ARC Paper 6 Cover Risk Registers
Audit and Risk Committee Paper 6 19 June 2026 Page 1 of 2
Cairngorms National Park Authority Ughdarras Pàirc Nàiseanta a’ Mhonaidh Ruaidh
For discussion
Title: Strategic risk registers Prepared by: Louise Allen, Head of Finance and Corporate Operations
Purpose
This paper supports a review by the Committee of the Park Authority’s strategic risk management position.
Recommendations
The Audit and Risk Committee is asked to: a) Consider the coverage and adequacy of the Park Authority’s strategic risk management position and advise on any gaps or amendments required to the current strategic risk register. b) Consider the coverage and adequacy of the Cairngorms 2030 programme risk management position and advise on any gaps or amendments required to the current programme risk register.
Executive Summary
The Cairngorms National Park Authority’s most recent strategic risk register, and strategic risk management position is set out in Annex 1. The register was last reviewed by the Executive on 11 May 2026. Amendments made are shown in purple text.
Comments and mitigation actions have been updated; changes since the last version provided to the Committee (13 March 2026) are shown in purple text.
There were 14 active risks on the Strategic Risk Register on 13 March 2026. Of these, 3 are now considered to be managed: risks 1, 3 and 11.
Risk 9 shows an escalating trend, with a significant action plan to be addressed in respect of IT disaster recovery procedures, and a need for business continuity planning. The advisory review carried out by wbg as part of the 2025 – 26 internal audit programme, has identified a significant body of work to be undertaken in prioritising the criticality of systems, considering data loss capacities and documenting systems and approaches to guide action in a situation of crisis.
All other risks are considered to be static or declining in trend.
The Cairngorms 2030 programme risk register, and risk management position is set out in Annex 2.
The total programme risk profile is green.
The amber rating for risk 7 (Active Communities Projects funded by Transport Scotland) reflects the uncertainty of funding for the next stage of the project. It is anticipated that if funding is awarded, it will be during the Summer of 2026. This means that there is likely to be a short timescale for delivery of the work. A reprioritisation of transport theme projects will be completed by August / September once Transport Scotland funding decisions have been communicated. Matters have been raised with Scottish Government.
Risk 2 — outstanding match funding commitments are being followed up prior to a review of the programme’s financial position in August / September 2026 when key funding decisions on transport and other project areas should be clearer.
The Committee is invited to consider the current coverage of the risk registers as set out in the Annexes. The Committee’s views on the current status of the risk registers are welcomed.
Louise Allen louiseallen@cairngorms.co.uk 03 June 2026