Audit and Risk Committee Paper 2 Annex 1 - Park Authority strategic risk register

Old	Risk	Risk cat­egory	Risk descrip­tion	Mitigation/​controls in place	Cur­rent Cur­rent Risk impact like­li­hood score	Trend	Com­ment	Planned actions	Due date	Risk Tar­get Tar­get appet­ite impact like­li­hood	Tar­get risk Risk own­er	Date last updated
ref­er­ence	ref­er­en Theme ce
1	A1 All	Resources — financial	Pub­lic sec­tor fin­ances con­strain capa­city to alloc­ate suf­fi­cient resources to deliv­er cor­por­ate plan.	Pre­vent­at­ive: Cor­por­ate plan pri­or­it­ised around anti­cip­ated Scot­tish Gov­ern­ment budget alloc­a­tions, tak­ing on Board expect­a­tion of fund­ing con­straints. Remedi­al: Focus resource on diver­si­fic­a­tion of income streams to altern­at­ive, non- pub­lic income gen­er­a­tion. Remedi­al: Con­tinu­ing to sup­port ​“deliv­ery bod­ies” such as Cairngorms Nature, Cairngorms Trust in secur­ing inward investment.	5	3	15	Decreas­ing	Alloc­a­tions for 2025⁄26 fin­an­cial year provide a good set­tle­ment suf­fi­cient to cov­er planned deliv­ery against cor­por­ate plan object­ives. Mit­ig­a­tion actions have sup­por­ted pos­it­ive risk man­age­ment. Risk decreas­ing while recog­nisi­ing alloc­a­tions remain sub­ject to approv­al of Scot­tish budget, with resid­ual risk around in year adjustments.Award of £1.19 mil­lion from NRF con­firms suc­cess of mit­ig­a­tion approaches.	Pre­vent­at­ive: Ongo­ing liais­on with Scot­tish Gov­ern­ment through our spon­sor­ship team and the Peat­land Action Team, high­light­ing achieve­ments of CNPA. Remedi­al: scen­ario plan­ning on for­ward budget mod­el­ling to pre­pare options for future resource alloc­a­tions with­in final alloc­a­tions, based on fund­ing para­met­ers sug­ges­ted by spon­sor­ship team.	Ongo­ing	Open	4	3	12	Dav­id Cameron	20/01/2025
2	All	Resources — financial	Risk of C2030 match fund­ing not being secured — cur­rent match fund­ing in bid not fully com­mit­ted and/​or for one year only in many areas.	Pre­vent­at­ive: Ongo­ing liais­on with Scot­tish Gov­ern­ment through our spon­sor­ship team and the Peat­land Action Team, high­light­ing achieve­ments of CNPA and import­ance of Peat­land Res­tor­a­tion fund­ing to inward invest­ment by NLHF. Remedi­al: Dis­cus­sions with Trans­port Scot­land on fund­ing for act­ive travel design work.	5	2	10		Fund­ing for 2024 – 25 Peat­land Res­tor­a­tion has been secured at £3.5m. This provides a suit­able level of match fund­ing for the C2030 pro­gramme, in line with the programme’s 5‑year budget. Peat­land res­tor­a­tion deliv­ery pro­file is healthy, with expect­a­tion that suf­fi­cient will be spent with­in the year to meet required con­tri­bu­tion to C2030 deliv­ery. Act­ive trans­port fund­ing now in place with­in wider Scot­tish Government/​Transport Scot­land fin­an­cial plans. Mit­ig­a­tion actions sup­port­ing effect­ive risk man­age­ment, with declin­ing risk while- recog­nising pro­pos­als remain sub­ject to approv­al of Scot­tish budget. Fund­ing for Act­ive Com­munit­ies pro­jects now in place (Trans­port Scot­land). Pro­cure­ment of con­tract­or for RIBA stages 3 and 4 design work now com­pleted. Trans­port Scot­land fund­ing awar­ded must be used by 31 March 2026, the short time-frame put­ting pres­sure on deliv­ery. Con­tinu­ation of the pro­jects past design stage 3 will require an addi­tion­al award of fund­ing for 2026⁄27.	