Skip to content
Please be aware the content below has been generated by an AI model from a source PDF.

190503AuCtteePaper4Annex1StrategicRiskRegister

Here’s a Mark­down con­ver­sion of the provided text. I’ve tried to main­tain the ori­gin­al table struc­ture and format­ting as best as pos­sible. Due to lim­it­a­tions in auto­mat­ic­ally ren­der­ing tables with com­plex format­ting in Mark­down, some minor adjust­ments might be neces­sary for per­fect dis­play in all Mark­down renderers.

CAIRNGORMS NATION­AL PARK AUTHORITY

STRA­TEGIC RISK REGISTER

Paper 4 Annex | 03/05/2019

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Cross-over risks
Resources: pub­lic sec­tor fin­ances con­strain capa­city to alloc­ate suf­fi­cient resources to deliv­er cor­por­ate plan.AIDCFocus resource on diver­si­fic­a­tion of income streams to altern­ate, non-pub­lic income gen­er­a­tion. Con­tinu­ing to sup­port deliv­ery bod­ies” such as Cairngorms Nature, LAG and OATS in secur­ing inward invest­ment. Cor­por­ate plan pri­or­it­ised around anti­cip­ated Scot­tish Gov­ern­ment budget alloc­a­tions, tak­ing on Board expect­a­tion of fund­ing con­straints. Ongo­ing liais­on with Scot­tish Gov­ern­ment high­light­ing achieve­ments of CNPA.Work with Scot­tish Gov­ern­ment has suc­cess­fully secured resources adequate to cov­er Cor­por­ate Plan expect­a­tions into the second year of the new Cor­por­ate Plan peri­od. We also con­tin­ue to take for­ward ideas for altern­ate income streams to sup­port future invest­ment, includ­ing col­lect­ive work with all UK Nation­al Parks and now sup­port­ing work on char­it­able activ­it­ies through Cairngorms Trust.

Page 2

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Gov­ernance: changes to Board mem­ber­ship cause mis­sion drift away from agreed priorities.A3GMFocus in agen­das to main­tain over­all stra­tegic dir­ec­tion and rel­ev­ance of papers; Board induc­tion and train­ing plans to be developed and delivered; On-Board train­ing com­mis­sioned for Apr 19; Board self-eval­u­ation to be under­taken again once changes complete.Key decisions on NPPP and Cor­por­ate Plan timed through exist­ing Board there­fore risk sig­ni­fic­antly mit­ig­ated. How­ever, we recog­nise that fur­ther changes in Sep 18 and poten­tially March 2019 may sig­ni­fic­antly impact Board com­pos­i­tion hence cur­rent escal­a­tion of risk.
Gov­ern­ment and Policy: wider nation­al polit­ic­al changes and policy dir­ec­tion force change away from cur­rent objectives.A2GMInvest time in main­tain­ing key gov­ern­ment con­tacts and rela­tion­ships gain­ing notice of poten­tial policy shifts. Work to get full gov­ern­ment back­ing to NPPP which gives longer term strategy commitment.Spend­ing Review set­tle­ment for 201820 favour­able for CNPA, there­fore increas­ing con­fid­ence around capa­city to deliv­er exist­ing Cor­por­ate Plan object­ives to 2022 and also on Gov­ern­ment com­mit­ment to CNPA Stra­tegic goals. NPPP and 1822 Cor­por­ate Plan now approved. Mon­it­or­ing ongo­ing poten­tial impacts of EU exit and for­ward budget and policy devel­op­ments, although no escal­a­tion at present.

