Meeting Venue:
Hybrid - Conference Room 4B/MS Teams
Meeting date: 27 November 2023
Meeting time: 10.00 – 12:30
For further information contact:
Clerk: Kathryn Hughes
Committee Clerk
0300 200 6543
------
1 Introductions, apologies and declaration of interests
2 Minutes of 12 June, actions and matters arising
(Pages 1 - 11)
Attached Documents:
ARAC (23-05) Paper 1 - minutes 12.06.23
ARAC (23-05) Paper 2 - summary of actions
3 G&A update report (inc. progress on IA activity)
(Pages 12 - 17)
Attached Documents:
ARAC (23-05) Paper 3 - Governance and Assurance Update - Nov
2023
4 Internal Audit Report
(Pages 18 - 27)
Attached Documents:
ARAC (23-05) Paper 4 - Business Continuity Audit -
Validera
5 External Quality Assessment (EQA)
(Pages 28 - 33)
Attached Documents:
ARAC (23-05) Paper 5 - EQA
ARAC (23-05) Paper 5 - Annex A - EQA Review Summary and
Introduction
ARAC (23-05) Paper 5 - Annex B - EQA Appendix A - Main Report
Findings and Action Plan
ARAC (23-05) Paper 5 - Annex C - IAQAF Conformance
Outcome
6 HMT/other guidance for Audit and Risk Assurance Committees
Oral item
7 Review of internal audit coverage over the past few years
(Pages 34 - 43)
Attached Documents:
ARAC (23-05) Paper 6 - Internal Audit
8 Feedback from 2022-23 audit process
Oral item
9 Audit Wales update report (inc. AW reports/outputs and wider public sector studies and reports and how they impact the Senedd Commission)
(Pages 44 - 51)
Attached Documents:
ARAC (23-05) Paper 7 - Audit Wales update - Nov 2023
10 Update on Cyber Security
(Pages 52 - 66)
Attached Documents:
ARAC (23-05) Paper 8 - Cyber Security Assurance Report Q3
2023
11 Finance update
(Pages 67 - 74)
Attached Documents:
ARAC (23-05) Paper 9 - Finance update Nov 2023
12 PAPAC and Finance Committee update
Oral item
13 Departure Summary
(Pages 75 - 76)
Attached Documents:
ARAC (23-05) Paper 10 - Departures Summary
14 Corporate updates: Senedd Reform Programme and Ways of Working Programme
Oral item
15 Corporate Risk
(Pages 77 - 105)
Attached Documents:
ARAC (23-05) Paper 11 - Corporate Risk
ARAC (23-05) Paper 11 - Annex A - Summary Corporate Risk
Register
ARAC (23-05) Paper 11 - Corporate Risk - Annex B - Corporate Risks
Plotted
16 Critical examination of one identified or emerging risk or issue - HR-R-129: Dignity & Respect - Commission
(Pages 106 - 109)
Attached Documents:
ARAC (23-05) Paper 12 - Corporate Risk - Dignity &
Respect
ARAC (23-05) Paper 12 - Annex A - Corporate Risk - Dignity &
Respect
17 Information breaches (twice yearly)
Oral item
18 Review the committee's terms of reference
(Pages 110 - 113)
Attached Documents:
ARAC (23-05) Paper 13 - ARAC Terms of Reference
19 Forward work programme
(Pages 114 - 117)
Attached Documents:
ARAC (23-05) Paper 14 - Forward Work Programme
20 Any other business
Oral item
FIELD_LABELLED_ATTACHMENTS
FIELD_LABELLED_ATTACHMENTS
FIELD_LABELLED_ATTACHMENTS
FIELD_LABELLED_ATTACHMENTS