Pre­vent­at­ive: focus over 2025 on match fund­ing pos­i­tion and con­sequent impacts to ensure C2030 pro­gramme plans and fin­an­cing of them fully aligned by end of year. Pre­vent­at­ive: high pro­file and ongo­ing focus for SMT in enga­ging in influ­en­cing to secure the match fund­ing needed from part­ners; pro­ject man­agers aware of rel­ev­ant pro­ject match fund­ing pos­i­tion and tasked with seek­ing addi­tion­al match fund­ing where appro­pri­ate. Pre­vant­at­ive: con­sid­er­a­tion of new, wider match fund­ing opportunities.	Ongo­ing	Open	4	2	8	Dav­id Cameron	02/09/2025
3	All	Resources — staffing	There are per­ceived gaps in our skill set with respect to: pro­cure­ment pro­cesses, recruit­ment of tech­nic­al staff, abil­ity to under­take neces­sary due dili­gence on out­put from con­sult­ants and con­tract­ors. — Risks that pro­cure­ment and wider skill set capa­cit­ies are insuf­fi­cient to meet the evolving needs of the organ­isa­tion. — Lack of expert­ise and exper­i­ence in man­aging con­struc­tion pro­jects may com­prom­ise the effect­ive­ness and effi­ciency of planned deliv­ery. — Fin­an­cial risks asso­ci­ated with the let­ting of con­tracts where part­ner­ship fund­ing is likely to be depend­ent on the achieve­ment of sat­is­fact­ory standards.	Pre­vent­at­ive: Recruit­ment of Pro­cure­ment Officer Pre­vent­at­ive: Sup­port secured from Scot­land Excel (and from Cent­ral Gov­ern­ment Pro­cure­ment Shared Ser­vices (CGPSS) if required). Pre­vent­at­ive: Con­sider deliv­ery through part­ners with con­struc­tion pro­ject deliv­ery exper­i­ence where appro­pri­ate to deliv­ery object­ives. Remedi­al: use of leg­al sup­port or oth­er out­sourced sup­port where required	4	2	8	Stat­ic	Recruit­ment to new Pro­cure­ment Officer post achieved. Pro­gramme of improve­ment in pro­cure­ment pro­cesses, pro­ced­ures and con­trols under­way, includ­ing estab­lish­ment of new Pro­cure­ment Strategy. Con­struc­tion pro­jects of the size anti­cip­ated with­in the C2030 pro­gramme are new to the organ­isa­tion. We need to improve our know­ledge of Con­struc­tion Design Man­age­ment Reg­u­la­tions (CDM) and con­tracts (NEC4). We lack exper­i­ence in pro­du­cing briefs and review­ing tenders of this size and type. Improve­ments in our skill set will also bene­fit: peat­land res­tor­a­tion, river res­tor­a­tion, con­struc­tion of paths, act­ive travel pro­jects. Pre­vent­at­ive: addi­tion­al sup­port from LL&TNPA reques­ted Pre­vent­at­ive: Options for train­ing of wider staff group under invest­ig­a­tion — sup­por­ted by Scot­land Excel. Rem­di­al: pro­cure­ment action plan developed from intern­al audit recom­mend­a­tions; reviewed monthly by Chair / Vice Chair of ARC. Tar­get date for com­ple­tion of key improve­ments 31.03.26 (exten­ded from 31/12/24). SG budget con­trols delayed train­ing until the first half of 2025⁄26.	31/03/2026	Cau­tious	4	1	4	Dav­id Cameron	12/05/2025
4	A24	Nature & con­ser­vat Stra­tegic delivery	The Authority’s range of powers com­bined with stra­tegic part­ner­ships is insuf­fi­cient to deliv­er out­comes on wild­life crime.	Pre­vent­at­ive: licen­cing arrange­ments con­trib­ute to more effect­ive con­trol frame­work. Tracker/​satel­lite mon­it­or­ing deployed for some rap­tors. Remedi­al: NPPP devel­op­ment pro­cesses used to explore part­ner­ship atti­tudes, engage­ment and powers.	4	4	16	Stat­ic	Action on wild­life crime depends on the devel­op­ment, deliv­ery and design of stra­tegic part­ner­ships. Fin­an­cial con­straints with­in the pub­lic and third sec­tors is likely to reduce the level of resource avail­able to tackle this issue.	Remedi­al: Development/​strength­en­ing of stra­tegic partnerships.	Ongo­ing	Open	4	3	12	Andy Ford	20/01/2025