Page 3

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Resourcing: UK vote to leave EU dis­rupts pro­ject deliv­ery and fin­an­cing plans and exposes Author­ity to longer term fin­an­cial liab­il­it­ies as a res­ult of loss of EU funds.A12DCRisk man­age­ment ana­lys­is of spe­cif­ic EU fun­ded activ­it­ies – par­tic­u­larly of Authority’s expos­ure as Account­able Body for LEAD­ER. Instruc­tions issued on timetable for fund­ing com­mit­ments to be covered by CNPA. Invest man­age­ment time in oppor­tun­it­ies to engage in new fund­ing pro­grammes designed to replace EU fund­ing programmes.LEAD­ER fund­ing con­tracts tailored to meet expec­ted EU exit timetable. Great­er clar­ity on Scot­tish Gov­ern­ment pos­i­tion now in place. Good access to oth­er pro­ject fund­ing for time being. Plans for replace­ment of cur­rent EU grant funds remain uncer­tain, and risk escal­a­tion now indic­ated to reflect this stra­tegic future fund­ing risk.
Repu­ta­tion: per­ceived actions and beha­viours of the Author­ity are not com­men­sur­ate with our val­ues and pro­duce an organ­isa­tion­al repu­ta­tion not in keep­ing with the vis­ion of an out­stand­ing nation­al park.A8GMFocus on media and social media mes­saging; ensure con­sist­ency of mes­sage; col­lab­or­ate with deliv­ery part­ners to help appro­pri­ately pro­file Author­ity; influ­en­cers opin­ion sur­veys. Input resources to key events, e.g. Cairngorms Nature Big Week­end, Euro­parc Con­fer­ence 2018 to help rein­force clar­ity and aware­ness of value led organ­isa­tion. Com­mu­nic­a­tions grid developed to focus activities.Grow­ing on-line pro­file for CNPA, with work ongo­ing to roll-out new web­site and con­tent. Pos­it­ive cov­er­age of key activ­it­ies such as Cairngorms Nature Big Week­end and design awards. Euro­parc Con­fer­ence devel­op­ment pro­gress­ing well. Responses to any media implemented.

Page 4

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Resourcing: com­pet­ing pro­ject demands (e.g. A9 dualling, devel­op­ment applic­a­tions) pre­vent adequate con­sid­er­a­tion of longer term pri­or­it­ies around deliv­ery of NPPPA9.1MFPro­ject man­age­ment of resourcing inputs to con­trol against com­pet­ing resource demands and ensure work under­taken does not stray bey­ond appro­pri­ate pri­or­ity and input levels for CNPA and main­tain sight on longer-term priorities.Key pro­jects have Pro­ject Boards in place. Man­age­ment Team have agreed an approach to focus on pro­ject deliv­ery and review pro­ject clos­ure and les­sons learned. Restruc­ture and recruit­ment have sta­bil­ised staff resource although some vacan­cies remain until future budget confirmed.
Resourcing: lead body role for mul­tiple large scale extern­ally fun­ded pro­jects is unable to be sup­por­ted through avail­able cash flow and ICT systems.A9.2DCReview staff­ing struc­tures and capa­city of ICT sys­tems, e.g. SAGE fin­ance and payroll, to sup­port required ser­vices. Enhanced focus on cash flow fore­cast­ing and management.Added April 2018 by Heads of Ser­vice. No sig­ni­fic­ant issues arising to date. Review of func­tion­al­ity and capa­city of key sys­tems ini­ti­ated and cash flow mon­itored closely. LEAD­ER cash­flow now unlocked with sig­ni­fic­ant repay­ment of grants due by SG over last quarter.

Page 5

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Staff­ing: addi­tion­al extern­ally fun­ded pro­jects strains staff work­load capa­city with increased risks of stress and reduced morale.A9.3DCOngo­ing review of Oper­a­tion­al Plan with expli­cit iden­ti­fic­a­tion of pro­jects which can / must slip to accom­mod­ate suc­cess­ful fund­ing bids.Added April 2018 First Oper­a­tion­al Plan review com­pleted May 2018. Pres­sure points and repri­or­it­isa­tion reviewed. Second Oper­a­tion­al Plan estab­lished March 2019
Resourcing: Role as Lead / Account­able body for major pro­grammes (e.g. LEAD­ER, Land­scape Part­ner­ship) has risk of sig­ni­fic­ant fin­an­cial claw­back should expendit­ure prove to be not eli­gible for fund­ing, while CNPA car­ries respons­ib­il­it­ies as employ­er for pro­gramme staff.A11DCEnsure fin­an­cial con­trols in place for pro­gramme man­age­ment include effect­ive eli­gib­il­ity checks. Test pro­cesses with fun­ders if required and also under­take early intern­al audit checks. Work­force man­age­ment plans must incor­por­ate pro­gramme staff con­sid­er­a­tions. Util­ise intern­al audit resourcesUncer­tain­ties in cent­ral gov­ern­ment guid­ance and audit approach to LEAD­ER has heightened risk sub­stan­tially in first half of 2018. Very pos­it­ive move­ment in res­ol­u­tion of mon­it­or­ing and eli­gib­il­ity issues over sum­mer 2018. Resid­ual risk around dis­pute res­ol­u­tion pro­cesses and uncer­tainty over eli­gib­il­ity judge­ments and inter­pret­a­tion made by SG audit.

