This focused 75-minute webinar provides councillors with a clear understanding of their responsibilities under Assertion 10 and how good governance, transparency and data-handling practices underpin compliant council operations. Building on key principles from Part 1, the session offers a concise but practical overview of the risks councils face, the controls required to address them, and the specific role councillors play in ensuring that systems, policies and behaviours meet modern standards.

The course explores what Assertion 10 actually requires, how councils evidence compliance, and how councillors can confidently scrutinise arrangements such as IT systems, data storage, passwords, councillor email addresses, device use, retention practices and third-party risks. It also clarifies how governance failures emerge and what proactive steps councillors can take to prevent them—particularly in smaller councils with limited infrastructure.

Course focus includes:

• The purpose of Assertion 10 and why councillors have oversight responsibilities

• Key risks: data breaches, insecure systems, unregulated devices, and non-compliant email practices

• What “appropriate controls” look like for councils of all sizes

• Understanding the Data Asset Register, retention schedules and evidence requirements

• Councillor duties: secure communication, confidentiality, device hygiene and information handling

• Identifying gaps and asking the right questions to support your Clerk and strengthen compliance

Designed for councillors seeking a practical and accessible introduction to their role in digital governance, this session supports improved risk management, clearer accountability and stronger Assertion 10 outcomes.