6	All	Audit and Risk Committee	Sup­port­ing speed of organ­isa­tion­al change pre­vents required devel­op­ment and embed­ding of effect­ive sup­port sys­tems. The speed / scale of oper­a­tion­al demand for sup­port Sys­tems devel­op­ment from cor­por­ate sys­tems is such that we are always fire. use of M365 applic­a­tions Remedi­al: fight­ing and giv­ing the best advice and sup­port we can. How­ever, that ongo­ing fire-fight­ing and imme­di­ate advice pre­vents us hav­ing suf­fi­cient time to design, devel­op and imple­ment new sys­tems to bet­ter suit the new organ­isa­tion. Imple­ment new fin­ance sys­tem to sup­port wider digit­isa­tion of sys­tems and effect­ive fin­an­cial reporting.	Remedi­al: recruit­ment of addi­tion­al staff to cor­por­ate func­tion dur­ing 22⁄23 and 23⁄24. Remedi­al: pro­ject man­age­ment train­ing provided Remedi­al: devel­op­ment of improved systems/​ways of work­ing through bet­ter Pre­vent­at­ive: design and imple­ment pro­ject ini­ti­ation con­trols sup­port­ing more man­aged timelines and fuller, earli­er con­sid­er­a­tion of pro­ject plans.	4	3	12	Stat­ic	Assess­ment of the impact of new/​addi­tion­al activ­it­ies on cor­por­ate sys­tems and resources should be part of the ini­tial con­sid­er­a­tions of pro­ject devel­op­ment activ­it­ies. The pro­ject ini­ti­ation con­trol sys­tem is now in place with improve­ments already being seen. Staff recruit­met has been sec­cess­fully com­pleted. Key work on improv­ing organ­isa­tion­al intern­al con­trol sys­tems and digit­isa­tion of sys­tems is pro­gress­ing well. New fin­ance sys­tem imple­ment­a­tion is underway.	Remedi­al: apply resource to devel­op­ment of improved systems/​ways of work­ing — new fin­ance sys­tem due to be installed by 31/03/25; new pro­ject ini­ti­ation con­trol under devel­op­ment Remedi­al: provide train­ing — pro­cure­ment and in wider assess­ment of pro­ject impacts at ini­ti­ation stage. Remedi­al: final­isa­tion and roll-out of pro­ject ini­ti­ation guid­ance is now com­plete, includ­ing assess­ment of any new leg­al implic­a­tions arising from pro­ject deliv­ery intentions.	31/08/2025	Open	3	2	6	Dav­id Cameron	20/01/2025
9	A13/A1 All	Tech­nic­al	CNPA IT ser­vices are not suf­fi­ciently robust/​secure/​or well enough spe­cified to sup­port effect­ive and effi­cient ser­vice deliv­ery. Increas­ing demand for know­ledge around Microsoft 365 and cyber secur­ity is out­strip­ping the team’s know­ledge/skill-set. Increas­ing ICT depend­ency for effect­ive and effi­cient oper­a­tions is not adequately backed up by ICT sys­tems sup­port. Use of Al increases risk of cyber secur­ity threats such as spear-phishing.	Pre­vent­at­ive: Daily review of Scot­tish Cyber Coordin­a­tion Centre threat sum­mar­ies, with fol­low up action taken (eg patch­ing) as appro­pri­ate. Preventative/​remedial: Col­lab­or­a­tion with LL&TNPA provides sup­port. Pre­vent­at­ive: Trans­ition to Share­point com­plete; R‑drive now a read-only repos­it­ory, redu­cing risk of threats from out­side the organ­isa­tion. Pre­vent­at­ive: imple­ment Cyber Secur­ity Plus controls	5	2	10	Stat­ic	Intern­al audit report on IT Strategy sets out key actions in this area of risk man­age­ment around IT Strategy devel­op­ment, pro­ject man­age­ment and cost­ing of IT action plans to be imple­men­ted. Move­ment into Microsoft 365 deploy­ment and cloud based sys­tems con­tin­ues. Cyber Secur­ity Plus accred­it­a­tion now in place and sys­tems oper­at­ing to those stand­ards. Con­sid­er­a­tion giv­en to effect­ive­ness of shared ser­vices with LL&TNPA.	Devel­op­ment of the IT oper­a­tion­al risk register has iden­ti­fied poten­tial for struc­tur­al improve­ment. These con­sid­er­a­tions to be developed fur­ther (poten­tial for extern­al con­sultancy to devel­op our IT strategy organ­isa­tion­al devel­op­ment, tech­nic­al improve­ments and upskilling). Cyber essen­tials accred­it­a­tion achieved: audit towards essen­tials plus accred­it­a­tion under­way (11÷09÷24). A review of IT staff role descrip­tions now com­pleted; renewed focus on IT action plans will flow from that. Work on the inform­a­tion man­age­ment plan will pro­duce great­er resi­li­ence of data and access to key inform­a­tion when complete.	Ongo­ing	Cau­tious	4	2	8	Dav­id Cameron	20/01/2025
10	A22 All	Tech­nic­al	Busi­ness Con­tinu­ity Plans (BCP) are inad­equate to deal with sig­ni­fic­ant impacts to nor­mal work­ing arrange­ments and res­ult in ser­vice failure.	Pre­vent­at­ive: Devel­op­ment of hybrid work­ing meth­ods and cloud com­put­ing approaches have improved the organisation’s resi­li­ence. Remedi­al: devel­op updated busi­ness con­tinu­ity plan and embed its provisions	4	5	20	Stat­ic	Work on BCP assisted in roll out of ini­tial and ongo­ing responses to Coronavir­us pan­dem­ic. Now that hybrid work­ing arrange­ments are embed­ded, there is a need to recon­sider BCP.	Pre­vent­at­ive: pro­posed con­sultancy to devel­op new BCP	31/03/2026	Cau­tious	5	1	5	Dav­id Cameron	20/01/2025
11	All	Repu­ta­tion	Repu­ta­tion­al dam­age may res­ult from: ‑Unreal­ist­ic expect­a­tions of what the Park Author­ity and its part­ners can achieve in the face of the sig­ni­fic­ant risks presen­ted by cli­mate change, spe­cies extinc­tion, flood man­age­ment and fire; and/​or Dis­agree­ment between the Park Author­ity and stake­hold­er groups with­in the Park. Dis­in­form­a­tion cir­cu­lated about the Park Authority’s actions and its partners.	Pre­vent­at­ive: Exist­ing stra­tegic part­ner­ships and stake­hold­er rela­tion­ships help to cre­ate a wider under­stand­ing of the factors that are with­in, and those that are out­side the con­trol of the Park Author­ity Pre­vent­at­ive: com­mu­nic­a­tions strategy devel­op­ment and imple­ment­a­tion to ensure Park Authority’s mes­sages and inform­a­tion are widely received and under­stood by appro­pri­ate audiences	4	3	12	Decreas­ing	Scor­ing reviewed fol­low­ing over­view of NPPP deliv­ery to be sub­mit­ted to board in Septem­ber, with like­li­hood decreased from 4 to 3. Stake­hold­er rela­tion­ship data­base now designed and under development	Pre­vent­at­ive: Man­age­ment of expect­a­tions through: — Tar­geted com­mu­nic­a­tions — Fur­ther devel­op­ment of stake­hold­er relationships.	Ongo­ing	Open	3	3	9	Grant Moir	12/05/2025
