DIRECTORATE OF AUDIT, RISK FF AND ASSURANCE. Appendix 2a FOLLOW UP REVIEW OF CORPORATE BUSINESS CONTINUITY

Size: px
Start display at page:

Download "DIRECTORATE OF AUDIT, RISK FF AND ASSURANCE. Appendix 2a FOLLOW UP REVIEW OF CORPORATE BUSINESS CONTINUITY"

Transcription

1 DIRECTORATE OF AUDIT, RISK FF AND ASSURANCE Internal (Foundry Audit Forms Service San/ Font size to 20/ the RBG: 160, GLA 160, 170) Appendix 2a FOLLOW UP REVIEW OF CORPORATE BUSINESS CONTINUITY

2 DISTRIBUTION LIST Audit Team Prakash Gohil, Audit Manager Andrew Dimon, Risk & Assurance Auditor Report Distribution List Simon Grinter, Head of Resilience and Facilities Management Chris Harris, Resilience and Facilities Management Martin Clarke, Executive Director Resources David Gallie, Assistant Director of Finance

3 CONTENTS EXECUTIVE SUMMARY Page Background 1 Audit Objectives 1 Audit Assurance 1 Key Findings 1 RISK CATEGORISATION Analysis of Original Recommendations 3 Risk and Assurance Ratings Definitions 4 ACTION PLAN Follow Up Findings and Recommendations 5

4 EXECUTIVE SUMMARY 1. Background 1.1 This audit follows up the progress made towards implementing the agreed recommendation from the audit of Corporate Business Continuity that was completed in September The Civil Contingencies Act, 2004 requires the GLA to maintain an acceptable level of service of critical activities in the event of disruption, and therefore the GLA is a category 1 responder. Business continuity is overseen by the GLA Resilience Group, which is chaired by the Director of Resources and includes representatives from each business areas who maintain their own directorate plans. 1.3 Since the audit the HCA and LDA are now part of the GLA, and have formed a new Housing and Land directorate, and as required the new directorate has an up to date business continuity plan in place. 1.4 The original audit report contained four recommendations which were accepted by management. 2. Audit Objectives 2.1 Our objectives during this review were to: Establish whether the accepted recommendations have been implemented. Assess the impact of any changes in the business continuity system since the original review. 3. Audit Assurance Adequate Assurance The control framework is adequate and controls to mitigate key risks are generally operating effectively. 4. Key Findings 4.1 Since our original audit review three recommendations have been fully implemented and one recommendation partly. 4.2 The GLA Resilience Group meet regularly to ensure best practice is consistently applied within the Authority and that the status of directorate continuity plans is discussed. Compliance to update and review every 6 months is overseen by the Director of Resources who chairs the group. An updated corporate business plan was implemented on 26 June September 2012 Corporate Business Continuity Follow Up 1

5 EXECUTIVE SUMMARY 4.3 Business continuity has been discussed extensively over the past year at regular meeting by Corporate Management Team, Devolution Programme, and London The corporate plan was successfully tested in June 2012 in a table top exercise; the outcomes were recorded with actions assigned where necessary. 4.5 Directorate plans are regularly refreshed and all staff are aware of their responsibilities. Directorates and key teams identify critical suppliers and include them in their business continuity plans. 4.6 To date business continuity has not been included into the Corporate and Local Induction process; a planned review of the best approach to incorporate business continuity into the staff inductions process is currently on-going. 4.7 The Executive Director of Resources holds quarterly meetings with representatives of all directorates at the GLA Resilience Group where performance information is agreed and reported as part of GLA Performance Monitoring. September 2012 Corporate Business Continuity Follow Up 2

6 RISK CATEGORISATION Our recommendations are categorised according to their level of priority as follows: Priority 1 Major issues for the attention of senior management. Remedial action should be taken urgently. Priority 2 Other recommendations for local management action. Although not fundamental, relate to short comings in control. Priority 3 Minor Matters. Not critical but would benefit from improved control. Risk Category ANALYSIS OF ORIGINAL RECOMMENDATIONS Accepted Fully Implemented Partly Implemented Not Implemented Priority Priority Priority Priority Total September 2012 Corporate Business Continuity Follow Up 3

7 RISK CATEGORISATION RISK AND AUDIT ASSURANCE STATEMENT DEFINITIONS ASSURANCE CRITERIA Overall Rating Substantial Adequate Limited No Assurance Criteria There is a sound framework of control operating effectively to mitigate key risks, which is contributing to the achievement of business objectives. The control framework is adequate and controls to mitigate key risks are generally operating effectively, although a number of controls need to improve to ensure business objectives are met. The control framework is not operating effectively to mitigate key risks. A number of key controls are absent or are not being applied to meet business objectives. A control framework is not in place to mitigate key risks. The business area is open to abuse, significant error or loss and/or misappropriation. Impact There is particularly effective management of key risks contributing to the achievement of business objectives. Key risks are being managed effectively, however, a number of controls need to be improved to ensure business objectives are met. Some improvement is required to address key risks before business objectives can be met. Significant improvement is required to address key risks before business objectives can be achieved. RISK RATINGS Priority Categories recommendations according to their level of priority. 1 Critical risk issues for the attention of senior management to address control weakness that could have significant impact upon not only the system, function or process objectives, but also the achievement of the organisation s objectives in relation to: The efficient and effective use of resources The safeguarding of assets The preparation of reliable financial and operational information Compliance with laws and regulations. 2 Major risk issues for the attention of senior management to address control weaknesses that has or is likely to have a significant impact upon the achievement of key system, function or process objectives. This weakness, whilst high impact for the system, function or process does not have a significant impact on the achievement of the overall organisational objectives. 3 Other recommendations for local management action to address risk and control weakness that has a low impact on the achievement of the key system, function or process objectives ; or this weakness has exposed the system, function or process to a key risk, however the likelihood is this risk occurring is low. 4 Minor matters need to address risk and control weakness that does not impact upon the achievement of key system, function or process or process objectives; however implementation of the recommendation would improve overall control. September 2012 Corporate Business Continuity Follow Up 4

