Engaging Assurance Engine...

PHC Assurance Report

Risk Maturity
Project: Water Industry Development Project (#269) | Generated: 2026-08-09 15:02:04

1. Executive Summary

Governance Score
3.5/10
Evidence Confidence
3%
Boardroom Summary
"The Water Industry Development Project demonstrates a structured approach to risk management and stakeholder engagement, with a focus on integrating regulatory and environmental commitments. While the project is led by a risk and governance specialist and has a clear 90-Day Plan, it is not an official program of any water company and relies on public evidence and stakeholder contributions. This may limit its access to comprehensive operational data and effectiveness in some areas. The project's success will depend on securing substantive expert participation, converting engagement into commercial applications, and achieving measurable outcomes."
Primary Priority: Medium
LEGEND - Risk Maturity:
Governance Score β€” How well the project currently identifies, assesses, owns, treats, monitors and integrates risk within planning and decision-making.
Evidence Confidence β€” How confident we are that the Governance Score reflects the project’s actual position, based on the quantity, quality, relevance, currency and consistency of the available evidence.
Key Evidence Found: The project has a structured 90-Day Plan with defined phases and objectives, is in 'Live [FOCUS]' status, and has identified actions and concerns with specific strategies for mitigation. It includes a structured communication protocol and risk management software for real-time updates. The project uses public evidence, regulatory findings, and stakeholder contributions.
Evidence Required to Increase Confidence: Evidence of successful completion of the 90-Day Plan phases, including securing expert participation, converting engagement into commercial applications, and achieving measurable outcomes in risk management and stakeholder engagement. Additionally, evidence of successful integration of NEC Early Warnings and regulatory commitments into the project plan, along with documented outcomes from the 90-Day Plan phases.

2. Dimension Map

3. Dimension Reviews

Risk Register Quality β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The risk register quality for the Water Industry Development Project shows a structured approach with identified concerns and mitigation strategies. However, there are issues with inconsistent risk register quality across projects and contractors, as well as unresolved risks due to incomplete mitigation actions. The project aims to standardize risk management and improve integration of risk updates, but the effectiveness of these measures is not fully evidenced.

Evidence Found:
The project identifies multiple open concerns related to risk management, regulatory compliance, and environmental obligations. It aims to mitigate risks through structured communication, standardization, and integration of early warnings into risk governance. There is a focus on maintaining a comprehensive and up-to-date risk management strategy.
Evidence Required to Increase Confidence:
Evidence of successful implementation of standardized risk management practices across all projects and contractors, and completion of mitigation actions leading to resolved risks. Additionally, demonstration of effective integration of risk updates and early warnings into the risk management process.

Improvement Priority:
Medium

Assessment β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The project demonstrates a structured approach to managing concerns in the water industry, using public evidence and stakeholder contributions. It has a clear 90-Day Plan with phases for establishing evidence, engaging stakeholders, and reviewing progress. However, the project is not an official program of any water company and lacks access to private operational information, which may limit its effectiveness. The evidence strength is moderate, as it relies on public data and regulatory findings, and the project's success depends on stakeholder engagement and the ability to convert concerns into actionable reviews.

Evidence Found:
The project uses public evidence, regulatory findings, and stakeholder contributions. It has a structured 90-Day Plan and aims to demonstrate active concerns management. It is led by a risk and governance specialist and invites challenges from various stakeholders.
Evidence Required to Increase Confidence:
Access to private operational information from water companies, evidence of successful stakeholder engagement and conversion of concerns into actionable reviews, and demonstration of tangible outcomes from the project's activities.

Improvement Priority:
Medium

Response plans β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The project has a structured 90-Day Plan with defined phases and objectives, indicating a clear approach to response planning. The plan includes establishing a foundation, engaging stakeholders, and converting opportunities into actionable reviews. The presence of a structured communication protocol and risk management software for real-time updates further supports the project's response planning capabilities. However, the project is not an official program of any water company and relies on public evidence and stakeholder contributions, which may limit access to comprehensive data and operational insights. The project's success is contingent on securing substantive expert participation and sponsor-backed reviews, which are not yet confirmed.

Evidence Found:
The project has a 90-Day Plan with three phases: Establish & Evidence, Engage & Qualify, and Review & Convert. It includes structured communication protocols and risk management software for real-time updates. The plan aims to secure expert participation and sponsor-backed reviews.
Evidence Required to Increase Confidence:
Confirmation of substantive expert participation and successful conversion of opportunities into sponsor-backed reviews would increase confidence in the project's response planning capabilities.