13	All	Resources — financial	The Park Author­ity does not adequately respond or adpat to changes in fund­ing envir­on­ment at Scot­tish Gov­ern­ment policy levels or in evol­u­tion of private fin­ance investment.	Pre­vent­at­ive: alloc­ate seni­or time to engage­ment with Scot­tish Gov­ern­ment in policy dis­cus­sion and devel­op­ment, identi­fy­ing and respond­ing to risk implic­a­tions. Pre­vent­at­ive: pro­act­ively identi­fy oppor­tun­it­ies for private invest­ment and struc­tures to sup­port their invest­ment to com­ple­ment and sup­port NPPP and cor­por­ate objectives.	2	2	4	Stat­ic	Work cur­rently under­way on our work­force man­age­ment strategy to 2030; high level work­force and payroll fore­cast­ing to 2031; and on more struc­tured approaches to private fin­ance invest­ment. Giv­en rel­at­ively early phases of these pro­cesses, risk scores remain unchanged for time being.	-Development/​strength­en­ing of stra­tegic part­ner­ships. ‑Ongo­ing assess­ment of oper­a­tion­al risk man­age­ment and mit­ig­a­tion in our com­mu­nic­a­tions. — Devel­op­ment of stake­hold­er rela­tion­ship database	For devel­op­ment TBC	Open	2	2	4	Dav­id Cameron	20/01/2025
14	All	Resources — staffing	The Park Authority’s work­force is not adequately flex­ible to respond to chan­ging stra­tegic pri­or­it­ies or to chan­ging oper­a­tion­al scale NPPP deliv­ery respons­ib­il­it­ies are not suf­fi­ciently clear Sys­tems devel­op­ment across the part­ner­ship and Park Author­ity is expec­ted to address more than it is cap­able to deliver.	Pre­vent­at­ive: work­force man­age­ment strategy updated and reg­u­larly reviewed to take a 5+ year for­ward view. Pre­vent­at­ive: con­tin­ued invest­ment in train­ing and devel­op­ment for staff sup­port­ing per­form­ance in cur­rent roles and succession/​development plans. Pre­vent­at­ive: estab­lish an appro­pri­ate mix of per­man­ent and fixed term staff to allow for flex­ib­il­ity in future struc­tures. Remedi­al: retain scru­tiny of all vacan­cies and iden­ti­fic­a­tion of oppor­tun­it­ies to adapt vacan­cies toward future needs. Pre­vent­at­ive: rein­force spe­cif­ic part­ner deliv­ery respons­ib­il­it­ies through per­form­ance man­age­ment sys­tems and reporting.	3	3	9	Stat­ic	A final draft of the work­force man­age­ment strategy will be con­sidered by the board in Octo­ber. Once a final draft is in place, this will be sup­por­ted by devel­op­ment of wider organ­isa­tion­al policy and pro­ced­ure which will imple­ment inten­ded mit­ig­at­ing con­trols. Scru­tiny of all vacan­cies and an assump­tion to fixed terms con­tracts in recruit­ment is already in place.	Work­force man­age­ment strategy timetabled for devel­op­ment over first half of 25⁄26. Inter­im action of stand­ard­ised approach to recruit­ment with max­im­um 3 year fixed term con­tract in place.	TBC	Cau­tious	3	1	3	Dav­id Cameron	12/05/2025
15	All	Tech­nic­al	Evol­u­tion of the Park Authority’s range of activ­it­ies and pro­jects res­ults in uniden­ti­fied and unmit­ig­ated expos­ure to leg­al implic­a­tions and asso­ci­ated liabilities	Pre­vent­at­ive: under­take risk ana­lys­is over­view of 2025⁄26 oper­a­tion­al plan to identi­fy any deliv­ery areas with poten­tial expos­ure; devel­op and deliv­er mit­ig­a­tion action plan; Pre­vent­at­ive: imple­ment­a­tion of pro­ject ini­ti­ation con­trols to enhance con­sid­er­a­tion of poten­tial future leg­al implic­a­tions and	3	4	12	Stat­ic	Pre­vent­at­ive: rein­force NPPP deliv­ery link­ages through grant con­tract terms.	