19th wgita-meeting beijing april 2010 - auditing e-government 1

19th WGITA-meeting Beijing April 2010 - A19th WGITA-meeting Beijing April 2010 - Auditing e-Governmentuditing e-Government

11


22

AgendaAgendaBackgroundBackground DatabaseDatabase ChallengesChallenges

Life-cycle risks on e-GovernmentLife-cycle risks on e-Government

E-Government development around the E-Government development around the worldworld UN surveyUN survey

Update e-Government RisksUpdate e-Government Risks Coorperation with EUROSAI WGITACoorperation with EUROSAI WGITA

Where to go from hereWhere to go from here


33

Auditing e-Government - BackgroundAuditing e-Government - Background

Initiated by INTOSAI Initiated by INTOSAI Standing Committee on IT Standing Committee on IT Audit at its 11Audit at its 11thth meeting in meeting in November 2002November 2002

““Investigate the SAIs Investigate the SAIs different attitudes and different attitudes and experiences in auditing e-experiences in auditing e-Government with a view to Government with a view to propose new projects for propose new projects for the Committee as to the Committee as to issuing guidance and issuing guidance and sharing best practice in sharing best practice in this area”this area”

e-Government is the online

exchange of government information with, and

the delivery of services to, citizens, businesses

and other government agencies


44


A report was presented for the Committee at A report was presented for the Committee at its 12th meeting in 2003its 12th meeting in 2003

Identifying main challenges and risks in auditing e-Identifying main challenges and risks in auditing e-GovernmentGovernment

Suggesting projects for the Committee to take up Suggesting projects for the Committee to take up within within

Sharing information and knowledge in the e-Government Sharing information and knowledge in the e-Government areaarea

Developing audit perspectives, methods and practices on Developing audit perspectives, methods and practices on e-governmente-government

Training and educationTraining and education Joint international auditsJoint international audits


55


The Committee took up The Committee took up three projects:three projects: Collecting and distributing e-Collecting and distributing e-

Government audit reportsGovernment audit reports Collecting and distributing e-Collecting and distributing e-

Government material in Government material in generalgeneral

Developing best practices in Developing best practices in auditing e-Governmentauditing e-Government rather than produce rather than produce

“checklists” for auditing e-“checklists” for auditing e-Government - focuse on Government - focuse on specific questions and risks specific questions and risks related to e-Governmentrelated to e-Government - - Life-cycle-risksLife-cycle-risks

A Task Force was set A Task Force was set up coordinated by up coordinated by

the SAI of Norway the SAI of Norway and with the SAIs and with the SAIs

of of United KingdomUnited Kingdom

USAUSA CanadaCanada India India Sweden Sweden as project as project

membersmembers


66

Auditing e-Government - Auditing e-Government - DatabaseDatabase

database for material retentiondatabase for material retention template to ensure the database is populated consistentlytemplate to ensure the database is populated consistently keywords to provide a search capabilitykeywords to provide a search capability expandable for future use for other materials and projects in expandable for future use for other materials and projects in

this areathis area make use of material in the database to develop further audit make use of material in the database to develop further audit

methods and perspectivesmethods and perspectives

Important for the SAIs themselves to contribute in Important for the SAIs themselves to contribute in submitting their own reports into the databasesubmitting their own reports into the database

The database can be accessed at:The database can be accessed at: http://www.nao.org.uk/intosai/edp/dbase/user/Publications.asphttp://www.nao.org.uk/intosai/edp/dbase/user/Publications.asp


77

Auditing e-Government - Auditing e-Government - Life-cycle risksLife-cycle risks

Life-cycle risksLife-cycle risks • Assigned specific risks (170) related to Assigned specific risks (170) related to

auditing e-Government as they may surface auditing e-Government as they may surface in different levels and through different in different levels and through different phases of implementing e-Governmental phases of implementing e-Governmental projects and solutionsprojects and solutions

• Ie report on Ie report on http://http://www.nao.org.uk/intosai/edp/dbase/user/Publications.www.nao.org.uk/intosai/edp/dbase/user/Publications.aspasp


88

Auditing e-Government - Auditing e-Government - Challenges ahead – as seen in 2005Challenges ahead – as seen in 2005

