Entitlements Management System (EMS) Technology Update Project Health Check Review



Similar documents
Aberdeen City Council IT Security (Network and perimeter)

Aberdeen City Council IT Governance

Aberdeen City Council IT Disaster Recovery

Process Improvement Plan

Aberdeen City Council IT Asset Management

INSURANCE ACT 2008 CORPORATE GOVERNANCE CODE OF PRACTICE FOR REGULATED INSURANCE ENTITIES

Oxford City Council Managing Capital Projects

Bridgend County Borough Council. Corporate Risk Management Policy

Information Commissioner's Office

Audit Committee, 20 March Internal Audit Report Partners Expenses. Executive summary and recommendations. Introduction

The report rated this area Substantial Assurance and made 2 housekeeping recommendations.

LONDON BOROUGH OF SOUTHWARK

Item 10 Appendix 1d Final Internal Audit Report Performance Management Greater London Authority April 2010

Office of the Auditor General AUDIT OF IT GOVERNANCE. Tabled at Audit Committee March 12, 2015

MNLARS Project Audit Checklist

Project Audit & Review Checklist. The following provides a detailed checklist to assist the PPO with reviewing the health of a project:

The University s responsibilities and its arrangements for internal audit Internal audit protocol 2014/15 to 2016/17

PROJECT MANAGEMENT FRAMEWORK

Auxilion Service Desk as a Service. Service Desk as a Service. Date January Commercial in Confidence Auxilion 2015 Page 1

Part E: Contract management

Aberdeen City Council. Fleet Management Final Report

Queensland State Archives. Strategic Recordkeeping Implementation Plan Workbook

Australian National Audit Office. Human Resource Management Performance Audit

Assuring success in large business programs Internal audit s role in strategic risk management

3D Online Education Initiative

Internal Audit. Audit of HRIS: A Human Resources Management Enabler

Information Commissioner's Office

South Northamptonshire Council Contract Assurance: Leisure Contract

Cyber Security Consultancy Standard. Version 0.2 Crown Copyright 2015 All Rights Reserved. Page 1 of 13

Maine State Innovation Model Risk and Issue Mitigation Plan and Process

Project Charter. ISO 20k Certification Project

Delivering deal value

Driving Excellence in Implementation and Beyond The Underlying Quality Principles

Standard Terms of Engagement. and. Terms of Business

Integrated Risk Management:

Status Report of the Auditor General of Canada to the House of Commons

GUIDANCE FOR MANAGING THIRD-PARTY RISK

Project Governance Plan Next Generation Project Oregon Military Department, Office of Emergency Management, Program (The OEM 9-1-1)

Department of the Environment and Local Government. Project Management. Public Private Partnership Guidance Note April 2000

IBM Global Technology Services Statement of Work. for. IBM Infrastructure Security Services - Penetration Testing - Express Penetration Testing

Goodbye, SAS 70! Hello, SSAE 16!

Governance, Risk and Best Value Committee

Smart Meters Programme Schedule 2.5. (Security Management Plan) (CSP South version)

Project Knowledge Areas

Insurer audit manual

Information Management Advice 35: Implementing Information Security Part 1: A Step by Step Approach to your Agency Project

An Introduction to Risk Management. For Event Holders in Western Australia. May 2014

Knowledge is power. Consumer Protection Act Series #1

INTERNAL AUDIT DIVISION AUDIT REPORT 2013/020. Audit of the Umoja software system (SAP) implementation

Building a Strategic Internal Audit Function. A 10-Step Framework

Quick Guide: Managing ICT Risk for Business

Gateway review guidebook. for project owners and review teams

State University of New York Charter Renewal Benchmarks Version 5.0, May 2012

Auditor General s Office. Governance and Management of City Computer Software Needs Improvement

How To Design A Project

Datalynx Project Delivery Methodology and PCTM Methodology For Legacy Data Cleansing & Migration

BRITISH COLUMBIA INSTITUTE OF TECHNOLOGY ( BCIT ) PROJECT BUSINESS PLAN PROPOSAL TEMPLATE

FISCAL PLAN RESPONSE TO THE AUDITOR GENERAL

INTERNAL AUDIT SERVICES Glenorchy City Council Internal audit report of Derwent Entertainment Centre financial business and operating systems

External Audit BV Performance Report: Delivering Change Management and Financial Sustainability

The principal purposes of the Audit Committee ( Committee ) of the Board of Directors ( Board ) of CSRA Inc. (the Company ) are to:

OFFICE OF THE PRIVACY COMMISSIONER OF CANADA. Audit of Human Resource Management

INTERNATIONAL STANDARD ON AUDITING 620 USING THE WORK OF AN AUDITOR S EXPERT CONTENTS

STUDENT INFORMATION SYSTEM PLANNING PROJECT

Informing the audit risk assessment Enquiries to those charged with governance Calderdale Council. Year ended 31 March 2013

Special Purpose Reports on the Effectiveness of Control Procedures

2015 Release Review. Overarching Report

ERP Systems: Audit and Control Risks

Membership Application OTASA Scheme of Co-operation

Metrics by design A practical approach to measuring internal audit performance

Pre- Hospital Emergency Care and Dublin Fire Brigade

Safety Regulation Group SAFETY MANAGEMENT SYSTEMS GUIDANCE TO ORGANISATIONS. April

Performance Detailed Report. May Review of Performance Management. Norwich City Council. Audit 2007/08

Internal Audit at the University of Cambridge.