2024⁄25 NPPP per­form­ance review is near­ing com­ple­tion and will be presen­ted to board in Septem­ber. This will allow fur­ther con­sid­er­a­tion of con­trol mech­an­isms required in this area, as will con­sid­er­a­tion of the devel­op­ment of the next NPPP for 2027 to 2032. Work under­way to devel­op per­form­ance man­age­ment report­ing for 24⁄25 oper­a­tion­al and fin­an­cial year. Pro­ject init­a­tion con­trols are now in place and prov­ing effect­ive in high­light­ing poten­tial future leg­al implic­a­tions for con­sid­er­a­tion pri­or to com­mence­ment. Risk like­li­hood decreas­ing. Once the oper­a­tion­al plan risk review is com­plete and also con­sidered for 2026⁄27 devel­op­ment of plans, it is expec­ted the impact score will also decrease. Pro­ject ini­ti­ation guid­ance and con­trol sys­tems with­in that will help identi­fy and man­age risk.	TBC	Open	3	3	9	Gav­in Miles	12/05/2025
17	Place	Stra­tegic delivery	Uncer­tain­ties on fin­ance, pro­cure­ment, con­tract­or cap­city and part­ner­ship devel­op­ment com­bine to pre­vent achieve­ment of key Cairngorms 2030 com­munity trans­port infra­struc­ture enhancements.	Pre­vent­at­ive: pres­sure on extern­al fun­ders to make decisions with­in neces­sary timetable Pre­vent­at­ive: revised pro­cure­ment approach to sim­pli­fy require­ments and min­im­ise per­ceived con­tract­or risk Pre­vent­at­ive: estab­lish over-arch­ing agree­ments with partners	4	4	16	Stat­ic	Fund­ing for Act­ive Com­munit­ies pro­jects now in place (Trans­port Scot­land). Pro­cure­ment of con­tract­or for RIBA stages 3 and 4 design work now com­pleted. Trans­port Scot­land fund­ing awar­ded must be used by 31 March 2026, the short time-frame put­ting pres­sure on deliv­ery. Con­tinu­ation of the pro­jects past design stage 3 will require an addi­tion­al award of fund­ing for 2026⁄27. Risk pro­file main­tained pending assess­ment of pro­ject deliv­ery timeline and capa­city for work to be com­plete with mid August 2025 con­tract award.	Leg­al advice on pro­cure­ment approach received and being imple­men­ted in adjust­ments to new pro­cure­ment approach to-mar­ket Ongo­ing con­tact with extern­al fun­ders to secure clar­ity on fin­an­cial pos­i­tion Ongo­ing con­tact with extern­al fun­ders to secure fund­ing for 2026⁄27. Devel­op­ment of memor­andum of agree­ment with key loc­al author­ity partner	14 July 25 next checkpoint	Cau­tious	3	2	6	Gav­in Miles	02/09/2025
7	All	Resources — staffing	Scot­tish Gov­ern­ment Main Group award 2023⁄25 cre­ates sig­ni­fic­ant fin­an­cial pres­sure on the Park Authority’s resource budget for 2024⁄25, with the poten­tial to affect pos­it­ive rela­tion­ships with the Uni­on, staff mor­ale and motiv­a­tion, recruit­ment and retention.	Pre­vent­at­ive: devel­op­ment of pay mod­els to identi­fy the poten­tial cost to the Park Author­ity of fol­low­ing the Main Group pos­i­tion & con­sider the impact of poten­tial pay strategies on the devel­op­ing budget pos­i­tion for 2024⁄25; con­sider pay award dates and staged awards as tools to meet expect­a­tions while main­tain­ing afford­ab­il­ity Pre­vent­at­ive: Staff and fin­an­cial resources con­sidered dur­ing budget devel­op­ment pro­cess for 24⁄25.	3	3	9	Man­aged	Pay mod­els developed are being accom­mod­ated with­in the budget, based on indic­at­ive Grant-in-Aid fund­ing for 2024⁄25. Addi­tion­al recruit­ment has alle­vi­ated key staff pres­sure points. Fixed term staff con­tracts reviewed through­out the year. Staff sur­vey res­ults (23÷24) positive.		Ongo­ing	Open	3	3	9	Dav­id Cameron	20/01/2025
