Recommendation 2

Defra does not have a strategy or vision needed for its long-term digital transformation. Defra has so far focused on stabilising its legacy applications by seeking to mitigate the biggest risks of cyber-attack or operational failure and is moving towards enhancing and transforming these applications. But it does not yet have a strategy for the transformation of its digital services and is not taking a proactive approach to challenges, such as reducing reliance on paper forms and making applications available on mobile phones. It has instead tended to be reactive and focus its efforts on areas that need to be addressed more urgently, such as implementing the IT systems needed for EU Exit. We would expect Defra to look at the digital needs across all of the organisations within the Defra Group and consider where it can make savings and improvements. Many different technologies and standards are used across Defra owing to how it has grown and developed over time, and the different approaches to technology adopted by different organisations within Defra. Defra does not yet have agreed standards for IT systems across the Department and its organisation that would ensure they are developed in a more consistent way across the Group. Recommendation 2: Defra should: a) develop its longer-term digital and data strategy, and ensure that this reflects the digital needs of organisations across the Defra Group; b) write to the Committee by the end of March 2024, outlining details of the actions planned in its strategy, including the measures it will use to monitor performance and how it will establish and implement Group-wide standards for technology and architecture.