Many Commonwealth entities continue to rely on long-lived, business-critical ICT systems that deliver essential services but can be increasingly costly and difficult to support. These systems often sit on older technology stacks, potentially include end-of-support components, and may carry heightened operational, security and continuity risks. The ANAO could examine whether selected entities appropriately identify, govern, secure and sustain or progressively modernise these established platforms.