 |
Ensure consultees respond in a timely way to site assessment work |
ComDev PSG HoPP&P |
31-Aug-2026 |
|
|
|
||||
|
RR_CPL_26 |
Monitor and respond to government consultations on changes to the planning system; response provided to consultation on changes to national planning policy, fundamental changes to the plan making system are expected in Autumn / Winter 2025, we will need to understand and communicate the impact of these changes |
ComDev PSG HoPP&P |
31-Aug-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
M |
Target Impact |
H |
Target Risk Score |
12 |
Target Risk Category |
Medium High |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Rely on legacy plans and local plan as far as drafted and use of national guidance |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_11 |
Title |
Capital Programme |
Risk Owner |
CD ComDev |
Risk Manager |
RES AD (PF) |
|
||
|
Risk Description |
Failure to put together a sustainable capital programme including Housing (HRA), culture, leisure and Libraries, Regeneration Schemes such as Catterick LUF, Scarborough and Whitby Towns Fund and Harrogate Convention Centre redevelopment resulting in budget overspends, loss of reputation |
Risk Group |
Financial |
Linked Risk(s) |
CRR_15 |
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
budgets in place; maximise grants available; budget monitoring; project and budget managers in place; grant funding for some projects in place; Capital Programme Plan; Capital Boards in place such as Housing and Regeneration including specific project and programme boards; Plan for Neighbourhoods |
|
|||||||||
|
Current Probability |
M |
Current Impact |
H |
Current Risk Score |
12 |
Current Risk Category |
Medium High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_26 |
Ensure appropriate plans for projects are developed and agreed - ongoing |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_27 |
Continue budget and progress monitoring of all Schemes including reporting and escalating through Corporate Boards - ongoing |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_28 |
HCC - Obtain Mgt Board decision on future business model and decision in principle for refurbishment (Studio 2); Studio 2 proposal going to Exec in Dec with procurement to commence in Jan 2025 if agreed; Exec agreed in principle subject to business case, project ongoing; Studio 2 proposal agreed and going into project delivery |
ComDev Dir HCC |
30-Sep-2025 |
|
31-Mar-2025 |
|
||||
|
RR_CDE_47 |
Develop a leisure investment strategy; strategy developed and overall budget envelope agreed by Exec; individual business cases will still be required for each location |
ComDev AD CLAL |
07-Nov-2025 |
|
04-Nov-2025 |
|
||||
|
RR_CDE_51 |
Work with YNYCA and other stakeholders on future capital regeneration related opportunities |
ComDev AD PSG; RES AD (PF) |
31-Oct-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
M |
Target Impact |
H |
Target Risk Score |
12 |
Target Risk Category |
Medium High |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Review capital projects and revise plan |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_12 |
Title |
Harrogate Convention Centre |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev Dir HCC |
|
||
|
Risk Description |
Failure to put in place an effective programme for Harrogate Convention Centre reinvestment/redevelopment and agree how the Centre operates in the future resulting in inability to maintain the present order book, missed commercial opportunities and inefficiency |
Risk Group |
Infrastructure |
Linked Risk(s) |
CHC_2 |
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Programme for redevelopment and business model in place; draft full business case and an HCC Strategic Review of Business Model Options from external consultants; condition surveys done; building services team in place; ongoing regular repairs; being undertaken by HCC team where practicable; venue security manager now in post; |
|
|||||||||
|
Current Probability |
M |
Current Impact |
H |
Current Risk Score |
12 |
Current Risk Category |
Medium High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_28 |
HCC - Obtain Mgt Board decision on future business model and decision in principle for refurbishment (Studio 2); Studio 2 proposal going to Exec in Dec with procurement to commence in Jan 2025 if agreed; Exec agreed in principle subject to business case, project ongoing; Studio 2 proposal agreed and going into project delivery |
ComDev Dir HCC |
30-Sep-2025 |
|
31-Mar-2025 |
|
||||
|
RR_CDE_31 |
Ensure on-going repair and maintenance; continue engagement with new property colleagues over future maintenance processes |
ComDev HCC HoOps |
31-Aug-2026 |
|
|
|
||||
|
RR_CDE_32 |
Review and agree the HCC operational model; working with Finance, Legal and HR to develop the required 5-10 year business plan to support the proposed operating model |
ComDev Dir HCC; RES AD (PF) |
31-Aug-2026 |
|
|
|
||||
|
RR_CDE_37 |
Ensure appropriate customer service delivery by working with HR to manage the recruitment process for casual workers |