8 ACTION PLAN Ref. Finding and Risk Priority Original Recommendation Follow Up Finding Further Recommendations and Management Response 7.7 Plans are not regularly reviewed, updated and relevant there is a risk of failed continuity through incorrect information and inadequate identification of supplier service. 2 Red status plans are flagged to the next CMT meeting for action to review and update; All red status plans are flagged for action to review and update. Business continuity is regularly discussed at CMT meetings. There are currently no red status plans and CMT received its latest update on 1 October. None 7.11 The corporate lead is unclear in business continuity documentation; there is a risk of non compliance. Critical suppliers are regularly reviewed by all directorates and included in their business continuity plans. 2 At the next revision of corporate and local plans that the strategic lead is identified as the Head of Paid Services and roles and responsibilities are set and communicated. The template for business continuity plans exists which requires Directorates and key teams (eg FM, IT and Finance) to identify critical suppliers and include them in their business continuity plans that are reviewed every 6 months. A revised corporate plan was published in June 2012 identifying the strategic lead as the Head of Paid Services with set roles and responsibilities. None 7.12 Business continuity is not regularly discussed; there is a risk that staff may be unaware of procedures through time lapses and staff changes. 2 Business continuity is incorporated in corporate and local new starter induction process. Business continuity is Process is still on-going due to staff changes within HR and a planned review of the best approach to incorporate business continuity into the staff inductions process. Business continuity has been Partly Implemented Original Recommendation (bullet point 1) applies Business continuity is incorporated in corporate and local new starter induction process. September 2012 Corporate Business Continuity Follow Up 5

9 ACTION PLAN Ref. Finding and Risk Priority Original Recommendation Follow Up Finding Further Recommendations and Management Response discussed as a 6 monthly agenda item on the Corporate Management Team, Directorate and team meeting to update plans and to refresh all staff of their responsibilities. discussed extensively over the past year at regular meeting by Corporate Management Team, Devolution Programme, GLA Resilience Group, and London This has ensured that directorate plans are regularly refreshed all staff are aware of their responsibilities. Management Response HR will review the appropriate approach to incorporate business continuity into staff inductions. Implementation date January There is a lack of senior management knowledge of the readiness and plans for business continuity. 3 That the reporting structure for business continuity is reviewed to ensure expected reporting and performance information is agreed and regularly provided. The Executive Director of Resources holds quarterly meetings with representatives of all directorates at the GLA Resilience Group where performance information is agreed and reported as part of GLA Performance Monitoring. None September 2012 Corporate Business Continuity Follow Up 6

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA Appendix 1c DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF CORPORATE GOVERNANCE, STRATEGIC PLANNING AND PERFORMANCE FRAMEWORKS INTEGRATING NEW AREAS OF GLA BUSINESS

More information

Appendix 1e DIRECTORATE OF AUDIT, RISK AND ASSURANCE INTERNAL AUDIT SERVICE TO THE GLA

Appendix 1e DIRECTORATE OF AUDIT, RISK AND ASSURANCE INTERNAL AUDIT SERVICE TO THE GLA Appendix 1e DIRECTORATE OF AUDIT, RISK AND ASSURANCE INTERNAL AUDIT SERVICE TO THE GLA REVIEW OF PAYROLL February 2012 DISTRIBUTION LIST Audit Team Karen Welsh, Auditor Prakash Gohil, Audit Manager Distribution

More information

Appenidx 1a. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF HOUSING COMPLIANCE AUDIT PROGRAMME

Appenidx 1a. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF HOUSING COMPLIANCE AUDIT PROGRAMME Appenidx 1a DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF HOUSING COMPLIANCE AUDIT PROGRAMME DISTRIBUTION LIST Audit Team David Esling, Head of Audit and Assurance

More information

Appendix 1e. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA. Performance Management Framework

Appendix 1e. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA. Performance Management Framework Appendix 1e DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA Performance Management Framework DISTRIBUTION LIST Audit Team David Esling, Head of Audit and Assurance - Risk Management

More information

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA. Appendix 1b REVIEW OF CHEQUE HANDLING PROCESS

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA. Appendix 1b REVIEW OF CHEQUE HANDLING PROCESS DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA Appendix 1b REVIEW OF CHEQUE HANDLING PROCESS DISTRIBUTION LIST Audit Team Prakash Gohil, Audit Manager Report Distribution List

More information

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA Appendix 2c DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA Review of Programme and Project Management Framework- Strategic Land and Property DISTRIBUTION LIST Audit Team David

More information

The Regulatory Framework for Social Housing in England Governance and Financial Viability standard requirement: Governance Annual Assessment