Risk Methodology. Contents. Introduction The Risk Management Structure The Risk Management Cycle Methodology...

ITIL v3 Process Cheat Sheets

Information Technology Project Oversight Framework

FIDUCIAN AUSTRALIAN SHARES FUND

ERM Program. Enterprise Risk Management Guideline

Strategic Plan. New Zealand Fire Service Commission to

Module 6 Documenting Processes and Controls

Building a Strategic Internal Audit Function

Guidance Statement GS 011 Third Party Access to Audit Working Papers

1. Trustees annual report

NSW GOVERNMENT RESPONSE

National IT Project Management Methodology

Transcription:

Entitlements Management System (EMS) Technology Update Project Health Check Review February 2010 Final This report and PricewaterhouseCoopers deliverables are intended solely for the Department of Finance and Deregulation s internal use and benefit and may not be relied on by any other party. This report may not be distributed to, discussed with, or otherwise disclosed to any other party without PricewaterhouseCoopers prior written consent. PricewaterhouseCoopers accept no liability or responsibility to any other party who gains access to this report. Liability is limited by the Accountant's Scheme under the Professional Standards Act 1994 (NSW) 1

1. Executive Summary Introduction PricewaterhouseCoopers has been engaged by the Ministerial & Parliamentary Services (M&PS) Division to perform a point-in-time project health check review of the Entitlements Management System (EMS) Technology Update project. The purpose of this review was to determine whether appropriate project management processes and supporting procedures were in place to enable the effective management of project risk. Our terms of reference required specific focus on whether: the scope of the project has been defined, agreed, is realistic and properly managed; project plans and schedules have been developed and are maintained to support the achievement of project objectives; stakeholders have been appropriately engaged and are committed to the project. This will also assess project governance structures; adequate staffing and skills have been allocated to the team to support the project; risks and issues are appropriately identified, mitigated and monitored effectively and do not threaten implementation; and business benefits have been sufficiently identified and are measurable. This report provides a high level traffic light view of project status and notes key strengths and opportunities for improvements. Current Status & Opportunities for improvement Overall the project has been assessed as Amber, representing moderate risk. This rating is mainly due to the recent departure of the project manager, with arrangements for a replacement yet to be confirmed at the time of the review fieldwork. This introduces a risk that the project could lose momentum and incur delays as a result. This will need to be closely monitored by the Steering Committee during the new project manager s transition. Other key areas for improvement noted during the review included: developing a strategy that defines how the delivery of project objectives and benefits will be measured and monitored confirming business project resources and effort, including testing, given the recent structural and responsibility changes within M&PS enhancing key project documentation and ensuring all project documentation is stored on the Project server. Key strengths and improvement opportunities have been detailed further in Section 3 of this report. Our work was limited to that described in this report and was performed in accordance with International Standards for the Professional Practice of Internal Auditing from the Institute of Internal Auditors. It did not constitute an examination or a review in accordance with generally accepted auditing standards or assurance standards. Accordingly, we provide no opinion or other form of assurance with regard to our work or the information upon which our work was based. We did not audit or otherwise verify the information supplied to us in connections with this engagement, except to the extent specified in this report or our approved objectives and scope. 2

2. Summary project assessment The following provides an overview of our assessment of the EMS Technology Update project against the Six Pillars of Project Excellence 1. Overall assessment as at February 2010 Overall assessment (EMS Technology Update Project) Current Status Amber Key Points Project progressing well Recent departure of Project Manager Some resourcing effort yet to be determined and allocated Assessment of the EMS Technology Update Project Focus areas 2 Scope is realistic and managed Current Status (February 2010) Green Key points Approved Business Case and Project Proposal Comprehensive Project Plan Project costing tracked and reported Formal Project Change Request Process Business benefits are realised Green Business benefits defined Plan to measure benefits lacking Work and schedule are predictable Stakeholders are committed (Governance focus) Team is high performing (Limited assessment) Risks are mitigated Amber Green Amber Green Approved project schedule Minor project delays due to limited Subject Matter Expertise availability Some documentation not stored on Project server Testing effort to be determined Good executive level support Effective governance mechanisms Roles and responsibilities defined Formal Terms of Reference for Steering Committee Regular communication amongst stakeholders The project team is committed Project manager has recently departed Arrangements for new project manager to be finalised Structural changes in M&PS group are occurring Risk assessment and issues register exist Risks managed and monitored regularly Project funding not considered as a risk Legend: Significant risk area Moderate risk area Minimal to no issues Requires immediate management attention Requires consideration noted 1 Based on PwC s 6 pillars of Project Excellence, outlined at Appendix A 3