ComDev HCC Mgt Tm |
31-Aug-2026 |
|
|
|
||||
|
RR_CDE_38 |
Continue to work with Finance to resolve issues arising with Oracle whilst developing a case for change through review of HCC business model re use of Oracle / Matrix and other systems and processes which have negative effects on HCC efficiency and customer delivery |
ComDev HCC Comm Mgr |
31-Aug-2026 |
|
|
|
||||
|
RR_CDE_39 |
Continue to review opportunities to reduce energy use by engaging in Invest to Save and improved detailed management of heating controls |
ComDev HCC HoOps |
31-Aug-2026 |
|
|
|
||||
|
RR_CHC_3 |
Martyn’s law - review and Implement the 43 recommendations from security review; subject to funding agreement; |
ComDev HCC HoOps |
31-Jul-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
M |
Target Impact |
H |
Target Risk Score |
12 |
Target Risk Category |
Medium High |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Review and revise Harrogate Convention Centre programme |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_2 |
Title |
Financial Challenges |
Risk Owner |
CD ComDev |
Risk Manager |
RES AD (PF) |
|
||
|
Risk Description |
Failure to manage the revenue budget due to increased costs, demands and reduced income, together with delivery of transformation savings requirements results in budgetary pressure, missed opportunities and internal / external criticism |
Risk Group |
Financial |
Linked Risk(s) |
|
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Established NYC teams continue to manage budgets; reporting to strategic budget managers (management team) on a regular basis; Q reporting to management board and Members; pricing strategies across services reviewed; |
|
|||||||||
|
Current Probability |
M |
Current Impact |
H |
Current Risk Score |
12 |
Current Risk Category |
Medium High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_3 |
Continue to apply for central government support and funds where possible (ongoing) |
RES AD (PF) |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_4 |
Continue with energy efficiency measures across the Directorate (ongoing) |
ComDev AD CLAL; ComDev AD Hou; ComDev Dir HCC |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_58 |
Ensure understanding of the cost pressures relating to Housing legislation compliance and its impact on the HRA business plan (NH to agree) |
ComDev AD Hou; RES AD (PF) |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_7 |
Implement the transformation and budget saving plan; on track for 25/26, new plan to be developed as part of 26/27 budget; |
ComDev DMT |
31-Jan-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
M |
Target Impact |
H |
Target Risk Score |
12 |
Target Risk Category |
Medium High |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Review budget spending plans and implement action plan |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_14 |
Title |
Regeneration schemes |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev AD PSG |
|
||
|
Risk Description |
Failure to fund, develop and deliver on key regeneration schemes across the county (eg.Town Deals, Plan for Neighbourhoods, Town Investment Plans, Mayoral Investment Fund and other external funded schemes) resulting in missed opportunities to revitalise target areas |
Risk Group |
Project Management |
Linked Risk(s) |
CPSG_4 |
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Town Deals and Town Investment Plans (TIP) have governance papers and governance checks in place and regular monitoring at quarterly intervals, reporting to Town Investment Board; External Town Deal Board, reporting through the Growth Capital Board; Catterick has programme board incl DIO; Transforming Cities Fund has Programme Board that reports to Infrastructure Capital Board; Transforming Cities Fund |
|
|||||||||
|
Current Probability |
M |
Current Impact |
H |
Current Risk Score |
12 |
Current Risk Category |
Medium High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CEC_12 |
Lead the development of Town Investment Plans for Tier 1 and Tier 2 settlements in North Yorkshire (Yr 1 of 3) working with Area Committees and key stakeholders / partners. |
ComDev PSG HoRegen (HJ); ComDev PSG HoRegen (JR) |
31-Jan-2028 |
|
|
|
||||
|
RR_CEC_13 |
Develop the Scarborough Plan for Neighbourhoods with the Scarborough Neighbourhood Board and local community |
ComDev PSG HoRegen (HJ) |
28-Nov-2025 |
|
|
|
||||
|
RR_CEC_23 |
Continue to identify, coordinate and maximise external funding opportunities to support service and corporate priorities - ongoing |
ComDev PSG HoRegen (HJ); ComDev PSG HoRegen (JR) |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_24 |
Coordinate and complete feasibility projects funded through the Mayoral Investment Fund including Selby Abbey Quarter |
ComDev PSG HoRegen (JR) |
31-Dec-2026 |
|
|
|
||||
|
RR_CEC_40 |
Deliver and coordinate the eight projects in Scarborough Town Deal Investment Plan; various start and completion dates for projects running through to Mar 28 |
ComDev PSG HoRegen (HJ) |
31-Mar-2028 |
|
|
|
||||
|
RR_CEC_41 |