Page 6

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Tech­nic­al: Increas­ing ICT depend­ency for effect­ive and effi­cient oper­a­tions is not adequately backed up by ICT sys­tems support.A17DCICT Advis­ory review com­mis­sioned from intern­al audit. Con­sultancy work also under­way through Think­Where for GIS and Avendris for cus­tom­er man­age­ment and elec­tron­ic records management.Added April 2018 Oper­a­tion­al Man­age­ment Group review. Cyber secur­ity and wider ICT func­tion­al­ity reviews cur­rently under­way, out­puts of which will help address risk like­li­hood and impacts.
Tech­nic­al: Cyber secur­ity is inad­equate to address risk of cyber-attack on systemsA18DCImple­ment­a­tion of Scot­tish Gov­ern­ment Cyber Secur­ity Action Plans and intern­al audit recom­mend­a­tions on IT secur­ity. Ongo­ing review of sys­tems and pro­ced­ures in tan­dem with LLTNPA.Added by MT / OMG April 18. Cyber secur­ity plus accred­it­a­tion received. Work under­way to com­plete resid­ual intern­al audit actions.
Resourcing: CNPA IT ser­vices are not suf­fi­ciently robust / secure / or well enough spe­cified to sup­port effect­ive and effi­cient ser­vice delivery.A13DCWe will devel­op and con­sult on the for­ward plans for ICT ser­vice devel­op­ment to ensure these meet ser­vice require­ments. Com­mis­sioned extern­al review of out IT and data man­age­ment pro­cesses to be imple­men­ted to give assurance.Risk added through staff con­sulta­tion with Staff Con­sultat­ive For­um Sep 2016. Inde­pend­ent review of IT archi­tec­ture and sys­tems under­taken April / May 2017, with res­ults repor­ted to Sep 17 Audit Com­mit­tee. Sev­er­al areas of improve­ment to be addressed. Heightened risk main­tained until action plan is signed off as fully implemented.

Page 7

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Repu­ta­tion: the Authority’s repu­ta­tion is impacted by a small num­ber of voci­fer­ous social media opin­ion leadersA14GMStaff and Board train­ing on use of social media to best sup­port organ­isa­tion­al aims in com­mu­nic­a­tions and repu­ta­tion man­age­ment. Ongo­ing deliv­ery of com­mu­nic­a­tions strategy. Social media pro­file also rep­res­ents an oppor­tun­ity to boost reputation.Added by Board Dec 16. Risk assess­ment escal­ated to reflect increase in like­li­hood giv­en recent events regard­ing let­ters to media poten­tially trans­fer­ring into social media, plus recent neg­at­ive cor­res­pond­ence about spe­cif­ic pro­ject deliv­ery. This escal­a­tion in risk does not imply increase in impacts mater­i­al­ising – this to be assessed.
Repu­ta­tion: high pro­file incid­ents or one off stor­ies, such as those asso­ci­ated with wild­life crime, moun­tain hares, afford­able hous­ing can have an undue influ­ence on the Authority’s wider reputation.A15GMMain­tain good bal­ance of tra­di­tion­al and social media releases. Close part­ner­ship work­ing to seek to bal­ance incid­ent report­ing and appro­pri­ately reflect Authority’s pos­i­tion and work.Added by MT Jan 18. Wild­life crime ini­ti­at­ive now launched. Oth­er pos­it­ive media around Snow Roads. Dimin­ish­ing in impact as wider bal­an­cing inform­a­tion becomes more wide­spread. Increase in like­li­hood giv­en recent events regard­ing let­ters to media and neg­at­ive cor­res­pond­ence about spe­cif­ic pro­ject delivery.