The Regulatory Framework for Social Housing in England Governance and Financial Viability standard requirement: Governance Annual Assessment East Thames Group The Regulatory Framework for Social Housing in England Governance and Financial Viability standard requirement: Governance Annual Assessment 1 Context 1.1 Under the Regulatory Framework,

More information

Appendix 1C. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA PAYROLL CONTROL FRAMEWORK

Appendix 1C. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA PAYROLL CONTROL FRAMEWORK Appendix 1C DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA PAYROLL CONTROL FRAMEWORK DISTRIBUTION LIST Audit Team Prakash Gohil, Audit Manager Karen Walker, Risk and Assurance

More information

Appendix 1c. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF INTERNET- BASED NETWORK SECURITY

Appendix 1c. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF INTERNET- BASED NETWORK SECURITY Appendix 1c DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF INTERNET- BASED NETWORK SECURITY DISTRIBUTION LIST Audit Team David Esling, Head of Audit Assurance, Risk

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy Ref. No. TP/028 Title: Business Continuity Policy Page 1 of 15 DOCUMENT PROFILE and CONTROL. Purpose of the document: Provides an overview of the London Ambulance Service NHS

More information

Appendix 1c. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF NETWORK/INTERNET SECURITY

Appendix 1c. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF NETWORK/INTERNET SECURITY Appendix 1c DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF NETWORK/INTERNET SECURITY DISTRIBUTION LIST Audit Team Prakash Gohil, Audit Manager Steven Snaith, Risk

More information

Risk Management Strategy and Policy. The policy provides the framework for the management and control of risk within the GOC

Risk Management Strategy and Policy. The policy provides the framework for the management and control of risk within the GOC Annex 1 TITLE VERSION Version 2 Risk Management Strategy and Policy SUMMARY The policy provides the framework for the management and control of risk within the GOC DATE CREATED January 2013 REVIEW DATE

More information

DERBYSHIRE COUNTY COUNCIL BUSINESS CONTINUITY POLICY

DERBYSHIRE COUNTY COUNCIL BUSINESS CONTINUITY POLICY DERBYSHIRE COUNTY COUNCIL BUSINESS CONTINUITY POLICY VERSION 1.0 ISSUED JULY 2015 CONTENTS Page CONTENTS VERSION CONTROL FOREWORD i ii iii POLICY 1 Scope 1 Aim and Objectives 1 Methods and Standards 1

More information

The Learning Zone - Project Management Arrangements

The Learning Zone - Project Management Arrangements Coleg Gwent Internal Audit Report () 6 June 2012 Overall Opinion The Learning Zone - Project Management Arrangements CONTENTS Section Page Executive Summary 1 Action Plan 4 Findings and Recommendations

More information

BUSINESS CONTINUITY MANAGEMENT POLICY

BUSINESS CONTINUITY MANAGEMENT POLICY BUSINESS CONTINUITY MANAGEMENT POLICY AUTHORISED BY: DATE: Andy Buck Chief Executive March 2011 Ratifying Committee: NHS Rotherham Board Date Agreed: Issue No: NEXT REVIEW DATE: 2013 1 Lead Director John

More information

CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY AND POLICY

CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY AND POLICY Zurich Management Services Limited Registered in England: No 2741053 Registered Office The Zurich Centre, 3000 Parkway Whiteley, Fareham Hampshire, PO15 7JZ CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY

More information

Essex Fire Authority

Essex Fire Authority Internal Audit Report (2.13/.14) FINAL with the Civil Contingencies Act 1 October 2013 Contents Section Page Executive Summary 1 Action Plan 5 Findings and Recommendations 6 Debrief meeting 15 August 2013

More information

Corporate Risk Management Policy

Corporate Risk Management Policy Corporate Risk Management Policy Managing the Risk and Realising the Opportunity www.reading.gov.uk Risk Management is Good Management Page 1 of 19 Contents 1. Our Risk Management Vision 3 2. Introduction

More information

Office of the Police and Crime Commissioner for Avon and Somerset and Avon and Somerset Constabulary

Office of the Police and Crime Commissioner for Avon and Somerset and Avon and Somerset Constabulary Office of the Police and Crime Commissioner for Avon and Somerset and Avon and Somerset Constabulary Internal Audit Report () FINAL Risk Management: Follow Up of Previous Internal Audit Recommendations

More information

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF THE IT STRATEGY AND IMPLEMENTATION CONTROL FRAMEWORK

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF THE IT STRATEGY AND IMPLEMENTATION CONTROL FRAMEWORK Appendix 1b DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF THE IT STRATEGY AND IMPLEMENTATION CONTROL FRAMEWORK DISTRIBUTION LIST Audit Team Steve Hutton, Head of

More information

TRANSPORT FOR LONDON SAFETY, HEALTH AND ENVIRONMENT ASSURANCE COMMITTEE

TRANSPORT FOR LONDON SAFETY, HEALTH AND ENVIRONMENT ASSURANCE COMMITTEE AGENDA ITEM 9 TRANSPORT FOR LONDON SAFETY, HEALTH AND ENVIRONMENT ASSURANCE COMMITTEE SUBJECT: REVIEW OF TFL RESILIENCE MANAGEMENT POLICY FRAMEWORK DATE: 20 JULY 2010 1 PURPOSE AND DECISION REQUIRED 1.1

More information

Business Continuity Policy. Version 1.0

Business Continuity Policy. Version 1.0 Business Continuity Policy Version.0 January 206 Contents Contents Version control Foreword Policy. Scope.2 Aim and objectives.3 Methods and standards.4 Responsibilities.5 Governance.6 Training and exercises