Improvement Priority:
Medium

Implementation β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The implementation of the Water Industry Development Project demonstrates a structured approach with a clear 90-Day Plan divided into three phases: Establish & Evidence, Engage & Qualify, and Review & Convert. The project is in 'Live [FOCUS]' status, indicating active execution. There are specific strategies for addressing identified concerns, and the project has mechanisms for review and monitoring. However, the project is not an official program of any water company and relies on public evidence and stakeholder contributions, which may limit its access to comprehensive operational data. The project's success in implementation will depend on securing substantive expert participation and converting engagement into commercial applications.

Evidence Found:
The project has a 90-Day Plan with defined phases and objectives, is in 'Live [FOCUS]' status, and has identified actions and concerns with specific strategies for mitigation. It includes a structured communication protocol and risk management software for real-time updates.
Evidence Required to Increase Confidence:
Evidence of successful completion of the 90-Day Plan phases, including securing expert participation, converting engagement into commercial applications, and achieving measurable outcomes in risk management and stakeholder engagement.

Improvement Priority:
Medium

Review and monitor β˜…β˜…β˜…β˜…β˜†
3.5/10

Assessment:
The project demonstrates a structured approach to review and monitoring through the use of risk management software, a communication protocol for real-time updates, and a review mechanism to identify stagnancy. These elements suggest a robust framework for maintaining an up-to-date risk management strategy. However, the effectiveness of these mechanisms in practice is not fully evidenced, and the project is still in a developmental phase.

Evidence Found:
The project includes a structured communication protocol and risk management software for real-time updates. It has a review mechanism within the Risk Management process to identify stagnancy and encourage action completion.
Evidence Required to Increase Confidence:
Evidence of successful implementation and outcomes from the review and monitoring processes, such as case studies or reports demonstrating improved risk management and decision-making.

Improvement Priority:
Medium

Organisational framework β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The organizational framework of the Water Industry Development Project is structured to support both humanitarian and commercial objectives within the utilities industry. The project is led by a risk and governance specialist, David Winter, and is based in the UK. It is not an official program of any water company and relies on public evidence and stakeholder contributions. The project is categorized under 'Humanitarian' and 'Commercial' types, indicating a dual focus on public interest and commercial engagement. The framework includes a 90-Day Plan with defined phases and decision gates, suggesting a structured approach to project execution. However, the project is not publicly visible, which may limit transparency and stakeholder engagement. The evidence indicates a well-defined organizational structure, but the lack of public visibility and reliance on public evidence without private operational information may limit its effectiveness.

Evidence Found:
The project is categorized under 'Humanitarian' and 'Commercial' types within the 'Utilities' industry. It is based in the UK and led by David Winter, a risk and governance specialist. The project has a 90-Day Plan with defined phases and decision gates. It is not an official program of any water company and relies on public evidence and stakeholder contributions.
Evidence Required to Increase Confidence:
Evidence of successful stakeholder engagement, public visibility, and integration of private operational information would increase confidence. Additionally, documentation of outcomes from the 90-Day Plan and evidence of commercial engagement would strengthen the assessment.

Improvement Priority:
Medium

Risk Coordinator / Manager β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The project demonstrates a structured approach to risk management, with a focus on integrating public evidence, regulatory findings, and stakeholder contributions. It identifies and addresses multiple open concerns related to risk management, regulatory compliance, and environmental obligations. The project is led by a risk and governance specialist, David Winter, who is actively involved in managing risks and engaging with stakeholders. However, the project is not an official program of any water company and does not have access to private operational information, which may limit its effectiveness in some areas. The evidence suggests a moderate level of capability in risk coordination and management, with room for improvement in integrating private sector insights and achieving broader stakeholder engagement.

Evidence Found:
The project includes a structured communication protocol and risk management software for real-time updates. It has a review mechanism within the Risk Management process to identify stagnancy and encourage action completion. The project aims to maintain a comprehensive and up-to-date risk management strategy. It also identifies multiple open concerns related to risk management, regulatory compliance, and environmental obligations.
Evidence Required to Increase Confidence:
Evidence of successful integration of private sector insights, broader stakeholder engagement, and tangible outcomes from the risk management strategies implemented. Additionally, evidence of official recognition or partnership with water companies could enhance confidence in the project's capability.

Improvement Priority:
Medium

Integration with project plan β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The project demonstrates a structured approach to integrating regulatory and environmental commitments into project planning and execution. The 90-Day Plan outlines specific phases and actions to ensure integration, such as establishing a structured evidence base, engaging stakeholders, and reviewing progress. However, there are open concerns related to the integration of NEC Early Warnings and regulatory commitments, indicating potential gaps in full integration with the project plan.

