Digital Assurance | Digital NSW

Digital Assurance is a function at Department of Customer Service that supports NSW Government delivery agencies to ensure digital projects are being effectively developed and delivered on time, on budget and in line with the government’s objectives. It supports the delivery of accessible, inclusive, secure and integrated digital services for all people in NSW.

Digital Assurance is implemented through the Digital Assurance Framework (DAF). The framework underpins our approach to assurance. It is consistent with NSW Gateway Policy and the NSW Digital Governance Model, which are administered by NSW Treasury.

Digital Assurance Framework (DAF)

The Digital Assurance Framework is an independent, risk-based assurance process for the State’s capital and recurrent ICT and Digital projects. It provides the NSW Government with effective tools to monitor their investments, receive early warning of emerging issues, and act ahead of time to prevent digital projects from failing. The DAF is reviewed and updated regularly by Digital Strategy, Investment and Assurance (DSIA).

Download PDF (PDF, 1.11 MB)

Features of the Digital Assurance Framework (DAF)

Whole of government

A consistent whole-of-government approach to investor assurance for ICT and Digital projects providing confidence in the portfolio
Provides a portfolio/account level view of the Government’s ICT and Digital investment to drive strategic whole of government opportunities and reduce risk and cost through better collaboration, re-use or shared solutions
Fosters the sharing of skills, resources, experience and lessons learned within and across the government sector including state digital assets/infrastructure.

Taxpayer value

A focus on return on investment outcomes, not outputs
More systematic and transparent metrics which adds value and weight to decision making and risk reduction
Greater analytic support for the Government as an investor, before and after an investment decision has been made, rather than project-level assurance only.

Risk Management

A regular level of due diligence that reflects the level of budget risk and complexity for each project, focusing investor assurance resources towards high-risk complex projects
Increasing transparency regarding project development/delivery risks and progress
Contributing to improved levels of compliance with the Gateway Review process applied from the commencement of project development to project implementation, providing confidence to Cabinet.

Public good

Improving public confidence in the timely provision of value for money ICT and Digital investments, and
Contributing to job growth and the State’s competitiveness through ICT and Digital.

Eligibility for digital assurance

Digital assurance is mandatory for all state capital and recurrent-funded digital projects valued at $5 million or more, being developed, procured, or delivered by general government agencies, government businesses, and state-owned corporations.

While digital assurance is required for digital projects worth $5 million or more, it is recommended for all projects of strategic importance or high risk.

Project registration stages

Stage 1

Ensure your complex digital project has set up its strategic or final business case. Having an agreed business case is mandatory prior to registration.

Stage 2

Contact Digital Strategy, Investment and Assurance (DSIA), the coordinating agency for digital projects.

Stage 3

Once you've met the expert team, you can register your project for risk profiling via the ICT Assurance Portal.

Stage 5

Digital Assurance works with the Digital Assurance Risk Advisory Group (DARAG) to provide a final decision on your project’s risk score and Tier level. This completes the registration process.

How to get started

Whether you’re building a business case or delivering an existing NSW Government ICT and Digital project, you might benefit from digital assurance.

Start a discussion with our team: ICTAssurance@customerservice.nsw.gov.au.

A risk-based approach to digital assurance

The DAF uses a risk-based approach to ensure the assurance evaluation focuses on the highest-risk projects.

A Project Tier classification is comprised of five Project Tiers. High Profile / High Risk projects are classed as Tier 1. These projects require the highest levels of oversight to ensure risks are appropriately managed.

The classification of a digital project is based on its:

Estimated total cost, and
Qualitative risk profile (level of government priority, interface complexity, sourcing complexity, agency capability, technical complexity, change complexity and cyber security).

A risk-based approach to digital assurance graphic

Investor digital assurance process

Through the DAF, Digital Strategy, Investment and Assurance (DSIA) executes the investor assurance process.

The process is confidential to each digital project. The main components include:

ongoing monitoring by DSIA, including independent analysis and general day-to-day interactions with delivery agencies.
reporting regularly on projects – including obstacles highlighted and mitigation plans for projects at risk.
Gateway Reviews, Health Checks, and Deep Dive Reviews conducted by independent expert reviewers.
close-out of the Gateway Review Report Recommendations.
sharing insights and building capability in the delivery of digital projects.