More information

SFJCCAD2 Promote business continuity management

SFJCCAD2 Promote business continuity management Overview This unit is about providing advice and assistance on business continuity management, including general advice for the business and voluntary sectors, and specific advice and assistance to individual

More information

Glasgow Life Carbon Management. Final Report

Glasgow Life Carbon Management. Final Report Glasgow Life Carbon Management Final Report INTERNAL AUDIT Glasgow City Council Internal Audit 1 November 2014 GLASGOW LIFE Carbon Management Table of Contents Section No Section Title 1 Introduction and

More information

PDNPA Project Management Peak District National Park Authority Internal Audit Report 2014/15

PDNPA Project Management Peak District National Park Authority Internal Audit Report 2014/15 Audit, Resources and Performance Committee 20 March 2015 Item 10 Appendix 2 PDNPA Project Management Peak District National Park Authority Internal Audit Report 2014/15 Business Unit: Project Management

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain its essential business functions during

More information

Appendix 1b. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA. Review of Mobile Portable Devices Management

Appendix 1b. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA. Review of Mobile Portable Devices Management Appendix 1b DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA Review of Mobile Portable Devices Management DISTRIBUTION LIST Audit Team David Esling, Head of Audit and Assurance

More information

Glasgow Life Risk Management & Business Continuity Planning. Final Report

Glasgow Life Risk Management & Business Continuity Planning. Final Report Glasgow Life Risk Management & Business Continuity Planning Final Report INTERNAL AUDIT October 2014 Glasgow City Council Internal Audit 1 Glasgow Life Risk Management & Business Continuity Planning Table

More information

DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Performance, Risk and Business Continuity Management Policy

DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Performance, Risk and Business Continuity Management Policy Part Two Part One Not Protectively Marked DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Performance, Risk and Business Continuity Management Policy. The Dorset & Wiltshire Fire and Rescue Authority (DWFRA)

More information

City of York Council Public Health 2014/15 Internal Audit Report

City of York Council Public Health 2014/15 Internal Audit Report City of York Council Public Health 2014/15 Internal Audit Report Business Unit: Communities & Neighbourhoods Responsible Officer: Interim Director of Public Health Service Manager: Public Health Consultants

More information

Appendix 2e. DIRECTORATE OF AUDIT, FF RISK AND ASSURANCE Internal Audit Service to the GLA. Follow up Review of Sickness Monitoring and Control

Appendix 2e. DIRECTORATE OF AUDIT, FF RISK AND ASSURANCE Internal Audit Service to the GLA. Follow up Review of Sickness Monitoring and Control Appendix 2e DIRECTORATE OF AUDIT, FF RISK AND ASSURANCE Internal Audit Service to the GLA Follow up Review of Sickness Monitoring and Control EXECUTIVE SUMMARY 1. Background 1.1 This audit follows up the

More information

DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Performance, Risk and Business Continuity Management Policy

DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Performance, Risk and Business Continuity Management Policy Not Protectively Marked Item 6 Appendix B DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Management Policy The Dorset & Wiltshire Fire and Rescue Authority () is the combined fire and rescue authority for

More information

NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY

NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY AUTHOR/ APPROVAL DETAILS Document Author Written By: Human Resources Authorised Signature Authorised By: Helen Shields Date: 20

More information

INTERNAL AUDIT FINAL REPORT. Project Management. June 2013

INTERNAL AUDIT FINAL REPORT. Project Management. June 2013 Broxbourne Borough Council Contract Audit Project Management APPENDIX E INTERNAL AUDIT FINAL REPORT Project Management June 2013 Ref 18.12/13 June 2013 Page 1 Broxbourne Borough Council Contract Audit

More information

Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015. Business Continuity Policy Statement 2015

Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015. Business Continuity Policy Statement 2015 Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015 Business Continuity Policy Statement 2015 This Policy sets the direction for Business Continuity

More information

Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016

Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016 Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016 Policy Statement - 2016 This Policy sets the direction for Business Continuity Management at Leicester

More information

Appendix 4 - Statutory Officers Protocol

Appendix 4 - Statutory Officers Protocol Appendix 4 - Statutory Officers Protocol Accountability Protocol for role of Director of Children s Services within the London Borough of Barnet Introduction In September 2014, the Chief Executive of the

More information

BUSINESS CONTINUITY POLICY

BUSINESS CONTINUITY POLICY BUSINESS CONTINUITY POLICY Document Type Corporate Policy Unique Identifier CO-038 Document Purpose To provide a structure through which: i. A comprehensive business continuity management system (BCMS)

More information

Appendix 2e. DIRECTORATE OF AUDIT, RISK FF AND ASSURANCE Internal Audit Service to the GLA. Follow up Review Performance Management Analytical Review

Appendix 2e. DIRECTORATE OF AUDIT, RISK FF AND ASSURANCE Internal Audit Service to the GLA. Follow up Review Performance Management Analytical Review Appendix 2e DIRECTORATE OF AUDIT, RISK FF AND ASSURANCE Internal Audit Service to the GLA Follow up Review Performance Management Analytical Review EXECUTIVE SUMMARY 1. Background 1.1 This audit follows

More information

NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy. Version 1.0

NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy. Version 1.0 NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy Version 1.0 Document Control Title: Status: Version: 1.0 Issue date: May 2014 Document owner: (Name,