Deliver and Coordinate the projects in the Whitby Town Deal Investment Plan; two delivered, one on site with remaining projects to go ahead over the coming months |
ComDev PSG HoRegen (HJ) |
31-Mar-2028 |
|
|
|
||||
|
RR_CEC_42 |
Deliver the Catterick Garrison Regeneration Project |
ComDev PSG HoRegen (HJ) |
30-Nov-2026 |
|
|
|
||||
|
RR_CEC_43 |
Deliver the Selby Abbey Quarter project - first phase |
ComDev PSG HoRegen (JR) |
31-Dec-2026 |
|
|
|
||||
|
RR_CEC_44 |
Support the delivery of the Transforming City Fund Projects in Selby, Skipton and Harrogate; delivered by Major Projects in Env |
ComDev PSG HoRegen (JR) |
31-Mar-2028 |
|
|
|
||||
|
RR_CEC_45 |
Develop and implement a consistent approach to project management, resourcing and evaluation – ongoing |
ComDev PSG HoRegen (HJ); ComDev PSG HoRegen (JR) |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_46 |
Work with Property to ensure Council-owned assets support place-based regeneration priorities (Scarborough, Harrogate and Selby) – being progressed as part of TIP |
ComDev PSG HoRegen (HJ); ComDev PSG HoRegen (JR) |
30-Sep-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
L |
Target Impact |
H |
Target Risk Score |
8 |
Target Risk Category |
Medium |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Escalate to appropriate board, communication campaign and liaison with funders to resolve |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_3 |
Title |
Service integration |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev DMT |
|
||
|
Risk Description |
Failure to bring together the existing systems and processes into a single service operating model for NYC results in ineffective and inconsistent approach to operations and decision making, reduced performance, increase in challenge and missed opportunities. |
Risk Group |
Change Mgt |
Linked Risk(s) |
|
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Existing legacy council systems and processes; outcomes from LGR working group; work has commenced on a unified approach to upgrades; Tech team are mapping all the integration between systems; live project in place for planning / BCP with go live between Jan – Mar 25 to align core case management systems; new structure in place; using Windows 11 |
|
|||||||||
|
Current Probability |
M |
Current Impact |
H |
Current Risk Score |
12 |
Current Risk Category |
Medium High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_10 |
Work to regularise processes and practice across the services; progress is dependent on system solutions |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_11 |
Work with Technology and Transformation to review business processes and then design a single version of each system, representing the whole county; project in place for planning with go live around end of April 25 to align core case management systems; target for full implementation is April 2026; Phase 1 complete, moving into phase 2 (for the remaining legacy authorities) |
ComDev DMT |
30-Apr-2026 |
|
|
|
||||
|
RR_CDE_13 |
Complete the embedding of staff within restructured teams and prepare for the final transfers in to ANY, followed by the required further restructuring with the service |
HoHR (ComDev) |
30-Jun-2027 |
|
|
|
||||
|
RR_CDE_9 |
Work to bring the teams together into single NYC services |
ComDev DMT |
30-Apr-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
L |
Target Impact |
H |
Target Risk Score |
8 |
Target Risk Category |
Medium |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Continue operation of existing systems |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_6 |
Title |
Health and Safety |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev DMT |
|
||
|
Risk Description |
Failure to operate appropriate Health and Safety practice across the Directorate resulting in serious injury to staff and potential prosecution |
Risk Group |
Health, Safety & Wellbeing |
Linked Risk(s) |
|
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Same existing, individual legacy council arrangements remain but many NYC arrangements have been developed and are being adopted; Directorate level H&S Plan |
|
|||||||||
|
Current Probability |
M |
Current Impact |
H |
Current Risk Score |
12 |
Current Risk Category |
Medium High |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_21 |
Work with Directorate Health and Safety Manager to further embed the Directorate Health and Safety Plan; overall plan in place with service sub plans subject to ongoing further improvement |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_22 |
Ensure completion of mandatory induction and ongoing health and safety training; ongoing and implementing specific training packages (eg asbestos); will lead to a H&S training matrix |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_23 |
Work to understand usage of the technological lone worker solution and other lone working arrangements |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_24 |
Work with H&S to harmonise the risk assessment process within the Directorate; SharePoint Library in place |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_46 |
Work to ensure compliance with Protect Duty legislation |
ComDev AD CLAL; ComDev Dir HCC |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_49 |
Ensure engagement with Property service to clarify roles and responsibilities for property related H&S matters |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_50 |
Ensure consistency of approach to Construction Design and Management (CDM) regulations across all areas. |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
L |
Target Impact |
H |
Target Risk Score |
8 |
Target Risk Category |
Medium |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Review existing arrangements and revise as required |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_5 |
Title |
Information Governance and Data Security |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev DMT |
|
||
|
Risk Description |
Ineffective information governance arrangements leading to unacceptable levels of unauthorised disclosure of personal and sensitive data, vulnerability to cyber-attack and poor quality or delayed responses to FoI requests in the context of merging systems and processes into a single service resulting in impact on service users, loss of reputation, poor decision making and fines |
Risk Group |
Info Gov |
Linked Risk(s) |
|
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Existing arrangements from legacy councils; mandatory training; |
|
|||||||||
|
Current Probability |
M |
Current Impact |
M |
Current Risk Score |
9 |
Current Risk Category |
Medium |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_17 |
Ensure mandatory training is carried out and complete further training with staff on info gov matters, particularly in regard to any areas highlighted following breaches - ongoing |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_18 |
Ensure Directorate BCPs are kept up to date and periodically exercised to increase preparedness for a cyber-attack - ongoing |
ComDev DMT |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_19 |
Ensure robust governance and training arrangements in respect of volunteers - ongoing |
ComDev AD CLAL |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_20 |
Make contact with the Data Governance and review present position on information governance arrangements; contact known, working to develop regular monitoring and reporting |
RES AD (PF) |
31-Oct-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
M |
Target Impact |
M |
Target Risk Score |
9 |
Target Risk Category |
Medium |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Review and revise Action Plan and new technology and continue to raise awareness |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_4 |
Title |
Restructure, Recruitment, Retention and Culture |
Risk Owner |
CD ComDev |
Risk Manager |
HoHR (ComDev) |
|
||
|
Risk Description |
Failure to embed team structures, support the convergence of teams with sufficient skilled staff with customer focus and a defined performance framework to deliver quality services. Also the inability to recruit and retain sufficient skilled staff results in sub optimal performance, resourcing issues, increased workload pressures, criticism and missed opportunities including the ability to generate income |
Risk Group |
Staffing |
Linked Risk(s) |
|
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Corporate People Strategy; access to HR support; existing HR policy suites; manager inductions and upskilling; specialist support for restructures; maximising use of apprenticeship programme, grow your own and career path development; targeted workforce development plans |
|
|||||||||
|
Current Probability |
M |
Current Impact |
M |
Current Risk Score |
9 |
Current Risk Category |
Medium |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CDE_12 |
Ensure consistent communication and support is provided to staff throughout change management |
HoHR (ComDev) |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_13 |
Complete the embedding of staff within restructured teams and prepare for the final transfers in to ANY, followed by the required further restructuring with the service |
HoHR (ComDev) |
30-Jun-2027 |
|
|
|
||||
|
RR_CDE_15 |
Develop and implement a People Strategy action plan to encourage the appropriate culture; currently agreeing priorities and initial projects within the directorate; priorities agreed but will be refreshing the workings of the group and its priorities (taking in the findings of the Pulse survey) |
HoHR (ComDev) |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_52 |
Continue with specific campaigns for hard to recruit to areas within the Directorate - ongoing |
HoHR (ComDev); HR HoResSol |
31-Oct-2026 |
|
|
|
||||
|
RR_CDE_53 |
Continue to provide support to managers on HR polices and processes (includes working through the post-audit action plan) - ongoing |
HoHR (ComDev) |
31-Oct-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
L |
Target Impact |
M |
Target Risk Score |
6 |
Target Risk Category |
Medium |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Review and revise the People Strategy |
||||||||||
|
|
||||||||||
|
Phase 1 - Identification |
|
|||||||||
|
Ref. |
CDE_7 |
Title |
Growth |
Risk Owner |
CD ComDev |
Risk Manager |
ComDev AD PSG |
|
||
|
Risk Description |
Failure to deliver the ambition of sustainable economic growth that enables people and places to prosper; new and existing business to thrive and grow; a productive and skilled workforce; culture, heritage, arts and sustainable tourism to all play their part and the County to have a high profile and receive its fair share of resources. This results in an inability to attract, retain and grow businesses, increase the number of strategic employment and housing sites, raise living standards and increase spending power. |
Risk Group |
Strategic |
Linked Risk(s) |
CPSG_2 |
|
||||
|
Phase 2 - Current Assessment |
|
|||||||||
|
Current Control Measures |
|
|||||||||
|
Economic Growth Function within Community Development; Proactive engagement in Y&NY CA Growth Board; Lead role in monitoring and delivery of the NYC Economic Growth Strategy (2024-2029); Delivery of Shared prosperity fund and Trailblazer; Working with YNY local skills improvement plan advisory board |
|
|||||||||
|
Current Probability |
M |
Current Impact |
M |
Current Risk Score |
9 |
Current Risk Category |
Medium |
|
||
|
Phase 3 - Risk Mitigation Plan |
|
|||||||||
|
Reduction Action |
Action Manager |
Due Date and status |
Date Completed |
|
||||||
|
RR_CEC_2 |
Maintain good joint working relationship with the YNYCA to align economic and skills strategy and funding; monthly senior mgt & officer meetings, internal MCA coordination updates at the monthly cross council meetings |
CD ComDev |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_3 |
Continue to understand and investigate any impacts of new legislation and funding streams - ongoing |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_31 |
Work collaboratively with key partners and stakeholders to develop a consistent model for Business Support, Inward Investment and Skills that provides a seamless service offer to businesses |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_32 |
Develop and implement a consistent way to capture and communicate key outcomes and outputs for the service and the Economic Growth Strategy (including annual reports) |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_33 |
Identify and define clear strategic roles and responsibilities for NYC around Skills working internally, with the Combined Authority and other key partners |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_35 |
Carry out a review of business centres for business and strategic skills across NY |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_36 |
Develop and run a targeted programme of Business North Yorkshire events including North Yorkshire Business Week 2025 |
ComDev AD PSG |
31-Dec-2025 |
|
|
|
||||
|
RR_CEC_37 |
Ensure that we support the development and delivery of key regeneration schemes across the county (see Risk CEC_4) |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_38 |
Develop a clear action plan for growth priorities linked to the NYC growth strategy and agree the associated performance monitoring |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_39 |
Work with YNYCA to develop a clear strategic narrative / pipeline of projects to maximise external funding for economic growth |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_51 |
Develop and implement a strategic inward investment action plan, making sure our approach is clear in relation to key sector opportunities and employment sites |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CEC_52 |
Shape and implement a new Year 4 programme of UK Shared Prosperity Fund activity and influence longer term approach |
ComDev AD PSG |
31-Mar-2026 |
|
|
|
||||
|
RR_CEC_7 |
Ensure adequate focus on marine and renewable sectors as important local economic development targets; will be included in NY Business Week |
ComDev AD PSG |
31-Mar-2026 |
|
30-Jun-2025 |
|
||||
|
RR_CPSG_62 |
Work collaboratively with internal stakeholders (eg. Env Health, Trading Stds, Business Rates, Planning & Highways) to improve communication, joint working and better understanding of the impact of each other’s services in relation to Economic Development |
ComDev AD PSG |
30-Sep-2026 |
|
|
|
||||
|
RR_CPSG_63 |
Develop and implement a Business Engagement Strategy |
ComDev AD PSG |
31-Mar-2026 |
|
|
|
||||
|
Phase 4 - Target Risk Assessment |
|
|||||||||
|
Target Probability |
L |
Target Impact |
M |
Target Risk Score |
6 |
Target Risk Category |
Medium |
|
||
|
Phase 5 - Fallback Plan |
|
|||||||||
|
Fallback Plan |
|
|||||||||
|
Review and revise existing arrangements for sustainable economic growth |
||||||||||
|
|
||||||||||
|
Risk Reduction Action Status Key |
|
|
Symbol |
Meaning |
|
|
The risk reduction action is overdue for completion or review. |
|
|
The risk reduction action is approaching its expected completion or review date. |
|
|
The risk reduction action is on target. |
|
|
The risk reduction action has been completed. |