8	A9.3 All	Resources — staffing	Our Cor­por­ate and Oper­a­tion­al Plan­ning sys­tems do not adapt to deliv­ery of major fun­ded pro­grammes along­side deliv­er­ing ​‘core’ nation­al park object­ives. This leads to work­force stretch between 3rd party fund­ing deliv­ery and ​‘core’ cor­por­ate plan activ­it­ies with increased risks of stress and reduced morale.	Pre­vent­at­ive: Stra­tegic and oper­a­tion­al plans developed with extern­ally fun­ded pro­ject deliv­ery as intrins­ic ele­ments of plans to ensure deliv­ery capa­city is con­sidered fully. Preventative:Importance of staff man­age­ment and task pri­or­it­isa­tion rein­forced through lead­er­ship meet­ings. Preventative:Focus on few­er, lar­ger impact pro­jects (C2030). Remedi­al: Per­form­ance Devel­op­ment Con­ver­sa­tions (PDCs) being deployed reg­u­larly with all staff to check on staff work­loads, with 2 way flows of com­mu­nic­a­tions enabled through that pro­cess on staff work­load and capa­city. Pre­vent­at­ive: Staff and fin­an­cial resources for C2030 con­sidered along­side oper­a­tion­al plan activ­ity as part of budget devel­op­ment pro­cess for 24⁄25.	3	3	9	Man­aged	Impact score of 3 reflects the risks inher­ent in the likely intens­ity of work dur­ing ini­tial stages of C2030.Likelihood of risk there­fore held stat­ic. Impact of meas­ures and risk pro­file will con­tin­ue to be closely mon­itored through staff man­age­ment processes.		Ongo­ing	Open	3	3	9	Dav­id Cameron	20/01/2025
12	All	Resources — staffing	Scot­tish Gov­ern­ment pay remit for 24⁄25 is lower than desired pay award. Pay expect­a­tions of staff may not be met, lead­ing to issues with pay align­ment with oth­er NDPBs and con­sequent effect on staff mor­ale and motivation	Pre­vent­at­ive: Devel­op­ment and sub­mis­sion of busi­ness case for pay align­ment in keep­ing with SG nation­al two-year sec­tor­al pay award.	1	2	2	Man­aged	SG remu­ner­a­tion Group turned down ini­tial busi­ness case. Amended busi­ness case sub­mit­ted and approv­al received end Aug 24. Staff con­sulta­tion under­way to end Oct. Sea­son­al staff pos­i­tion resolved sat­is­fact­or­ily. Awards for com­ing three years agreed		31/12/2024	Open	1	2	2	Dav­id Cameron	20/01/2025
5	A29 All	Resources — staffing	Increas­ingly com­pet­it­ive and restric­ted recruit­ment cli­mate pre­vents staff with the required exper­i­ence and skill sets being secured. Plan­ning and oth­er spe­cial­ist staff (IT, pro­cure­ment, fin­ance) require­ments impacted by nation­al labour/​skills short­ages and/​or salary struc­tures not suf­fi­ciently com­pet­it­ive to attract or retain key staff.	Pre­vent­at­ive: focus on train­ing and devel­op­ment and intern­al suc­ces­sion plan­ning, in turn bring­ing recruit­ment into less experienced/​less highly skilled mar­kets and devel­op­ing pipeline of qual­i­fied staff Pre­vent­at­ive: con­sid­er­a­tion giv­en to job design, cre­at­ing roles with more seni­or­ity (high­er grades), and flex­ib­il­ity of offer regard­ing part-time/­job share.	2	2	4	Man­aged	Evid­ence of redu­cing num­ber of applic­ants and can­did­ate lists for vacan­cies ongo­ing, while trend in unsuc­cess­ful recruit­ment exer­cises has been acted on with no recent unsuc­cess­ful recruit­ment. Suc­cess­ful recent recruit­ment in dif­fi­cult sec­tors includ­ing pro­cure­ment and planning.Salary struc­tures reviewed with three year pay pos­i­tion now agreed.	Remedi­al: con­tin­gency plan­ning for example around out-sourcing of aspects of deliv­ery eg estab­lish call-off frame­work for con­sult plan­ning services.	31/03/2025	Open	2	3	6	Dav­id Cameron	12/05/2025