Evidence Found:
The project has a 90-Day Plan with phases focused on establishing evidence, engaging stakeholders, and reviewing progress. It aims to integrate regulatory and environmental commitments into planning and execution. Concerns about integration of NEC Early Warnings and regulatory commitments are noted.
Evidence Required to Increase Confidence:
Evidence of successful integration of NEC Early Warnings and regulatory commitments into the project plan, along with documented outcomes from the 90-Day Plan phases, would increase confidence.

Improvement Priority:
Medium

Decision making β˜…β˜…β˜…β˜†β˜†
3.5/10

Assessment:
The project demonstrates a structured decision-making process with defined phases and decision gates, indicating a methodical approach to decision-making. The 90-Day Plan outlines specific stages with clear objectives and outcomes, which supports effective decision-making. However, the evidence of actual decision outcomes or effectiveness in practice is limited, reducing confidence in the assessment.

Evidence Found:
The project has a 90-Day Plan with decision gates at Day 30, Day 60, and Day 90 to evaluate progress and make decisions on continuation or revision. It aims to demonstrate an assurance approach adaptable to commissioned projects.
Evidence Required to Increase Confidence:
Evidence of successful decision outcomes, such as completed reviews or commercial engagements, and feedback from stakeholders on the decision-making process would increase confidence.

Improvement Priority:
Medium

4. Overall Recommendation

Focus on securing expert participation and converting stakeholder engagement into actionable reviews and commercial applications. Enhance integration of regulatory commitments and NEC Early Warnings into the project plan. Increase transparency and public visibility to build stakeholder trust and engagement.

5. Next Review Recommendation

Conduct the next review after the completion of the 90-Day Plan phases to assess progress in stakeholder engagement, risk management outcomes, and integration of regulatory commitments. Evaluate the effectiveness of decision-making processes and commercial engagement strategies.
This report was produced by the PHC Evidence-Based Assurance System.

Auditor Working Papers

Internal use only. This data demonstrates the evidence trail used to reach the final conclusions.

1. Evidence Collection

### RRQ (Requirements and Regulations Quality) - The project is not an official program of any water company and does not presume access to private operational information. - The project uses public evidence, regulatory findings, published company information, and informed stakeholder contributions. - Southern Water's recent pollution and enforcement issues are used as a reference point. - The project aims to demonstrate active concerns management, linking issues to actions, people, locations, events, milestones, and deliverables. - The project is intended to provide a transparent entry point for commercial engagement. ### ASM (Assumptions) - The project assumes that a maintained, evidence-led treatment of material water-sector concerns can lead to a defined PHC Review and continuing assurance service. - The project assumes that Southern Water's issues are applicable across companies, regions, and individual water or wastewater projects. ### RSP (Responsibilities and Stakeholder Participation) - The project is led by David Winter, who is a risk and governance specialist. - David Winter is using the PHC Port to develop information as part of a wider initiative to bring the Water Industry to face its environmental responsibilities. - The project invites technical, regulatory, financial, customer, and community challenges. - Stakeholders include water companies, regulators, investors, contractors, local authorities, and community bodies. ### IMP (Implementation and Execution) - The project is in the "Live [FOCUS]" status. - The project has flags indicating readiness for funding, government involvement, proposal, plan, report, and scalped status. - The project has a 90-Day Plan with three phases: Establish & Evidence, Engage & Qualify, and Review & Convert. - The project has identified actions and concerns, with specific strategies for mitigation and improvement. ### RVM (Review and Monitoring) - The project includes a structured communication protocol and risk management software for real-time updates. - The project has a review mechanism within the Risk Management process to identify stagnancy and encourage action completion. - The project aims to maintain a comprehensive and up-to-date risk management strategy. ### ORGF (Organizational Framework) - The project is categorized under "Humanitarian" and "Commercial" types within the "Utilities" industry. - The project is based in the United Kingdom. - The project is not visible to the public, as indicated by the "visible_flag." ### RCM (Risk and Concern Management) - The project identifies multiple open concerns related to risk management, regulatory compliance, and environmental obligations. - Concerns include misalignment in risk updates, ineffective integration of QSRA/QCRA outputs, inconsistent risk register quality, unresolved risks due to incomplete mitigation actions, and more. - The project aims to mitigate risks through structured communication, standardization, and integration of early warnings into risk governance. ### INT (Integration and Interoperability) - The project uses public evidence, regulatory findings, and stakeholder contributions to build a structured view of sector conditions. - The project aims to integrate NEC Early Warnings into the program's risk management processes. - The project seeks to integrate all regulatory and environmental commitments into project planning and execution. ### DEC (Decision-Making and Governance) - The project aims to demonstrate an assurance approach that can be adapted into commissioned projects for various stakeholders. - The project includes a decision-making process for commercial conversion, with a focus on agreeing on one Review with an organization capable of providing evidence and access. - The project has a 90-Day Plan with decision gates at Day 30, Day 60, and Day 90 to evaluate progress and make decisions on continuation or revision.

