Source · Select Committees · Public Accounts Committee

Recommendation 15

15 Accepted

Defra lacks a clear strategy for transforming digital services despite a 10-year transformation goal.

Conclusion
Defra told us that it had so far focused on stabilising its legacy applications to reduce the risks of cyber-attack or operational failure and on developing and implementing the IT systems needed for EU Exit, rather than work to reduce reliance on paper forms or to make applications widely available on mobile phones.31 It explained that stabilising applications often involved moving them from older data centres onto modern cloud- based platforms. Once the risks have been diminished, Defra told us it intends to move on to enhancing and transforming its legacy applications. This will involve rebuilding and replacing applications and decommissioning existing legacy IT. Defra expected the full transformation of its business applications to take around 10 years.32 However, Defra told us that it does not a yet have a strategy for transforming its digital services or a plan for enhancing and transforming its legacy applications. It explained that it intended to complete work on developing a vision for digital transformation within a year but was unable to give an indication of what it would achieve in terms of digitising its systems.33
Government Response Summary
The government agrees with the implied recommendation, stating Defra's Executive Committee approved a long-term digital and data approach in June 2023, and has agreed an initial plan of action. Defra has also approved £43 million for application improvement/replacement in 2023-24 and will write to the Committee by March 2024 with further details on its strategy.
Government Response Accepted
HM Government Accepted
The government agrees with the Committee’s recommendation. Target implementation date: March 2024. Defra’s Executive Committee (ExCo) approved a long-term approach to digital and data for Defra and its biggest arm’s length bodies in June 2023, reflecting the digital needs of organisations across the group. Defra’s Digital Data and Technology strategy aligns with the six missions in the Central Digital and Data Office Roadmap to 2025, was developed with support from our Arm’s Length Bodies and will be refined during the summer of 2023. Defra’s ExCo has already agreed an initial plan of action covering priority areas such as digital service transformation and continuing Defra’s move from legacy data centres to modern infrastructure and cloud environments. Defra’s ambition and principles for digital will be reflected in its planning for future spending review settlements and will be used to shape wider strategy and decision-making across Defra group. Defra intends to publish this strategy and high-level plan by the end of March 2024. The government agrees with the Committee’s recommendation. Target implementation date: March 2024. Many of the items in the strategy are already well underway – including migration from from Defra’s legacy data centres. We expect to have migrated from 3 of Defra’s legacy data centres during the summer of 2023. Defra has also approved a further £43 million of investment to improve, replace or decommission outdated applications during 2023-24. Defra has also started a full re-fresh of Defra Group architectural policies and standards which will complete in 2023-24. Defra will write to the Committee by the end of March 2024 with the further detail on the actions planned in its strategy (including measures for monitoring performance and how it will continue to establish and implement Group-wide standards for technology and architecture). Defra is considering these questions as part of the development of the strategy referred to above, to ensure that the strategy itself can be monitored and supported by appropriate group-wide standards.