The success of the project was defined as to The success of the project was defined as to whether all SAIs (including those outside the whether all SAIs (including those outside the Committee) contributed to populate and made Committee) contributed to populate and made use of the databaseuse of the database

Make the database a useful tool in exchanging scopes, Make the database a useful tool in exchanging scopes, audit criteria and experiences of SAIs and governments audit criteria and experiences of SAIs and governments in developing e-Governmentin developing e-Government

Updating the risk-documentUpdating the risk-document

Maintenance of the databaseMaintenance of the database


99

Updating the risk-documentUpdating the risk-document

Life-Cycle risks in

e-Government


1010

Broad Risk AreasBroad Risk Areas

Initiating and supporting e-Initiating and supporting e-Government investment proposalsGovernment investment proposals

Implementing e-Government Implementing e-Government servicesservices

Consequences of performing e-Consequences of performing e-Government servicesGovernment services


1111

Characteristics of Characteristics of E-Government SystemsE-Government Systems

Consists of open systems which are exposed to Consists of open systems which are exposed to more and different risks than traditional systemsmore and different risks than traditional systems

Widespread use of technology provides new Widespread use of technology provides new challenges to governments, organizations and challenges to governments, organizations and auditorsauditors

Widespread distribution increases the need to Widespread distribution increases the need to provide security, control, and privacyprovide security, control, and privacy


1212

Life-Cycle of e-Government ProjectsLife-Cycle of e-Government ProjectsInitiationInitiation– Initial articulation of Initial articulation of

intention and visionintention and visionPlanning and Planning and ImplementingImplementing– Resources, Inter-Resources, Inter-

operatibility, info operatibility, info sharingsharing

OperationsOperations– Reliable day to day and Reliable day to day and

progressive integrationprogressive integrationMonitoringMonitoring– Build-up of services and Build-up of services and

meeting needsmeeting needs

E-Government

Project

Life-Cycle

MonitoringInitiation

Planning and

implementing

Operations


1313

Life-Cycle risks in e-Government

Adresses issues systematically at all 4 Adresses issues systematically at all 4 stages:stages: InitiationInitiation Planning and implementationPlanning and implementation OperationsOperations MonitoringMonitoring

on both on both state/governmental levelstate/governmental level departemental level departemental level


1414

E-Government development E-Government development around the worldaround the world

More countries are using information and communication technologies toprovide information to their citizensto provide the possibility of online

financial transactionsto include citizens in e-consultation and

e-decisionmaking


1515

UN survey 2008UN survey 2008

From e-Government to From e-Government to Connected GoveranceConnected Goverance

www.unpan.org/egovernment.aspwww.unpan.org/egovernment.asp


1616


An effectiv connected government is about a An effectiv connected government is about a ”better and bigger” front-end and a ”smaller and ”better and bigger” front-end and a ”smaller and smarter” back-endsmarter” back-end

The end-goal of all e-Government and connected The end-goal of all e-Government and connected governance must remain better public service governance must remain better public service deliverydelivery

The real benefit of e-Government lies not in the The real benefit of e-Government lies not in the use of technology but in its application to use of technology but in its application to processess of transformations processess of transformations


1717


Governments are moving forward in e-Governments are moving forward in e-government development around the government development around the world – world – BUTBUT progress is slow progress is slow

Only a few government have made Only a few government have made necessary investment to move from e-necessary investment to move from e-governments applications to a more governments applications to a more integrated connected governance stage integrated connected governance stage


1818

Large differences between the five Large differences between the five regions in terms of readinessregions in terms of readiness


1919

Large differences between the five regions Large differences between the five regions in terms of readinessin terms of readiness

Of the top 35 countriesOf the top 35 countriesEuropean countries made up 70 %European countries made up 70 %

– Sweeden, Denmark, Norway and US top 4 Sweeden, Denmark, Norway and US top 4

Asian countries made up 20 % Asian countries made up 20 %

The sucssess of Eoupean countries are The sucssess of Eoupean countries are largely due to investments in:largely due to investments in:

InfrastructureInfrastructurecitizen-friendly portalsonline applicationsback office integration