2. Opportunity Assessment

Based on the evidence provided, here are the strengths, positive indicators, and opportunities for success of the Water Industry Development Project: 1. **Structured Approach and Transparency**: The project utilizes a structured approach to manage concerns, linking issues to actions, people, locations, events, milestones, and deliverables. This creates a transparent entry point for commercial engagement and ensures accountability. 2. **Evidence-Based Methodology**: The project relies on public evidence, regulatory findings, published company information, and informed stakeholder contributions, ensuring that the approach is grounded in verifiable data. 3. **Leadership and Expertise**: Led by David Winter, a risk and governance specialist, the project benefits from experienced leadership focused on bringing the water industry to face its environmental responsibilities. 4. **Stakeholder Engagement**: The project invites participation from a wide range of stakeholders, including water companies, regulators, investors, contractors, local authorities, and community bodies, which enhances its credibility and potential for broad impact. 5. **Phased Implementation Plan**: The project has a detailed 90-Day Plan with three phasesβ€”Establish & Evidence, Engage & Qualify, and Review & Convertβ€”allowing for systematic progress and evaluation at each stage. 6. **Risk Management and Monitoring**: The project includes a comprehensive risk management strategy with structured communication protocols and real-time updates, ensuring that risks are identified and mitigated effectively. 7. **Commercial and Humanitarian Focus**: By categorizing the project under both "Humanitarian" and "Commercial" types within the "Utilities" industry, it addresses both public interest and commercial viability. 8. **Potential for Industry-Wide Impact**: The project is designed to be applicable across companies, regions, and individual water or wastewater projects, offering the potential for widespread industry improvement. 9. **Integration of Regulatory and Environmental Commitments**: The project seeks to integrate all regulatory and environmental commitments into project planning and execution, which is crucial for compliance and sustainability. 10. **Decision-Making Framework**: With decision gates at Day 30, Day 60, and Day 90, the project has a clear framework for evaluating progress and making informed decisions on continuation or revision. 11. **Opportunity for Commercial Conversion**: The project aims to demonstrate value through a focused PHC Review, with the potential to develop into a continuing PHC Service, supporting delivery, governance, and assurance. 12. **Focus on Economic and Environmental Balance**: By examining the economic consequences of operational underinvestment and non-compliance, the project aims to highlight the long-term benefits of compliance and preventive maintenance. These strengths and opportunities position the Water Industry Development Project as a promising initiative with the potential to drive significant improvements in the water sector.

3. Challenge Assessment

Based on the provided evidence, the following gaps, risks, blockers, and weaknesses have been identified: 1. **Lack of Official Program Status**: The project is not an official program of any water company and does not have access to private operational information, which may limit its ability to gather comprehensive data and insights. 2. **Assumptions on Applicability**: The project assumes that issues faced by Southern Water are applicable across other companies and regions, which may not always hold true and could lead to incorrect generalizations. 3. **Stakeholder Engagement**: While the project invites various stakeholders, there is no clear evidence of active participation or commitment from these stakeholders, which could hinder the project's progress and impact. 4. **Integration Challenges**: There are identified risks related to the integration of QSRA/QCRA outputs and NEC Early Warnings into the risk management processes, which could lead to unmanaged risks and project delays. 5. **Inconsistent Risk Management**: The project faces issues with inconsistent risk register quality, incomplete mitigation actions, and outdated risk data integration, which could compromise the effectiveness of risk management. 6. **Economic Incentives for Non-Compliance**: There is a risk that economic incentives for non-compliance may outweigh the deterrent effect of fines, leading to repeated environmental offences. 7. **Visibility and Transparency**: The project is not visible to the public, which could limit transparency and stakeholder trust. 8. **Decision-Making and Governance**: The project aims to demonstrate an assurance approach but lacks evidence of a clear decision-making process or governance structure that ensures accountability and timely actions. 9. **Funding and Government Involvement**: The project is flagged for readiness for funding and government involvement, but there is no evidence of secured funding or active government participation. 10. **Commercial Engagement**: The project aims to provide a transparent entry point for commercial engagement, but there is no evidence of successful commercial conversions or engagements. 11. **Review and Monitoring**: While there is a structured communication protocol and risk management software, the effectiveness of these tools in real-time updates and action completion is not clearly demonstrated. 12. **Organizational Framework**: The project's categorization as both "Humanitarian" and "Commercial" within the "Utilities" industry may lead to conflicting priorities and objectives. 13. **Implementation and Execution**: The project is in "Live [FOCUS]" status, but there is no clear evidence of progress or completion of the 90-Day Plan phases. 14. **Public Evidence and Regulatory Findings**: Reliance on public evidence and regulatory findings may limit the project's ability to address specific operational concerns and develop tailored solutions. 15. **Potential for Misalignment**: There is a risk of misalignment between contingency recommendations and actual cost exposure due to outdated risk data integration. 16. **Risk of Passive Risk Management**: The risk management system may devolve into a passive repository, leading to increased risk exposure and reduced confidence in the system. These identified issues highlight the need for improved stakeholder engagement, integration of risk management processes, visibility, and transparency, as well as securing funding and government involvement to enhance the project's effectiveness and impact.

4. Consistency Review

### Identified Contradictions and Inconsistencies: 1. **Visibility and Public Access:** - **RRQ and ORGF:** The project is not visible to the public as indicated by the "visible_flag." - **RAW DATA:** The "visible_flag" is set to 1, suggesting public visibility. 2. **Project Type and Category:** - **ORGF:** The project is categorized under "Humanitarian" and "Commercial" types. - **RAW DATA:** The project type is listed as "Commercial," with the category as "Humanitarian." 3. **Southern Water's Enforcement Issues:** - **RRQ and ASM:** Southern Water's issues are used as a reference point and assumed to be applicable across companies. - **RAW DATA:** Southern Water's specific enforcement issues are highlighted, but the assumption of applicability across companies is not explicitly supported by other data. 4. **Project Status and Flags:** - **IMP:** The project is in "Live [FOCUS]" status with various flags indicating readiness for funding, government involvement, etc. - **RAW DATA:** The "funding_ready_flag" is 0, contradicting the readiness for funding. 5. **David Winter's Role and Comments:** - **RSP:** David Winter is leading the project. - **RAW DATA:** Comments by David Winter indicate frustration and a desire to engage with Southern Water, suggesting a more adversarial stance than a neutral project lead. 6. **Southern Water's Fines and Enforcement:** - **RAW DATA:** Mentions a Β£7.1 million fine in 2026 and a Β£90 million fine in 2021. - **EVIDENCE CATALOG:** The fines are used as a reference point, but the specific amounts and years are not cross-referenced elsewhere. 7. **Project's Commercial Engagement:** - **RRQ:** The project aims to provide a transparent entry point for commercial engagement. - **RAW DATA:** Comments and actions suggest a struggle to engage commercially, with specific mentions of needing to draft open messages to senior management. 8. **Integration of NEC Early Warnings:** - **INT and RCM:** The project aims to integrate NEC Early Warnings into risk management processes. - **RAW DATA:** Concerns indicate that NEC Early Warnings are not currently integrated, highlighting a gap between objectives and current practice. 9. **Economic Incentives for Non-Compliance:** - **RCM:** The project identifies economic incentives for non-compliance as a risk. - **RAW DATA:** Detailed narratives and concerns about Southern Water's economic incentives for non-compliance are provided, but the broader applicability across the industry is not substantiated. 10. **90-Day Plan and Phases:** - **IMP and DEC:** The project has a 90-Day Plan with specific phases and decision gates. - **RAW DATA:** The detailed 90-Day Plan outlines phases and objectives, but there is no clear evidence of progress or completion of these phases. ### Unsupported Claims: - **Assumptions of Applicability:** The assumption that Southern Water's issues are applicable across companies lacks direct evidence or support from other sections. - **Commercial Engagement Success:** Claims of providing a transparent entry point for commercial engagement are not supported by evidence of successful engagements or partnerships. ### Mismatched Dates: - **Southern Water's Enforcement:** The RAW DATA mentions fines and enforcement actions with specific dates, but these are not consistently referenced or corroborated in other sections. ### Recommendations: - Clarify the project's public visibility status and ensure consistent categorization across documents. - Provide evidence or cross-references to support assumptions about the applicability of Southern Water's issues across the industry. - Align project status flags with actual readiness and progress indicators. - Ensure that objectives, such as the integration of NEC Early Warnings, are reflected in current practices and supported by evidence. - Address inconsistencies in David Winter's role and comments to maintain a neutral project stance.