Issue details

Issue details

Cyber Incident Follow-up Report

This report provides the Committee with a final update on the completion of the Cyber Incident Remediation Action Plan. It confirms whether the remaining outstanding actions have been completed, presents the findings of the independent penetration testing undertaken in July 2026 together with the Council's response to any recommendations, and provides assurance that the enhanced cyber security controls are operating effectively. Subject to the Committee's satisfaction, this report concludes the dedicated cyber incident reporting programme, with future cyber security assurance being provided through the Council's routine risk management and internal audit arrangements.

Decision type: Non-key

Decision status: For Determination

Wards affected: (All Wards);

Notice of proposed decision first published: 03/08/2026

Anticipated restriction: Fully exempt  - View reasons

Decision due: 27 Oct 2026 by Audit and Governance Committee

Considered on: 27 Oct 2026 by Audit and Governance Committee

Department: Communities and Citizens

Contact: Rocco Labellarte, Chief Technology and Information Officer Email: rlabellarte@oxford.gov.uk.

Consultation process

Not applicable

Reason date could change: Confirmed for this meeting

Is the date subject to change: No