[At this point RP rejoined the meeting].
MF provided an update on the work of the Audit and Risk Committee, noting updates to global audit standards and engagement with Deloitte on the annual audit process.
The Acting Chair introduced the draft Framework Agreement between ESS and Scottish Ministers, summarising the Committee’s feedback, including changes that need to be made, and noting next steps. Subject to these changes, the Board approved the draft for discussion with the Scottish Government.
RP provided an update on the 2024/25 budget and expenditure to date, highlighting that ESS has returned funds to the Scottish Government as part of the Autumn Budget Review. ESS may consider voluntarily returning additional funds, where feasible, following the announcement of emergency spending measures across the public sector in Scotland.
RP updated the Board on the progress of ESS’ annual audit, noting that sign-off of the Annual Report and Accounts has been expedited due to internal circumstances at Deloitte. While the report will be finalised to schedule, RP noted pressures on the team, including the delayed receipt of the ISA 260 report from Deloitte.
RP highlighted that the move to a new Oracle finance system is progressing and the team remains positive about implementation in October 2024. The Board noted that the Chair of the Audit and Risk Committee and Acting Chair of the Board had been briefed on planned mitigations involving movement of contingency funds, and that an audit trail would be kept regarding any manual fixes required during the changeover.
RP provided an update on new members’ annual fee limits issued by Scottish Ministers, which will decrease annually in a schedule set out to 2026/27. Board and Committee fees will be monitored at regular points during the financial year to ensure that the new recommended limits will not affect ESS’ ability to perform its functions.
RP presented the People Strategy on behalf of the cross-team staff working group who drafted the document with support from ESS’ external HR advisor. The Board commended the team for their work on this and recommended minor updates, ahead of publishing the strategy online.
CL presented the corporate risk register, providing an update on mitigations relating to ESS’ systems, including the move to the new Oracle finance system and a ‘real-life’ test of ESS’ Business Continuity Plan (BCP) during the July 2024 global IT outage. MS provided a verbal Cyber Champion update, highlighting emerging risks in relation to ransomware, phishing and artificial intelligence and recommending potential methods of protection. The Board approved the updated risk register.