Page 8

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Resourcing: scale of asset respons­ib­il­it­ies such as for paths, out­door infra­struc­ture is not adequately recog­nised and does not secure adequate for­ward main­ten­ance funding.A16DCReview of account­ing pro­ced­ures and asset recog­ni­tion policy; review of forth­com­ing account­ing tech­nic­al guid­ance. Ensure full con­sid­er­a­tion is giv­en in budget reviews. Altern­ate fund­ing sources such as vis­it­or giv­ing to be explored more actively.Added by MT / OMG April 18. Infra­struc­ture main­ten­ance issues exacer­bated by end of exist­ing agree­ment over Spey­side Way Long Dis­tance Route and end of main­ten­ance peri­od fol­low­ing Nation­al Lot­tery Her­it­age funding.
Resources / Staff­ing: fail­ure to effect­ively man­age staff­ing num­bers with a view to the long term busi­ness need will reduce the capa­city for the Author­ity to deploy adequate fin­an­cial invest­ment toward pri­or­ity pro­jects in the Nation­al Park.A19DCWork­force Man­age­ment Strategy developed and in place. Ana­lys­is of staff­ing con­tract pos­i­tion over three year peri­od com­pleted with actions established.Added by Staff­ing and Recruit­ment and Audit and Risk Com­mit­tees Feb / Mar 2019.
Resources: change in fin­an­cing IT ser­vices and the switch from cap­it­al to rev­en­ue pro­vi­sion places an unman­age­able pres­sure on the Authority’s budget capacity.A20DCMon­it­or pat­tern of IT invest­ment costs as regards the cap­it­al and rev­en­ue split of resourcing require­ments; build impacts into ongo­ing budget delib­er­a­tions with Scot­tish Government.Added by Audit Com­mit­tee 8 March 2019 fol­low­ing deep dive” IT risk review.

Page 9

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Repu­ta­tion: the Author­ity is not per­ceived to be appro­pri­ately address­ing the poten­tial for con­flict between 4 stat­utory aims.A21GMEnsure Board policy papers and Plan­ning Com­mit­tee papers are expli­cit in recog­nising stra­tegic policy con­flicts between 4 stat­utory aims and in address­ing the eval­u­ation of the conflict.Added by Audit Com­mit­tee 8 March 2019 fol­low­ing intern­al audit report on stra­tegic plan­ning processes.
Spe­cif­ic Ser­vice Risks
Part­ner­ships: Con­ser­va­tion part­ner­ships, cru­cial to deliv­ery of pri­or­it­ies across land owned by oth­ers, are not formed or suf­fi­ciently developed to deliv­er con­ser­va­tion priorities.C1PMPri­or­it­ise invest­ment of time in estab­lish­ing and main­tain­ing work­ing rela­tion­ships; devel­op clear focus on require­ments of part­ner­ships, their pur­pose, object­ives and resources.Moor­land Part­ner­ship and Cairngorms Con­nect pro­gress­ing well; grow­ing rela­tion­ships with indi­vidu­al estates re wood­land expan­sion pro­pos­als; recent input to engage more widely with keep­ers and rap­tor study groups.
Staff and com­mu­nic­a­tions: part­ners’ staff are not engaged with or do not buy into the Authority’s con­ser­va­tion NPPP priorities.C2PMClear and con­sist­ent mes­saging of CNPA pri­or­ity and inten­ded out­comes / impacts; clear, prompt and focused responses to part­ner concerns.Increased levels of joint work­ing with FCS and SNH on pri­or­ity issues of wood­land expan­sion and des­ig­nated sites; Part­ner­ship Plan com­ple­tion reaf­firmed shared pri­or­it­ies among part­ner agen­cies. Audit and Risk Cttee agreed to retain this risk May 2018.

