Troubled heritage body told to address 'unacceptable' governance

Scotland’s spending watchdog, Auditor General Stephen Boyle, has sharply criticised Historic Environment Scotland for “unacceptable weaknesses” in governance — citing procurement failings, data breaches, problems with complimentary event tickets and an absence of a formal register of interests amid allegations of corruption and a toxic workplace that led to the chief executive’s suspension. The annual audit flagged material control lapses including £1.9m spent via some 400 employee purchasing cards, an inadequately scrutinised cancellation of a £2.9m archive-storage project with a further £500,000 likely to be incurred, and a period of almost six months without a chief executive or accountable officer; HES is an arms‑length, Scottish government‑funded body managing 300+ sites including Edinburgh Castle. HES says it will commission an independent review and has begun strengthening controls while the Scottish government works with the body; the report raises clear value‑for‑money, fraud and reputational risks to publicly funded heritage operations even as HES reports 4.7m visitors and £935m of heritage tourism benefit to Scotland.

Analysis

The Auditor General Stephen Boyle's annual audit finds "unacceptable weaknesses" at Historic Environment Scotland (HES), citing procurement failings, data breaches, problematic complimentary ticketing and absence of a formal register of interests; the audit quantifies control lapses including £1.9m spent via roughly 400 employee purchasing cards in 2024/25 and a cancelled £2.9m specialist archive storage project with a further ~£500,000 likely to be incurred. The body operated without a chief executive or accountable officer for almost six months this year and faces parallel governance and cultural probes, including whistleblower allegations of procurement improprieties, an internal racism row, suspension and reinstatement of the CEO, and an Information Commissioner's Office inquiry into data leaks. HES reports 4.7m visitors and states heritage tourism generated £935m for Scotland, but the audit and ongoing investigations increase the risk of further financial remediation, regulatory sanctions, reputational damage and tighter Scottish government oversight that could disrupt capital projects and operational funding. Management has announced strengthened controls and an independent review to be set up in the new year; investors should monitor the scope and timing of that review, the ICO findings, any material restatements or additional contingent liabilities, and Scottish government interventions that could change governance, funding or procurement practices.

Key Decisions for Investors

• Require publication of the independent review and remediation plan before supporting new HES-funded capital allocations, monitor for confirmed policy changes or conditional funding from the Scottish government
• Reassess counterparty exposure for suppliers and contractors to HES projects and seek contractual protections given the cancelled £2.9m project and governance instability
• Monitor ICO and other regulatory findings for potential fines or mandated corrective actions that could generate material liabilities or operational constraints, avoid re-rating HES-linked investments until controls are demonstrably effective
• Increase governance due diligence on other arms-length public bodies in your portfolio or pipeline, and consider engagement with funders on oversight expectations and transparency metrics