Cornwall's auditors: ‘reasonable assurance’ overall, weak contract controls, and a £154m savings plan rated ‘high risk’

When Cornwall Council's Audit Committee met on 22 May 2026, the headline from its Chief Internal Auditor was reassuring: "reasonable assurance" on the overall adequacy and effectiveness of the council's governance, risk management and control for 2025-26. In the auditor's own definition, that means "a generally sound system… some issues, non-compliance or scope for improvement were identified." It is the verdict a functioning council expects.

The interest is in the exceptions — and two of them are worth following: a recurring weakness in how the council manages its contracts, and a "high risk" hanging over £154m of savings it has promised to find.

Contract management: the recurring weak spot

Of the audits completed in 2025-26, Contract Management drew a Limited Assurance opinion. The auditors found compliance with the council's own Contract Management Operating Model "partial and inconsistent," confusion among officers about whether it applied to capital as well as revenue contracts, and — notably — no corporate e-tendering and contract-management system at all. Monitoring instead relied on "manual, spreadsheet-based processes." The external auditor, Grant Thornton, had separately flagged "limited corporate oversight of contract management activity." The internal audit concluded the council "remains exposed to governance, statutory compliance (with the Procurement Act 2023), and value for money risks in relation to its strategic and critical contracts."

What makes this more than a one-off is that the same theme recurs across the council's arms-length companies. In the same committee's review of council-owned companies, Cornwall Housing drew Limited Assurance in two areas — health and safety, and contract management and procurement. The improvement actions agreed for Treveth, the council's property company, also span procurement and contract management among other areas. Contract and procurement control, in other words, is not an isolated finding in one corner of the organisation; it is a pattern that surfaces in the council and again in the bodies it owns.

None of this is an allegation of wrongdoing. In each case management actions have been agreed, and in Cornwall Housing's case the report records them as "largely completed." The accountability question is narrower and fairer: why a council of this size still has no corporate contract-management system and monitors its strategic contracts with "manual, spreadsheet-based processes," and whether the promised fixes actually arrive.

The companies, fairly stated

The council-owned-companies report is easy to misread, so it is worth being precise. Corserv (Group) received Limited Assurance over "PRA commercial arrangements" and Partial Compliance in some care services, with formal action plans in train and certifications retained. Celtic Sea Power had no adverse findings. Treveth is the one most open to misreporting: the "no assurance opinions provided" against its name does not mean it failed an audit — it means the external reviewer's thematic engagements were not the kind that issue a formal assurance opinion. What Treveth did agree was a comprehensive set of improvement actions across governance, risk, health and safety, procurement, data and contract management.

£154m of savings, at 'high risk'

The sharper public-money finding sits in the council's finances. The internal audit of Financial Reporting and Savings Monitoring gave Reasonable Assurance on the process — but a High Risk opinion on delivery. The council's Medium-Term Financial Plan for 2026-2029 requires roughly £154m of savings — £59.1m in 2026/27, £48.8m in 2027/28 and £46.1m in 2028/29 — to close forecast budget gaps.

The auditors warn that the savings needed to balance 2025/26 "have not been delivered in full," forcing the council to draw £9.1m from its Financial Sustainability Reserve — and the report explicitly positions reserves "as a mitigant rather than a sustainable solution." The auditors note, too, that each year gets harder, because "the savings that could more efficiently be delivered have already been achieved."

That is the line that matters for residents: a council leaning on reserves to cover savings it did not make, while signing up to find far larger sums in each of the next three years, against its own auditors' judgement that delivery is at high risk.

A second opinion: the external peer review

The internal auditors are not the only ones raising these concerns. In January 2026 the Local Government Association ran a Corporate Peer Challenge of the council — an independent review by senior figures from other authorities. Its defining theme, in the LGA's own words, was "the scale of the council's ambition for Cornwall versus the reality of its capacity," and alongside the usual areas it examined the council's wholly owned companies specifically.

That convergence is the point: two separate reviews — the council's own internal audit and an external panel of peers — independently landed on the same two pressure points, financial sustainability and the oversight of the council's companies. The peer team's concern about the gap between Cornwall's ambitions and its capacity to deliver them sits alongside the internal audit's £154m savings warning rather than duplicating it: different vantage points, same direction of travel.

What to watch

These are the council's own findings, presented to its own Audit Committee, with actions attached. The accountability test is follow-through: whether a corporate contract-management system is funded and delivered; whether the 2026/27 savings land or the reserve is tapped again; and whether the next Audit Committee's action tracker shows the agreed fixes closed or slipping.