Page 10

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Repu­ta­tion­al: the Authority’s lead­er­ship repu­ta­tion will be dam­aged if East Cairngorms Moor­land Part­ner­ship fails as a con­sequence of fail­ure or per­ceived fail­ure to deliv­er objectives.C3PMEstab­lish and com­mu­nic­ate clear part­ner­ship object­ives. Main­tain clar­ity with­in part­ner­ship on actions and their asso­ci­ated deliv­ery responsibilities.Added through Man­age­ment review April 2018. Work ongo­ing in this area, with no evid­ence as yet of changes to like­li­hood or impact.
Part­ner­ships: trans­fer of Crown Estates may res­ult in sig­ni­fic­ant dis­rup­tion to estab­lished pat­terns of part­ner­ship work­ing with key land-own­ers and reduced effect­ive­ness in deliv­ery with this key stake­hold­er groupC4PMMon­it­or pro­gress of Crown Estates trans­fer and poten­tial impacts on CNP Part­ner­ship oper­a­tions, tak­ing pre­vent­at­ive actions as required.Added at Board meet­ing 11 Decem­ber 2015. Moved to ser­vice spe­cif­ic risk from gen­er­al risk through man­age­ment review April 18
Part­ner­ships: com­pet­ing pri­or­it­ies act to pre­vent or delay deliv­ery of Cairngorm and Glen­more Strategy.V1.1MFRe-ini­ti­ate momentum on pro­ject. Reg­u­lar part­ner con­tact and early joint plan­ning for deliv­ery pri­or­it­ies, seek to expose poten­tial con­flicts at early stages and col­lab­or­ate to identi­fy remediation.Cairngorm and Glen­more Strategy agreed among part­ners but chan­ging part­ner capa­city risks less joined-up and less ambi­tious deliv­ery. Lack of move­ment on imple­ment­a­tion and prob­lems with Cairngorm Funicu­lar are res­ult­ing in heightened risk.

Page 11

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Resourcing: deliv­ery of stra­tegic path net­works / tour­ism infra­struc­ture is not achieved or delayed as insuf­fi­cient resource is alloc­ated to pro­ject devel­op­ment or deliv­ery stages.V2MFFocus giv­en to ensur­ing pro­ject devel­op­ment and spe­cific­a­tion is planned and resourced; and early liais­on with part­ners re stra­tegic fund­ing oppor­tun­it­ies and bid­ding into these.Remains sig­ni­fic­ant unfun­ded resource require­ments to address leg­acy of storm dam­age and extend Deeside Way. How­ever, funds now secured for a num­ber of stra­tegic path invest­ments over this and next year.
Resourcing: Ongo­ing main­ten­ance is not adequately resourced to main­tain infra­struc­ture networks.V3MFSeek tri­als of dona­tions and vol­un­tary giv­ing oppor­tun­it­ies. Review basis of part­ner­ship col­lab­or­a­tion with Access Trust to con­sider focus on maintenance.Added by Audit Com­mit­tee Feb 16. Now duplic­ated by gen­er­al risk A16? Remove?
Resources and Part­ner­ships: HLF fun­ded Tomin­toul and Glen­liv­et Land­scape Part­ner­ship and Caper­cail­lie Frame­work fail to fully deliv­er to the expect­a­tions of fun­ders and communities.L1PMEnsure suf­fi­cient staff resources are ded­ic­ated to sup­port­ing pro­ject boards. Ensure reg­u­lar pro­ject mon­it­or­ing and evaluation.Broad range and scale of TGLP pro­jects com­bined with wide diversity of part­ner input is chal­len­ging to man­age and TGLP staff team at full stretch. How­ever mon­it­or­ing of work­loads and pro­ject pro­gress is in place and respon­ded to. These risks will be rep­lic­ated with­in new Caper­cail­lie pro­ject and need equi­val­ent management.

