In the Australian Capital Territory, it’s Digital, Data and Technology Solutions (DDTS), a subunit of the Chief Minister, Treasury and Economic Development Directorate (CMTEDD) central agency, that is responsible for leading the ACT digital strategy and for providing ICT services to the ACT Public Service and public schools.
The total cost of DDTS services delivery was put at $251.7 million for 2023-24, although this excludes some ICT costs that the ACT Government provides directly to its directorates and agencies.
The ACT Digital Strategy is about “using technology to improve the quality of life for all Canberrans”. It sets out a plan of action and makes a range of commitments to the ACT community based on four principles. These are that: People in our community are at the centre of everything the government does, from policy making to city planning and service delivery; that data is used and shared transparently, to make better decisions and enhance the wellbeing of people; that design and co-design are utilised to manage change and ensure results are achieved; and that strategic, open relationships with a wide range of industry groups are pursued to create greater value for the community.
Underpinning the ACT Digital Strategy is a series of supplementary plans, including Technology Directions that aim to provide visibility into the government’s capability platforms. The Technology Directions are currently under development, according to an ACT government spokesperson.
New funding model
DDTS is set to benefit from a “direct appropriation funding model” in future, according to budget documents [pdf] this year. The change of funding model is intended to support “the sustainable delivery of ICT services across the ACT Government, creating efficiencies through the removal of billing and invoicing”, while also supporting “continued cyber security and data analytics services and increased costs associated with IT licensing.”
Also in this year’s budget, the government said it would develop a strategic asset management plan for its ICT fleet, “which will inform any future investment decisions regarding fleet replacement.” The budget papers identify an ICT capital works program of $100.6 million in 2023-24 and $194.7 million over the forward estimates.
In addition, the budget is intended to support “continued work to modernise the government’s core financial and reporting system, including assessing the feasibility of an enterprise resource planning (ERP) solution”, and provides some continued funding for key digital health initiatives outlined in last year’s State of IT, including the territory’s digital health record.
Cyber security given renewed focus
During the first part of the year, the ACT government was exposed to a vulnerability in Barracuda email security gateways, which were isolated and replaced. Though it left certain types of information passing through the gateways vulnerable, there was no evidence anything was removed.
Chief digital officer Bettina Konti said in late July that DDTS had “been given some additional resources” for cyber security to grow its capabilities and “to implement additional security controls across our landscape.”
“We conduct regular assessments across four systems that are within the control of or that DDTS is responsible for. We also support directorates in the conduct of security assessments - further systems that they have - that they are responsible for,” she said [pdf]. A best practice design guide that was previously endorsed by Cabinet “encourages the conduct of regular threat and risk assessments for major systems, either on an annual basis or at the point of major upgrade.”
DDTS also created, implemented and communicated a suite of cyber security awareness training materials and education across government. This appears to be in addition to mandatory security training given to all staff, and a cyber awareness whole-of-government intranet that is regularly updated with materials to support an improved cyber culture.
“A range of ACT government cyber awareness training modules are published in the whole-of-government learning management system, including modules designed for all staff and special training for executives and privileged system administrators. Compliance reporting on awareness training completion is included in quarterly cyber security reports provided to directorates,” an ACT government spokesperson says.
One thing the ACT government does not currently have in place is a cyber security strategy...
...however, “preparations are underway to develop one.”
High cloud usage
The ACT government has a cloud strategy with a cloud-first approach, which it says has enabled it to progressively migrate services. On that count, 55 percent of ACT government workloads are in the public cloud, and all development and test activities are conducted there.
“The ACT government’s on-premises footprint has not expanded for many years, with ongoing activities to remove or migrate on-premises workloads to the cloud,” the spokesperson says.
Of interest is a looming update to the territory’s cloud strategy: “the government is in the process of reviewing and updating the cloud strategy to enable us to embrace advancements in cloud offerings,” the spokesperson says.
With most of the ACT government’s new digital initiatives having a cloud component, focus is also being put around developing capability in foundational skills such as cloud security. In addition, DDTS provides “technology, processes and [staff] needed by the government’s directorates to gain visibility of cloud services.”
AI strategy in development
The ACT government’s approach to AI use is being defined on a number of fronts. It has so far drafted a “positioning paper” that was presented to its whole-of-government Data Reform Group in September 2023. Now, it is in the process of “establishing a working group to develop best practice guidelines and policy for AI” and at the same time “developing interim guidance on the use of AI and large language models,” an ACT government spokesperson says.
Like other jurisdictions, the ACT government is also participating in the National AI Working Group through the Data and Digital Ministers Meeting (DDMM), which is trying to develop a national approach to the use of AI.
Scorecard
| Does the ACT have a digital strategy? Is it up-to-date (i.e. released in the last two years?) | Yes |
| Does the ACT have a cloud strategy? Is it up-to-date (i.e. released in the last two years?) Does it contain a cloud-first or cloud-only approach to new projects? | Yes |
| Does the ACT have a cyber security strategy? Is it up-to-date (i.e. released in the last two years?) | No, under development |
| Does the ACT have an AI (including generative AI/LLM use) strategy? Are there plans to update or issue a specific strategy around generative AI and LLM use? | No, under development |
| Is there a specific whole-of-government ICT/IT strategy (as distinct from your digital strategy?) | Partially. A 'Technology Directions' plan to supplement the digital strategy is under development. |
| Does the ACT have a minister responsible for digital – or a minister with clear IT authority? | Yes |
| Does the ACT mandate cyber security training for all public servants? | Yes |
| Does the ACT have a whole-of-government CIO (or equivalent) and a steering committee of CIOs? | Yes |
| Does the ACT have clear policies for cyber security, cloud, data and privacy? | Yes |
| Is the ACT taking steps to address issues with traditional CapEx/OpEx IT funding models? | Yes |
| Is the ACT monitoring the progress of IT and digital projects after sign-off? | Partial. Included in best practice guidance |
| Is the ACT aware of what needs fixing with respect to whole-of-government IT policy and procurement? | Yes |
| Does the ACT have a cyber security operations centre? | Yes |
| Does the ACT have a central service delivery agency and is it working to improve digital interactions? | Yes |
| Is the ACT building in-house digital skills? | Partial |
| Does the ACT have a small to medium enterprise (SME) buying policy? Is there a percentage target for the amount of government IT budget to be spent with SME-sized providers? | Yes |
| Has the ACT developed any digital services that are being used by other states/territories? | Yes |
Browse by State
Click on the tiles below to see how each of the states and territories are progressing in their digital journeys, and how they stack up against each other.
State Champions
The iTnews State Government Champions have worked closely with the governments throughout Australia. Their processes have enhanced the way our state governments are able to deliver their services to the people of Australia.
We are proud to present the 2023 State Government Champions, and we will showcase the work they are doing in the coming days.