More information

Dacorum Borough Council Final Internal Audit Report. IT Business Continuity and Disaster Recovery

Dacorum Borough Council Final Internal Audit Report. IT Business Continuity and Disaster Recovery Dacorum Borough Council Final Internal Audit Report IT Business Continuity and Disaster Recovery Distribution list: Chris Gordon Group Manager Performance, Policy and Projects John Worts ICT Team Leader

More information

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA INTERIM REVIEW OF ROYAL ALBERT DOCK PROCUREMENT

DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA INTERIM REVIEW OF ROYAL ALBERT DOCK PROCUREMENT DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA INTERIM REVIEW OF ROYAL ALBERT DOCK PROCUREMENT DISTRIBUTION LIST Audit Team David Esling, Head of Audit and Assurance Phil Drysdale,

More information

V1.0 - Eurojuris ISO 9001:2008 Certified

V1.0 - Eurojuris ISO 9001:2008 Certified Risk Management Manual V1.0 - Eurojuris ISO 9001:2008 Certified Section Page No 1 An Introduction to Risk Management 1-2 2 The Framework of Risk Management 3-6 3 Identification of Risks 7-8 4 Evaluation

More information

7 Directorate Performance Managers. 7 Performance Reporting and Data Quality Officer. 8 Responsible Officers

7 Directorate Performance Managers. 7 Performance Reporting and Data Quality Officer. 8 Responsible Officers Contents Page 1 Introduction 2 2 Objectives of the Strategy 2 3 Data Quality Standards 3 4 The National Indicator Set 3 5 Structure of this Strategy 3 5.1 Awareness 4 5.2 Definitions 4 5.3 Recording 4

More information

Councillor Roger Bayliss 01530 411055 roger.bayliss@nwleicestershire.gov.uk. Director of Housing 01530 454819 glyn.jones@nwleicestershire.gov.

Councillor Roger Bayliss 01530 411055 roger.bayliss@nwleicestershire.gov.uk. Director of Housing 01530 454819 glyn.jones@nwleicestershire.gov. NORTH WEST LEICESTERSHIRE DISTRICT COUNCIL POLICY DEVELOPMENT GROUP 1 JULY 2015 Title of report DRAFT VALUE FOR MONEY STRATEGY FOR THE HOUSING SERVICE Councillor Roger Bayliss 01530 411055 roger.bayliss@nwleicestershire.gov.uk

More information

Note the Chief Internal Auditor s findings to date and gain assurance from Officers that key issues raised are being addressed.

Note the Chief Internal Auditor s findings to date and gain assurance from Officers that key issues raised are being addressed. Agenda Item No: 9 To: Joint Audit Committee Date: 24 September 2014 By: Chief Internal Auditor Title: Internal Audit Update Report 2014-15 Purpose of Report: The purpose of this report is to give an opinion

More information

PS 170 Business Continuity Management Policy

PS 170 Business Continuity Management Policy PS 170 Business Continuity Management Policy July 2013 Version 2 Statement of legislative compliance This document has been drafted to comply with the general and specific duties in the Equality Act 2010;

More information

Strategic Alliance. Business Continuity Policy

Strategic Alliance. Business Continuity Policy Version 1.1 April 2016 Contents Contents Version control Foreword Policy Scope Aim and objectives Methods and standards Responsibilities Governance Training and exercises Page i ii 1 2 2 2 Version 1.1

More information

Department of Developmental Disabilities Accounts ReceivableAudit

Department of Developmental Disabilities Accounts ReceivableAudit Department of Developmental Disabilities Accounts Receivable Period: September 2015 through December 2015 Results Summary: Objective Accounts Receivable Creation Receipt of Payment Monitoring of Past Due

More information

Oxford City Council Managing Capital Projects

Oxford City Council Managing Capital Projects www.pwc.co.uk Internal Audit Report 2014/2015 August 2015 Oxford City Council Managing Capital Projects Table of Contents 1. Executive Summary... 3 2. Background and scope... 5 3. Detailed findings...

More information

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK BUSINESS CONTINUITY MANAGEMENT FRAMEWORK Document Author: Civil Contingencies Service - Authorised by the CCS Joint Management Board - Version 1.0. Issued December 2012 Page 1 FRAMEWORK STATEMENT Business

More information

Cumbria Constabulary. Business Continuity Planning

Cumbria Constabulary. Business Continuity Planning Cumbria Constabulary Business Continuity Planning 0 Cumbria Shared Internal Audit Service Images courtesy of Carlisle City Council except: Parks (Chinese Gardens), www.sjstudios.co.uk, Monument (Market

More information

Internal Audit Report Project Management

Internal Audit Report Project Management Audit Committee, 20 Internal Audit Report Project Management Executive summary and recommendations Introduction As part of the Internal Audit Plan for 2013-14 Mazars have undertaken a review of arrangements

More information

Risk Management and Business Continuity Strategy. www.aberdeenshire.gov.uk

Risk Management and Business Continuity Strategy. www.aberdeenshire.gov.uk Risk Management and Business Continuity Strategy www.aberdeenshire.gov.uk 2 Foreword by Anne Robertson and Colin Mackenzie The Council recognises risk management and business continuity as an integral

More information

Final. Internal Audit Report. Creditors System

Final. Internal Audit Report. Creditors System Final Internal Audit Report Creditors System Document Details: Reference: 1.2 / 2014-15 Senior Manager, Internal Audit & Assurance: David Jenkins ext 6567 Date: 7 th January 2015 This report is not for

More information

The report rated this area Substantial Assurance and made 2 housekeeping recommendations.

