Agenda - Senedd Commission Audit and Risk Assurance Committee

Meeting Venue: Hybrid – 4B/Teams

Meeting date: 17 November 2025

Meeting time: 10.30-13:00
For further information contact:

Clerk: Kathryn Hughes

Committee Clerk

0300 200 6543

------

<AI1>

1 Introductions, apologies and declaration of interests

</AI1>

<AI2>

2 Actions and matters arising

(Pages 1 - 2)

Attached Documents:
ARAC (25-04) Paper 1 – Summary of outstanding actions

</AI2>

<AI3>

3 Progress of Internal Audit activity

(Pages 3 - 10)

Attached Documents:
ARAC (25-04) Paper 2 – Internal Audit Progress Report

</AI3>

<AI4>

4 Internal Audit Reports

(Pages 11 - 31)

Attached Documents:
ARAC (25-04) Paper 3 – IA report Print Room
ARAC (25-04) Paper 4 – IA report Dignity and Respect

</AI4>

<AI5>

5 Audit Wales Update

(Pages 32 - 38)

Attached Documents:
ARAC (25-04) Paper 5 – Audit Wales Update Report

</AI5>

<AI6>

6 Update on cyber security

(Pages 39 - 65)

Attached Documents:
ARAC (25-04) Paper 6 - Committee briefings – post Finance and PAPAC
ARAC (25-04) Paper 7 - Briefing on recent cyber incidents

</AI6>

<AI7>

7 Finance Update

(Pages 66 - 71)

Attached Documents:
ARAC (25-04) Paper 8 – Finance Update_2025-26 Financial Position and Budgets for 2026-27
ARAC (25-04) Paper 9 – Finance Update_2024-25 Savings Achieved

</AI7>

<AI8>

8 Governance & Strategic Planning Update Report

(Pages 72 - 74)

Attached Documents:
ARAC (25-04) Paper 10 – Governance & Strategic Planning Update Report

</AI8>

<AI9>

9 Reporting on data breaches

(Pages 75 - 76)

Attached Documents:
ARAC (25-04) Paper 11 - Data Breaches

</AI9>

<AI10>

10 Departure Summary

(Pages 77 - 78)

Attached Documents:
ARAC (25-04) Paper 12 - Departures Summary

</AI10>

<AI11>

11 Corporate Risks

(Pages 79 - 121)

Attached Documents:
ARAC (25-04) Paper 13 - Corporate Risk - cover paper
ARAC (25-04) Paper 13 - Annex A - Corporate Risk Summary
ARAC (25-04) Paper 13 - Annex B - Corporate Risks Plotted
ARAC (25-04) Paper 13 - Annex C - Summary CRR Report

</AI11>

<AI12>

12 Critical examination of one identified corporate risk or topical issue - Senedd Reform

</AI12>

<AI13>

13 Senedd Services and Staff

</AI13>

<AI14>

14 Election

</AI14>

<AI15>

15 Senedd Estate

</AI15>

<AI16>

16 Review HMT/other guidance for ARAC

(Page 122)

Attached Documents:
ARAC (25-04) Paper 14 – HMT-handbook 2025

</AI16>

<AI17>

17 Review of Terms of Reference

(Pages 123 - 131)

Attached Documents:
ARAC (25-04) Paper 15 - ARAC-ToR-Nov-2025

</AI17>

<AI18>

18 Forward work programme

(Pages 132 - 136)

Attached Documents:
ARAC (25-04) Paper 16 - Forward Work Programme

</AI18>

<AI19>

19 Addendum - IA reports circulated out of committee

(Pages 137 - 147)

Attached Documents:
ARAC (25-04) - Validera-Payroll-2024-25

</AI19>

<TRAILER_SECTION>

</TRAILER_SECTION>

<LAYOUT_SECTION>

1. FIELD_TITLE

FIELD_FOOTNOTE F_PR

FIELD_SUMMARY

FIELD_LABELLED_ATTACHMENTS

</LAYOUT_SECTION>

<TITLE_ONLY_LAYOUT_SECTION>

2. FIELD_TITLE

FIELD_FOOTNOTE F_PR

FIELD_LABELLED_ATTACHMENTS

</TITLE_ONLY_LAYOUT_SECTION>

<HEADING_LAYOUT_SECTION>

FIELD_TITLE

FIELD_FOOTNOTE

</HEADING_LAYOUT_SECTION>

<TITLED_COMMENT_LAYOUT_SECTION>

FIELD_TITLE

FIELD_FOOTNOTE

FIELD_SUMMARY

</TITLED_COMMENT_LAYOUT_SECTION>

<COMMENT_LAYOUT_SECTION>

FIELD_SUMMARY

</COMMENT_LAYOUT_SECTION>

<SUBNUMBER_LAYOUT_SECTION>

2.1. FIELD_TITLE

FIELD_FOOTNOTE F_PR

FIELD_SUMMARY

FIELD_LABELLED_ATTACHMENTS

</SUBNUMBER_LAYOUT_SECTION>

<TITLE_ONLY_SUBNUMBER_LAYOUT_SECTION>

2.2. FIELD_TITLE

FIELD_FOOTNOTE F_PR

FIELD_LABELLED_ATTACHMENTS

</TITLE_ONLY_SUBNUMBER_LAYOUT_SECTION>