2020

Citizen engagement Citizen engagement – the e-participation– the e-participation

Modest upward Modest upward movement – 189 movement – 189 countries onlinecountries online– a greater number of a greater number of

countries were in the countries were in the middel to top one middel to top one third in e-third in e-participation participation utilizationutilization

– Still 82 % in the Still 82 % in the lower one thirdlower one third

US scored highest US scored highest followed by Rebublic followed by Rebublic of Korea of Korea – due to strenght in e-due to strenght in e-

information and e-information and e-consultationconsultation


2121

Web Measurement Assessment

The Scandinavian countries have taken the lead in the web measure index taking three of the top four positions

Countries must continue to improve their national and ministry portals and websites to keep up with the demands of their citizens

All of this must be provided on a secure, seamless, integrated and confidential network.

Countries that do not maintain this constant push to provide more online applications and tools will be left behind


2222

Number of Countries with Interactive Services


2323

E-Consulting Services


2424

Transactional Services


2525

E-Government Service Delivery


2626

Transactional Services: Top 10 Countries


2727

E-Decision-MakingOnly 11 per cent committed themselves to incorporating the results of e-participation into the decision-making process

For e-government to be successful, governments should engage their citizens and incorporate their views, expectations and concerns into policies. This knowledge will build greater trust and confidence between citizens and their governments.


2828

Update e-Government Risks Update e-Government Risks - - decided at 18th meeting in WGITAdecided at 18th meeting in WGITA

Attend EUROSAI IT-Workinggroup meetingAttend EUROSAI IT-Workinggroup meetingUpdate the 170 risks to fit the EUROSAI Update the 170 risks to fit the EUROSAI framework “The e-Government risk-cube”framework “The e-Government risk-cube” by by October 2009October 2009Send draft updated risks for exposure among Send draft updated risks for exposure among WGITAs members in November 2009WGITAs members in November 2009Deadline for comments medio JanuaryDeadline for comments medio JanuaryPresent updated report at WGITAs 19th meeting Present updated report at WGITAs 19th meeting in Bejingin Bejing


2929

Cooperation with Cooperation with EUROSAI IT Working GroupEUROSAI IT Working Group

””The Cube”The Cube”– development development

of an of an algorithmalgorithm

– Headed by the Headed by the SAI of Poland - SAI of Poland - NIKNIK


3030

Cooperation with Cooperation with EUROSAI IT Working Group - statusEUROSAI IT Working Group - status

Linking “The Cube” to the work on WGITA Risks Linking “The Cube” to the work on WGITA Risks adds valueadds value– Working with different options, for ie:Working with different options, for ie:

the linkage could be done assigning each risk (ca 170) to the linkage could be done assigning each risk (ca 170) to the 27 cube cellsthe 27 cube cellsassigning each risk to the flowcharts’ steps to which each assigning each risk to the flowcharts’ steps to which each algorithm description page is assigned algorithm description page is assigned

EUROSAI IT WG has not made intended progress EUROSAI IT WG has not made intended progress in developement of the tool uptill datein developement of the tool uptill date


3131

Update e-Government RisksUpdate e-Government Risks- where to og from herewhere to og from here

WGITA updates the e-Government risks in the WGITA updates the e-Government risks in the present structurpresent structur– Responibility of Task Force on e-Government – Responibility of Task Force on e-Government –

Norway coordinates the workNorway coordinates the work

EUROSAI WG is welcome to make use of WGITAs EUROSAI WG is welcome to make use of WGITAs material to find appropriate linkagematerial to find appropriate linkage

Report back at next meeting in WGITAReport back at next meeting in WGITA


3232

Questions/Thank You Questions/Thank You

Erna J. LeaErna J. LeaDeputy Director GeneralDeputy Director General

Office of the Auditor General of NorwayOffice of the Auditor General of Norway

Tel: +4722241070Tel: +4722241070

E-mail:E-mail: [email protected]@riksrevisjonen.no

www.riksrevisjonen.nowww.riksrevisjonen.no

19th wgita-meeting beijing april 2010 - auditing e-government 1

Documents

auditing egovernment

auditing e government

e government material

area egovernment

egovernment area

egovernment training

e government audit reports

government agencies