3. Key strengths and opportunities for improvement A high level summary of strengths and opportunities for improvement associated with the review are detailed in the table below. Key Strengths Scope Management Approved Business Case and Project Proposal which outline a defined scope and project objectives, alternative options have been considered. Project Plan is comprehensive. Project costing is being tracked and reported. Benefits Management Business benefits have been documented in the Business Case including: Project Schedule Cost-related benefits Service related benefits Qualitative benefits. Projected timelines and expected completion date of project are defined through the project schedule. Stakeholder Management & Governance Good executive level support for the project. Effective governance mechanisms are in place to steer the project. Roles and responsibilities for governance arrangements have been clearly identified. Communication amongst stakeholders is occurring on a regular basis. Team The project team is committed to ensuring the project is successfully delivered. There is a positive collaborative relationship between M&PS and BASB on the project. Risk Management Risk assessment and issues register have been developed and are being maintained regularly. Risks are a focus point for discussion by the Steering Committee. Opportunities for Improvement 1. Transition of new Project Manager: Arrangements for a dedicated replacement project manager should be confirmed to ensure that there is little impact to the momentum of the project. Suitable support should be given to the new project manager to ensure they can quickly grasp the status and requirements of their role for the project. The Steering Committee should pay particular attention to project progress during the new project managers transition. 2. Development of configuration documentation: Finance should ensure sufficient configuration documentation is developed to support the project to reduce the risks associated with the key developer (with extensive legacy EMS knowledge) leaving the project. 3. Project resourcing to be determined: M&PS project resources should be identified and allocated given the revised structure, including those resources that will be utilised during the testing phases of the project. 4. Improvements to project documentation: Update the Project Management Plan to include the process for monitoring, tracking and reporting budget updates on a regular basis. Ensure all project documentation is retained on the designated Project server. Ensure that all status reporting include whether the project is on track, whether delays are expected, reasons for delays and the expected date for project completion. Update the Project Risk Register to include and assess the risk of the budget not being sufficient to cover the proposed body of work being conducted under the project. 5. Benefits realisation strategy to be defined: The EMS project should develop a strategy that defines how the achievement of project objectives and 4

benefits will be measured. This can be used to measure the success of the project. 5

Appendix A Focus areas of our project assessment The evaluation framework we use for our project assessment reviews is based on a core set of principles which we refer to as the Six Pillars of Project Excellence. This framework (as illustrated in the following diagram) provides a foundation for our assessments on all projects and has been used successfully in providing our independent, forward-looking views on the status of critical elements of major projects. The table below provides some further perspectives in respect of each of the six pillars of project excellence: Project Pillar: 1. Scope is realistic and managed Our experience tells us that project scope is often defined in more than one way and that an active, ongoing scope management process is needed to ensure that stakeholder expectations remain aligned with the agreed scope throughout the project. 2. Business benefits are realised Business benefits may be well defined at the outset, but without ongoing focus and accountability, their realisation is often elusive. Our evaluation will focus on the way the project plans for and tracks progress in relation to costs and business benefits, as well as responsibility and accountability for benefits realisation post-implementation. Liability is limited by the Accountant's Scheme under the Professional Standards Act 1994 (NSW) 6

Project Pillar: 3. Work and schedule are predictable Project plans and schedules may be well constructed, but may not take into account variables outside the control of the project. Our review will consider the quality of plans and schedules, including the effectiveness of tracking progress and updating plans to reflect emerging risks and issues. 4. Stakeholders are committed The needs and commitment of primary and secondary stakeholders need to be identified and monitored throughout the project. Where changes occur in the circumstances of key stakeholders, this can undermine commitment and in turn adversely impact the ability of the project to meet expectations. 5. Team is high performing This is a complex area, with many factors which can impact project effectiveness. Our review will consider the adequacy of staffing for the project; recruitment, development and retention strategies; and the management of risks related to staff turnover and performance. If considered appropriate, we will propose the involvement of some of our Performance Improvement specialists to assist in addressing issues related to people, culture and performance in the project. 6. Risks are understood and managed Risk management will be a core focus area of all our reviews. We will look beyond the normal processes of risk assessment and maintaining a risk register, to consider how the management of strategic and operational risk, including people related risk, is built into the structure and operations of the project. 7

www.pwc.com/au 2009 PricewaterhouseCoopers. All rights reserved. PricewaterhouseCoopers refers to the network of member firms of PricewaterhouseCoopers International Limited, each of which is a separate and independent legal entity. Liability is limited by the Accountant' s Scheme under the Professional Standards Act 1994 ( NSW) 8