The report rated this area Substantial Assurance and made 2 housekeeping recommendations. Audit Committee 21 June 2012 Internal audit report Risk Management review Executive summary and recommendations Introduction Mazars have undertaken a review of Risk Management, in accordance with the internal

More information

LG (2011) Paper 053 28 November 2011 LEADERSHIP GROUP RISK MANAGEMENT ARRANGEMENTS. Executive summary

LG (2011) Paper 053 28 November 2011 LEADERSHIP GROUP RISK MANAGEMENT ARRANGEMENTS. Executive summary LG (2011) Paper 053 28 November 2011 LEADERSHIP GROUP RISK MANAGEMENT ARRANGEMENTS Executive summary Issues 1. This paper sets out proposals to implement new strategic risk management arrangements for

More information

APPENDIX C. Internal Audit Report South Holland District Council Project Management

APPENDIX C. Internal Audit Report South Holland District Council Project Management APPENDIX C Internal Audit Report South Holland District Council Project Management Date: 20th December 2012 Contents Introduction and Scope 1 Executive Summary Assurance Opinion Key Messages 2 3 Management

More information

Regulatory Information and Data Quality Assurance Policy

Regulatory Information and Data Quality Assurance Policy ISSUE 1.0 Page 1 of 7 Regulatory Information and Data Quality Assurance Policy Contents Policy Scope Responsibility for Data Quality and Assurance Reference Documents The Data Quality Assurance Process

More information

Governance and Audit Committee 23 November 2015

Governance and Audit Committee 23 November 2015 Agenda Item 7 Governance and Audit Committee 23 November 2015 Welland Internal Audit Consortium Internal Audit Plan & Performance Update 2015/16 Purpose of report: To provide Members with information on

More information

Internal Audit Progress Report Performance and Overview Committee (19 th August 2015) Cheshire Fire Authority

Internal Audit Progress Report Performance and Overview Committee (19 th August 2015) Cheshire Fire Authority Internal Audit Progress Report (19 th August 2015) Contents 1. Introduction 2. Key Messages for Committee Attention 3. Work in progress Appendix A: Risk Classification and Assurance Levels Appendix B:

More information

Business Continuity Policy and Business Continuity Management System

Business Continuity Policy and Business Continuity Management System Business Continuity Policy and Business Continuity Management System Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain

More information

Harrow Business Consultative Panel. Business Continuity Management. Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy

Harrow Business Consultative Panel. Business Continuity Management. Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy Meeting: Harrow Business Consultative Panel Date: 18 th July 2006 Subject: Business Continuity Management Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy Contact Officer:

More information

CORPORATE GOVERNANCE STATEMENT

CORPORATE GOVERNANCE STATEMENT CORPORATE GOVERNANCE STATEMENT CORPORATE GOVERNANCE PRINCIPLES AND RECOMMENDATIONS In determining what those standards should involve, Sundance has considered the 3 rd Edition of ASX Corporate Governance

More information

2.1 We continue to focus on five areas of development in this report:

2.1 We continue to focus on five areas of development in this report: MEETING: Agenda item and Paper Number Agenda Title Sponsor Author PUBLIC BOARD MEETING 18 November 2015 5 CM/11/15/05 2015/16 Quarter 2 Corporate Performance and Finance report Mark Edmonds, Director of

More information

Business Continuity Management Framework 2014 2017

Business Continuity Management Framework 2014 2017 Business Continuity Management Framework 2014 2017 Blackpool Council Business Continuity Framework V3.0 Page 1 of 13 CONTENTS 1.0 Forward 03 2.0 Administration 04 3.0 Policy 05 4.0 Business Continuity

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy Reference Number: 243 Author & Title: Siân Dyson Resilience Manager Responsible Director: Chief Operating Officer Review Date: 29 May 2018 Ratified by: Francesca Thompson Chief

More information

Management. Level 4 NVQ Diploma in Management (QCF) 2014 Skills CFA Level 4 NVQ Diploma in Management (QCF) Page 1

Management. Level 4 NVQ Diploma in Management (QCF) 2014 Skills CFA Level 4 NVQ Diploma in Management (QCF) Page 1 Management Level 4 NVQ Diploma in Management (QCF) 2014 Skills CFA Level 4 NVQ Diploma in Management (QCF) Page 1 Level 4 NVQ Diploma in Management Qualification Title Credit Value Level 4 Structure Reference

More information

Appendix 1c. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF INCIDENT AND PROBLEM MANAGEMENT

Appendix 1c. DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF INCIDENT AND PROBLEM MANAGEMENT Appendix 1c DIRECTORATE OF AUDIT, RISK AND ASSURANCE Internal Audit Service to the GLA REVIEW OF INCIDENT AND PROBLEM MANAGEMENT DISTRIBUTION LIST Audit Team David Esling, Head of Audit Assurance, Risk

More information

INTERNAL AUDIT 2008/09 INFORMATION TECHNOLOGY (BUSINESS CONTINUITY)

INTERNAL AUDIT 2008/09 INFORMATION TECHNOLOGY (BUSINESS CONTINUITY) 2008/09 SUMMARY Location Subject Business Sponsor Staff engaged Coleg Gwent Information Technology (Business Continuity) Lynda Roberts Sue Harris Head of Internal Audit Gaynor Rains Manager David Bratt

