Agenda item

Collaboration Risk Register Review


The Joint Executive Head of Organisational Development, Robin Taylor, introduced the report and the collaboration risk register, which the Joint Governance Committee was required to review at least every six-months. The initial collaboration risk register had been approved by Guildford and Waverley councils in April 2022, and had been updated by officers to reflect developments and actions to mitigate risks. The risk register set out the risk rating as at April 2022, the current rating, anticipated rating at November 2023, and a residual rating.


Members of the Committee raised a number of queries in relation to specific risks identified on the collaboration risk register. These are noted below in the order that they appear on the risk register rather than the order in which they were discussed:


No. 5 Risk that JMT resource will not be apportioned fairly. Relates to Risk no. 11 and no.19 – unfair apportionment of JMT resource, one council’s priorities  dominating JMT resource for a period, perception by councillors that officers are less available than previously. Noted that some councillors felt communication to back bench Members had been poor and this had fostered a perception that officers were less available. There was a cultural issue that needed to be addressed to ensure that councillors’ expectations of the shared JMT, and of hybrid working, were realistic, but also they were informed of how to address questions and concerns to the correct management level in the respective organisations.


No. 6 Risk that either or both councils will decide to terminate the partnership. Members queried the relation of this risk to clauses 21 and 22 of the IAA, whether there still a need for those clauses, and whether the notice periods were correct. It was noted that legal advice had been to include dispute resolution arrangements in the IAA, and that further legal advice would be needed before changing these clauses. The Committee asked officers to obtain legal advice on this issue so that the risks could be reflected correctly in the risk register. The risk register needed to reflect that the closer the collaboration became, the more impactful an ending of the partnership would be to the councils.


No. 8 Risk that officer capacity will be over-stretched during the transition. This was showing a Residual High risk rating, which indicated that further mitigation was needed. The target risk should not be High.


No.13 Risk that expected savings cannot be realised at one or both councils. This risk was shown as moving from Medium to High over the next 12 months, and it was noted that the savings target would change from year to year, and as budget mitigations were identified each year.


No. 17 Failure to address the different IT legacy systems. Members noted that this was anticipated to still be a High risk at November 2023 and asked what actions were in train to address the issue. Officers advised that there was no mandate for the councils to harmonise their IT, but this would be explored on a case-by-case basis and supported by a business case where there was a recommendation to align IT systems. Some areas were more reliant on IT integration than others. The ICT Strategy Board would be meeting 9 January 2023 to begin the development of a shared ICT strategy focussed on supporting the partnership and identifying resources required and return on investment that is possible. It was agreed that Risk No. 14 which was currently shown as Medium should also be rated High as this related to transition costs, including those of IT.


The following general points were identified during the discussion on the risk register:

·        The key to the R-A-G ratings needed to be circulated with the risk register so that it is clear how the likelihood and impact are weighted and reflected in the overall risk rating.

·        Financial thresholds in the key need to be clear and may need to be revised.

·        The risk register needed to be clearer in distinguishing between the residual risk, after identified mitigations, and the target risk. Where identified mitigations are not sufficient to reach the target risk rating, more action would be needed, except where these are risks that were beyond the scope of the council to influence such as a change in government policy on local government reorganisation.

·        The column headings on the risk register were confusing: there needed to be a Target risk added (by Jan 2027) so that the committee could see the current risk, residual risk (after mitigation), and target risk.

The Committee agreed to meet again in March 2023 to review a revised collaboration risk register, taking into account the suggested revisions to the layout, and the need to review the key alongside the register.




Supporting documents: