Critical systems audit highlights risks

Brief

The ACT Office of the Chief Digital Officer required a comprehensive audit of 200 critical systems currently in use across their various directorates.

Concerned about rising licence and maintenance costs and some systems nearing end-of-life, the territory required a risk assessment and recommendations of their full suite of critical systems.

Challenge

IT systems and practices had evolved over time without clear guidelines for procurement or a strategy for sustainment.

As a result, there were multiple tools doing the same job and multiple licences of the same tool adding to overall costs.

Some systems were nearing end-of-life and required a coordinated replacement strategy.

The full breadth of systems and tools in use across the organisation was unknown.

Solution

• Comprehensive discovery across all Directorates to capture current state systems and tools

• Capture of functional data for each system eg hosting, licencing, DR etc

• Risk scoring and assessment of each tool/system

• Identify duplicate tools and licences

• Final report and recommendations

• Develop PowerBI instance to allow ACT government to manipulate and visualise the data set as required

Outcomes

• ACT government now have a comprehensive view of the tools and systems currently in use across each directorate

• Licence renewal and end-of-life dates are known and can be incorporated into budget and workload planning

• Risk assessments inform prioritisation and replacement schedules

• The PowerBI tool allows instant production of reports and visualisations at an enterprise or directorate level