Baseline Framework ReformsProgress: Information Technology

Ezra Dick & Tony LesterAugust 2011

2

Purpose of Presentation

• In this presentation we will discussObservations & perspective of my roleRecap the recent PITAA IT WorkshopOutline the findings from that workshopDiscuss whether these findings are the right areas

of focus• This session will be followed by updates on

progress from some PITAA countries.

3

Observations & Perspective of my role

• Help countries build pragmatic, Best Practice IT Strategic Plans (ITSP).

• Focus on:10 Core modules for Tax AdministrationsUse a series of guiding Principles for both IT &

Business• The ITSP is Business Focussed.• High level costs are identified.• Aim to consult widely both internally & externally.

4

Recap the recent PITAA IT Workshop

• Excellent workshop undertaken.• Wide range of capabilities on display.• Excellent progress has been made by some PITAA

countries.• Others now realise what is required.• Amazing skills within this region.• Course attendees have identified key areas for them to

focus on at home.• OCO presentation identified similar issues that we are

experiencing.

5

Findings from the recent PITAA IT Conference

• Seven priority activity groups identifiedi. Business Ownership for IT systemsii. Preparing the business case to gain political and other

supportiii. Change Managementiv. People Capabilityv. Staff Retentionvi. IT Risksvii. Data Torque

• We will quickly discuss these to help us confirm/disagree on their appropriateness.

6

Business Ownership for IT Systems

• All attendees agreed with concept.• Logical business units for each system.• Business owners need to be involved from the

startPower/Key Business users could be the starting

point• Business owners accountable for all decisions.• IT has a role to inform business owners on new

opportunities.

7

Preparing the business case to gain political and other support

• “Business Case is more than the paper it is written on.”• Two aims - business case & marketing tool.• Are there successful working examples in the region?• Must link to:

Your Corporate documents Current government policies & direction Other agencies direction to reflect total government view

• Timing is of the essence.• Do not over promise – conservative cost benefit.• Prepare for negative feedback.• Understand you are competing for government funding.

8

Change Management

• NOT an IT issue.• Study all stakeholder needs & undertake

constant feedback.• Some people do not like change.

Be prepared for negative response - FAQs• Target messages appropriately – WIIFM.• Understand all costs fully.

9

People Capability

• Significant capability already in the region, you have regional experts NOW.

• In-country training, countries train countries.• Exchange program.• Share documents/resources NOW.• PICs forums to continue

PFTACData Torque

• Not always in house, can be supplemented by contractors.

10

Staff Retention

• Become an “employer of choice.”• Ensure right skills are recruited.• If possible, meet market recruitment conditions:

Current public service regulations do not help• Management must lead by example.• Consider lifestyle choice opportunities.• Staff rotations/training developments.• Incentive to become a “Regional Expert.”

11

IT Risks: Disaster Recovery, Business Continuity Planning

• Two main areas of concern:1. Disaster Recovery (DR)/Business Continuity Planning (BCP)

i. One size does not fit all.ii. If you have NO PLANS start somewhere – document your current

environment.iii. Test your documents and procedures regularly.iv. Offshore data storage is an acceptable component.v. Build towards complete DR/BCP plans

i. Share any existing documents now

vi. Widely communicate the need for these plans.vii. Treat this matter with the Management oversight and budget it

deserves.

12

IT Risks: Security Capability

2. Security Capabilityi. One size does not fit all.ii. If you have no security policy, document what is happening now.iii. Government has a role to play

i. Setting standards and policiesii. Undertaking audits

iv. Regular review and audit of security by both internal and external resources.

v. Place more emphasis on security training.vi. Clearly communicate reasons for security.vii. Be aware of professional skills that can assist

i. Share any existing documents now

viii. Security is typically role based.

13

Data Torque

• Consider combined maintenance agreements for smaller PICs.

• Why are PICs not seeing cost of entry price reductions?

• Still see merit in a Regional Support Centre.• Systems issues are not being shared across

PICs via Time Torque.• If appropriate consider group study tours.

14

Key Areas of Focus for Course Attendees

Staff Retention & Capability Fiji, FSM, Samoa, Solomon Is, Tuvalu Vanuatu

Change Management PNG, Samoa

Disaster Recovery/BCP Fiji, Kiribati, PNG, Solomon Is, Tonga, Vanuatu

Business Case/Funding approach Tonga, Vanuatu

IT Infrastructure Tuvalu

ITSP FSM, Marshall Is.

Information Sharing Marshall Is., Solomon Is.

Risk Management - disaster recovery starting at a very basic level

Tonga

Website & Intranet Kiribati

Business Ownership Fiji, Kiribati

Core System Requirements Kiribati

System Security/Audit Fiji

15

Discussion

We will quickly discuss these to help us confirm/disagree on their appropriateness.

Have we identified the right 7 issues?