More information

Information Commissioner's Office

Information Commissioner's Office Phil Keown Engagement Lead T: 020 7728 2394 E: philip.r.keown@uk.gt.com Will Simpson Associate Director T: 0161 953 6486 E: will.g.simpson@uk.gt.com Information Commissioner's Office Internal Audit 2015-16:

More information

Information Commissioner's Office

Information Commissioner's Office Information Commissioner's Office IT Procurement Review Ian Falconer Partner T: 0161 953 6480 E: ian.falconer@uk.gt.com Last updated 18 June 2012 Will Simpson Senior Manager T: 0161 953 6486 E: will.g.simpson@uk.gt.com

More information

CONFORMED COPY. Method Statement Helpdesk Services. Revision History. Revision Date Reviewer Status. 23 March 2007 Project Co Final Version

CONFORMED COPY. Method Statement Helpdesk Services. Revision History. Revision Date Reviewer Status. 23 March 2007 Project Co Final Version CONFORMED COPY Method Statement Revision History Revision Date Reviewer Status 23 March 2007 Project Co Final Version Table of Contents 1 Objectives... 3 2 Management Supervision and Organisation Structure...

More information

Audit Committee, 13 March 2013. Internal Audit Report Project Management. Executive summary and recommendations. Introduction

Audit Committee, 13 March 2013. Internal Audit Report Project Management. Executive summary and recommendations. Introduction Audit Committee, 13 March 2013 Internal Audit Report Project Management Executive summary and recommendations Introduction Mazars has undertaken a review of the arrangements for project management in accordance

More information

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00)

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) Subject and version number of document: Serial Number: Business Continuity Management Policy

More information

Policy Scrutiny Committee 24 September 2013 Partnership Business Continuity Arrangements

Policy Scrutiny Committee 24 September 2013 Partnership Business Continuity Arrangements Policy Scrutiny Committee 24 September 2013 Partnership Business Continuity Arrangements For information Member Champion(s): Cllr A Thacker, Community Safety & Access Choose an item. Director: D Evans,

More information

Business Continuity Management

Business Continuity Management Business Continuity Management Policy Statement & Strategy July 2009 Basildon District Council Business Continuity Management Policy Statement The Council is committed to ensuring robust and effective

More information

1.1 The Chair welcomed the Board members and officials to the meeting. 1.3 The Board accepted the Minute of 30 September as a true record.

1.1 The Chair welcomed the Board members and officials to the meeting. 1.3 The Board accepted the Minute of 30 September as a true record. Meeting of the Revenue Scotland Board MINUTE 09:00, 4 November 2015, Conference Room 3, VQ, Edinburgh Present: Dr Keith Nicholson [Chair] Lynn Bradley Jane Ryder OBE Ian Tait John Whiting OBE Attended:

More information

Agency Board Meeting 28 July 2015

Agency Board Meeting 28 July 2015 SEPA 22/15 Agency Board Meeting 28 July 2015 Report Number: SEPA 22/15 Audit Committee Annual Performance Report 2014-2015 Summary: Risks: Resource and Staffing Implications Equalities: Environmental and

More information

Business Continuity Policy & Plans

Business Continuity Policy & Plans Agenda Item 8.3a SNCCG Governing Body 11.03.2014 Business Continuity Policy & Plans Ref Number: Version: 1 Status: Pending Approval Author: A Brown Approval body Governing Body Date Approved Date Issued

More information

Freedom of Information Act Publication Scheme Protective Marking. Publication Scheme Y/N Yes Title. Version 3.0 Summary

Freedom of Information Act Publication Scheme Protective Marking. Publication Scheme Y/N Yes Title. Version 3.0 Summary Freedom of Information Act Publication Scheme Protective Marking Not Protectively Marked Publication Scheme Y/N Yes Title Business Continuity Policy and Equality Impact Assessment Version 3.0 Summary This

More information

South Norfolk Council Business Continuity Policy

South Norfolk Council Business Continuity Policy South Norfolk Council Business Continuity Policy 1 Title: Business Continuity Policy Date of Publication: TBC Version: 2 Published by: Emergency Planning Team Review date: April 2014 Document Owner: Document

More information

Project Management Toolkit Version: 1.0 Last Updated: 23rd November- Formally agreed by the Transformation Programme Sub- Committee

Project Management Toolkit Version: 1.0 Last Updated: 23rd November- Formally agreed by the Transformation Programme Sub- Committee Management Toolkit Version: 1.0 Last Updated: 23rd November- Formally agreed by the Transformation Programme Sub- Committee Page 1 2 Contents 1. Introduction... 3 1.1 Definition of a... 3 1.2 Why have

More information

Audit and Performance Committee Report

Audit and Performance Committee Report Audit and Performance Committee Report Date: 3 February 2016 Classification: Title: Wards Affected: Financial Summary: Report of: Author: General Release Maintaining High Ethical Standards at the City

More information

Appendix 6c. Final Internal Audit Report Disaster Recovery Planning. June 2007. Report 6c Page 1 of 15

Appendix 6c. Final Internal Audit Report Disaster Recovery Planning. June 2007. Report 6c Page 1 of 15 Appendix 6c Final Internal Audit Report Disaster Recovery Planning June 2007 Report 6c Page 1 of 15 Contents Page Executive Summary 3 Observations and Recommendations 8 Appendix 1 - Audit Framework 13

More information

BUSINESS CONTINUITY MANAGEMENT POLICY

BUSINESS CONTINUITY MANAGEMENT POLICY This document is uncontrolled once printed. Please check on the CCG s Intranet site for the most up to date version BUSINESS CONTINUITY MANAGEMENT POLICY DOCUMENT CONTROL Type of Document Document Title

More information

Chairman Simon Cole Vice Chairman Bill Sadler

Chairman Simon Cole Vice Chairman Bill Sadler Overview and Scrutiny Committee Minutes of a meeting of the Overview and Scrutiny Committee held on Thursday 10 March 2016 at 6.00 pm at the Council Chamber, District Offices, College Heath Road, Mildenhall

More information

Decisions 1. Permission to tender for a recruitment partner to supply 15 permanent social work practitioners with a contract value of 159,000.

Decisions 1. Permission to tender for a recruitment partner to supply 15 permanent social work practitioners with a contract value of 159,000. ACTION TAKEN UNDER DELEGATED POWERS BY OFFICER 28 th October 2015 Title Report of Wards Status Recruitment of Children s Social Work Practitioners Nicola Francis, Family Services Director All Public Enclosures

More information

NHS DORSET CLINICAL COMMISSIONING GROUP GOVERNING BODY INFORMATION GOVERNANCE TOOLKIT REPORT

NHS DORSET CLINICAL COMMISSIONING GROUP GOVERNING BODY INFORMATION GOVERNANCE TOOLKIT REPORT NHS DORSET CLINICAL COMMISSIONING GROUP GOVERNING BODY INFORMATION GOVERNANCE TOOLKIT REPORT 9.7 Date of the meeting 15/07/2015 Author Sponsoring Clinician Purpose of Report Recommendation J Green - Head

More information

Business Continuity Plans

Business Continuity Plans Version Number Issue 2 Business Continuity Policy Date Revision Complete Policy Owner Author Reason for Revision Proof Read April 2016 Business Improvement Manager Emma Earle, Business Services Officer

More information

Business Continuity Business Impact Analysis arrangements

Business Continuity Business Impact Analysis arrangements Aberdeen City Council Internal Audit Report 2012/2013 for Aberdeen City Council May 2013 Business Continuity Business Impact Analysis arrangements Final Report Contents Section Page 1. Executive Summary

More information

Business Continuity Management. Policy Statement and Strategy

Business Continuity Management. Policy Statement and Strategy Business Continuity Management Policy Statement and Strategy November 2011 Title Business Continuity Management Policy & Strategy Date of Publication: Cabinet Council Published by Borough Council of King

More information

University of Sunderland Business Assurance Information Security Policy

University of Sunderland Business Assurance Information Security Policy University of Sunderland Business Assurance Information Security Policy Document Classification: Public Policy Reference Central Register Policy Reference Faculty / Service IG 003 Policy Owner Assistant

More information

Tackling fraud in the charity sector Making your money count

Tackling fraud in the charity sector Making your money count Supported by Tackling fraud in the charity sector Making your money count Friday 30 October 2015 Royal College of Physicians, London A conference run by the charity sector for the charity sector About

More information

Our Commitment to Information Security

Our Commitment to Information Security Our Commitment to Information Security What is HIPPA? Health Insurance Portability and Accountability Act 1996 The HIPAA Privacy regulations require health care providers and organizations, as well as

More information

Minutes of the meeting of 30 June 2014

Minutes of the meeting of 30 June 2014 Minutes of the meeting of 30 June 2014 The meeting opened at 10.34. Present: Brian Baverstock, Chair Linda Watt, committee member Andrew Thin, committee member Also present: Boyd McAdam, National Convener/Interim

More information

Appendix 15 CORPORATE GOVERNANCE CODE AND CORPORATE GOVERNANCE REPORT

Appendix 15 CORPORATE GOVERNANCE CODE AND CORPORATE GOVERNANCE REPORT Appendix 15 CORPORATE GOVERNANCE CODE AND CORPORATE GOVERNANCE REPORT The Code This Code sets out the principles of good corporate governance, and two levels of recommendations: code provisions; and recommended

More information

BSO Board Director of Human Resources & Corporate Services Business Continuity Policy. 28 February 2012

BSO Board Director of Human Resources & Corporate Services Business Continuity Policy. 28 February 2012 To: From: Subject: Status: Date of Meeting: BSO Board Director of Human Resources & Corporate Services Business Continuity Policy For Approval 28 February 2012 The Board is asked to agree the attached

More information

Birmingham South Central Governing Body Cover Sheet

Birmingham South Central Governing Body Cover Sheet 3 rd July 2013 Enc No. 16 Birmingham South Central Governing Body Cover Sheet Date: 3 July 2013 Report title Presented by Prepared by Business Resilience Capability Scale David Morris David Morris For

More information

Essex Fire Authority. Fleet Management. Internal Audit Report (4.12/13) 28 February 2013 FINAL. Overall Opinion

Essex Fire Authority. Fleet Management. Internal Audit Report (4.12/13) 28 February 2013 FINAL. Overall Opinion Essex Fire Authority Fleet Management Internal Audit Report (4.12/13) 28 February 2013 FINAL Overall Opinion Essex Fire Authority Fleet Management 4.12/13 CONTENTS Section Page Executive Summary 1 Action

More information