Page 12

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Gov­ernance: Board and stake­hold­ers do not adequately under­stand and appre­ci­ate land­scape scale land man­age­ment issuesL2PMAt Board level, con­tin­ue to use Board self-assess­ment and skills mat­rix to guide mem­ber recruit­ment, train­ing and inform­al brief­ing ses­sions. Use part­ner­ship mech­an­isms to ensure stake­hold­er under­stand­ing and appreciation.Added by Audit and Risk Com­mit­tee May 2018 Work ongo­ing and no change in risk assess­ment at this stage.
Resources and Part­ner­ships: the broad part­ner­ship, policy com­bin­a­tion and fin­an­cial resources required to address chal­lenges of hous­ing deliv­ery are not sufficient.R1MFStra­tegic focus on estab­lish­ment of the part­ner­ship approach, policy changes and resources required in devel­op­ment of next NPPP.Nation­al Park Part­ner­ship Plan con­sulta­tion suc­cess­ful and good pro­gress made with devel­op­ment of next Loc­al Devel­op­ment Plan and stra­tegic part­ner­ships. Some increased risk of high­er expect­a­tions but over­all no change to trend.

Page 13

RiskRefRespMit­ig­a­tionCom­mentsTrend Aug 18Trend Nov 18Trend Mar 19
Resourcing and part­ner­ships: cur­rent LEAD­ER pro­gramme will end with­in Cor­por­ate Plan peri­od with uncer­tainty over resources to allow con­tinu­ation of Com­munity Led Loc­al Devel­op­ment (CLLD) work, pre­vent­ing the Author­ity and com­munity organ­isa­tions from effect­ive plan­ning and invest­ment in pri­or­ity CLLD actions.R2DCInflu­ence through exist­ing LEAD­ER net­works to emphas­ise import­ance of CLLD fund­ing in sup­port­ing deliv­ery of pri­or­ity invest­ments with­in loc­al com­munit­ies. Com­mu­nic­ate key suc­cesses of the LEAD­ER process.Added dur­ing man­age­ment review April 2018 Pro­mo­tion of effect­ive­ness of CLLD approach; input to Scot­tish Gov­ern­ment con­sulta­tion over sum­mer 2018. Vari­ous strands of policy work ongo­ing and being influ­enced. How­ever, no change in risk assess­ment at this stage.

Notes:

  • Aim­ing to keep stra­tegic risk register to around 12 to 15 high level stra­tegic risks
  • Cross-cut­ting risks impact poten­tially through­out all priorities
  • Stra­tegic Risks around cor­por­ate pri­or­it­ies focus on risk impacts through­out each of the three themes – hence require a coordin­ated over­view at Dir­ect­or / MT level. Not expect­ing a stra­tegic risk against each spe­cif­ic Cor­por­ate Plan priority.
  • More spe­cif­ic risks are expec­ted to be cap­tured in more oper­a­tion­al risk registers – e.g. risk man­age­ment around deliv­ery of office extension.
  • Full risk register the col­lect­ive respons­ib­il­ity of full MT to man­age, how­ever each risk alloc­ated to one spe­cif­ic mem­ber of the team to take lead responsibility.
  • Aim through mit­ig­a­tion to reduce Like­li­hood (LL) mul­ti­plied by Impact (IM) risk score to below 10 as accept­able risk value.
  • Ref­er­ence key: A” items are risks impact­ing on all aspects of the Cor­por­ate Plan; C” items are Con­ser­va­tion only risks; V” risks relate spe­cific­ally to Vis­it­or Exper­i­ence; L” risk relate to Land Man­age­ment; R” risks relate to Rur­al Devel­op­ment risks.

Ver­sion Control

2 Board Cycle June 2019 2.0 DC draft for MT/OMG review April 19

Remem­ber that the arrow sym­bols (→, ↑) rep­res­ent­ing trends might not render con­sist­ently across all Mark­down view­ers. You may need to replace them with tex­tu­al descrip­tions like Stable,” Increas­ing,” or Decreas­ing” for bet­ter compatibility.

×

We want your feedback

Thank you for visiting our new website. We'd appreciate any feedback using our quick feedback form. Your thoughts make a big difference.

Thank you!