Browse our range of reports and publications including performance and financial statement audit reports, assurance review reports, information reports and annual reports.
- Define service commitments for online services, including the availability of ICT systems, and specify equivalent maximum acceptable system outage tolerances in ICT service contracts.
- Planning for a major ICT investment that will realise specific savings or business benefits requires early identification and management of system operating risks and timely transition planning, to deliver ICT redevelopment within the planned schedule and scope.
- With the increasing reliance on contracted ICT service providers to deliver services, entities should review their ICT governance arrangements to:
- monitor the performance of systems, ideally with active monitoring systems;
- assess the delivery of contracted services using reliable data;
- establish ICT procurement guidelines to accommodate a changing digital environment, including the transition towards new technology and service providers; and
- ensure that the entity, as the service integrator, provides effective oversight and control of the outsourced environment.
- ICT improvement programs should establish measurable outcomes and end-states prior to implementation to support effective oversight and accountability.
The objective of this audit is to assess the effectiveness of the implementation of procurement reforms — follow on from Auditor-General Report No. 5 2022–23 Digital Transformation Agency’s Procurement of ICT-Related Services.
Please direct enquiries through our contact page.
- ICT improvement programs should establish baselines, including documenting the current state of systems or processes, and develop benefits measurement arrangements prior to commencement. This allows for benefits to be effectively measured and reported.
This audit focused on the approval of business system projects -projects aiming to achieve a business objective such as reduced costs or to implement a new program, in contrast with projects with a narrower technology focus such as replacing an agencyʹs desktop computers.
The objective of the audit was to assess the effectiveness of the management of risks arising from the use of PSDs in selected Australian Government agencies. The PSDs included within the scope of this audit were: USB flash drives; CDs and DVDs; external hard drives; laptop computers and smartphones.
The objective of the audit was to assess the effectiveness of Australian Government agencies' management and implementation of measures to protect and secure their electronic information, in accordance with Australian Government protective security requirements.
The audit objectives were to examine the extent to which selected TSB2 and TSI Response programs: are achieving or had achieved their objectives; and had been administered effectively by DCITA according to better practice principles. To evaluate this aspect, the audit assessed DCITA's compliance with the better practice principles outlined in the Administration of Grants Better Practice Guide (May 2002) produced by the Australian National Audit Office (ANAO). There are 19 separate principles covered under the broad areas of: Planning for effective grant programs; Selecting projects; Managing and monitoring funding deeds; and Evaluating and reporting grant program performance.