This audit would examine the effectiveness of the Department of Health’s (the department’s) procurement of a privileged access management solution, including consideration of value for money and the application of the Commonwealth Procurement Rules.

The department approached the market for a privileged access management solution in December 2018 to support moves towards compliance with the ssential eight’ security controls, strengthen the department’s risk posture, and safeguard its people and information from potential threats related to privileged accounts.