Agenda item

Internal Audit - Annual Audit Opinion 2024/25

To receive the Financial Governance Manager’s Report No. AUD25/04 (copy attached) which presents the Financial Governance Manager’s independent annual audit opinion for 2024/25.

Minutes:

The Committee considered the Financial Governance Manager’s Report No. AUD25/04 which set out the Internal Audit Manager’s independent annual audit opinion for 2024/25 on the adequacy and effectiveness of the Council’s framework of governance, risk management and internal control environment. The Financial Governance Manager presented the report as, although they had changed roles from Audit Manager in February 2025, they were best placed to share the report. With reference to Appendix 1 of the Report, the Committee noted that assurance levels had been provided for each of these areas in order to provide a clear assessment:

 

         Internal Control Environment – It was noted that, in the opinion of the Audit Manager, the internal control environment for the Council was reasonable. The level of substantial assurances had decreased; however the level of reasonable has increased significantly, along with the limited assurances decreasing. No limited assurances had been given for the key financial systems across the 3-year cycle.

 

         Governance - It was noted that, in the opinion of the Audit Manager, governance for the Council was reasonable. Governance issues were addressed through the corporate governance group, and it had been acknowledged that work needed to be done to improve the governance arrangements within the Council following the CIPFA and Peer Challenge reviews carried out in June 2024. As a result of the reviews, action plans had been put in place to implement the recommendations made. The Council took a view on outstanding audit recommendations given the passage of time and the evolution of processes over the years. Accordingly, a reduced number of recommendations were present to Corporate Governance, Audit and Standards Committee as still outstanding. These would continue to be followed up for implementation.

 

         Risk Management – It was noted that, in the opinion of the Audit Manager, risk management for the Council was reasonable. Whilst a reasonable assurance has been provided, the process continued to require improvement to ensure that it was an effective management tool rather than just process driven. The Committee heard that the Council had in place Service Risk Registers and a Corporate Risk Register. Quarterly, the overall changes were reported to the Corporate Management Team (CMT) for review and scrutiny. Following this, the report was presented to Cabinet. CMT and Cabinet acted as layers of defence to ensure that risks had been identified and where necessary, actions taken to appropriately mitigate the risk. The Committee noted that a risk appetite statement had not been defined and agreed with Members. However, work was progressing in this area with a workshop being held and facilitated by an external consultant in order to define risk appetite for the Council.

 

During discussion, a question was raised regarding how the Council could gain full assurance in all areas. It was noted by the Committee that, as it was a risk-based audit, the Council needed to seek out areas of weakness, in order to make improvements and make it a better environment in terms of risk and control. Questions were also raised regarding risk management, procurement cards and an update was given on areas shown by the audit to have limited levels of assurance.

 

RESOLVED That:

 

(1)      the Audit Opinion given for governance, risk management and internal control for 2024/25 be noted, and

 

(2)      the self-assessment exercise against the Public Sector Internal Audit Standards (PSIAS) be noted.

Supporting documents: