|
Susie Young introduced the item,
which is a consolidated view across the assurance and risk picture for HBRC.
Discussions highlighted:
·
The
report consolidates what has been provided through multiple reports in the
past (as directed by RAC to do in the prior meeting) into one agenda item.
· Things have settled somewhat for
HBRC, after the completion of the multiple external reviews of HBRC’s
response to Cyclone Gabrielle.
· A large volume of actual and
potential reforms to the local government sectors are being considered, or
are currently in the legislative process.
· A number of Fast-Track projects have
been announced by central government including some in the Hawke’s Bay
region.
· Continue to drive the embedding of
the risk framework across the organisation with a focus now on key controls
– what can’t go wrong and what must go right.
· Council continues to be challenged on
NIWE delivery in terms of the pace expected by government in the face of very
complex land acquisition negotiations and community interests.
· The invitation of the local council
CEs to ‘steering group’ discussions of relevant local projects is
to ensure that those councils are well informed about what work is happening
in their local areas.
· Fundamental risk issues out of the
Cyclone Gabrielle reviews may come to RAC for awareness but are being dealt
with through the relevant committees and Council decisions.
· Significant work has been done on
business continuity plans, both HBRC and CDEM, has been and is being
undertaken.
· The risk management framework
continues to be embedded, particularly around identifying key controls and
putting assurance mechanisms in place. The assurances will come back
through this committee as control testing.
· Third party reviews such as the
Wairoa flood review will continue to go through other committees, however they
will come through this committee where there are aspects that relate to the
operation and design of the risk management framework.
· The senior legal position will
include the work of the previous risk management role.
· Health and Safety incident reporting
has increased, with none significant enough to warrant escalation.
· Council is working with ComplyWith
in relation to legal compliance obligations.
· Data analytics audit has reported
and findings will be presented to the next meeting.
· The cyber security audit has been
deferred until March/April 2025 while specialist resource is brought in to
cover network architecture and security.
·
Disappointing
that only 5 councillors completed the last quarterly risk sentiment survey,
and that participation has decreased with each survey.
Councillor
Thompson Hokianga arrived at 9.41am
|
