Skip to main content

Language: English / Gàidhlig

Loading…

Seòmar agus comataidhean

Official Report: search what was said in Parliament

The Official Report is a written record of public meetings of the Parliament and committees.  

Criathragan Hide all filters

Dates of parliamentary sessions
  1. Session 1: 12 May 1999 to 31 March 2003
  2. Session 2: 7 May 2003 to 2 April 2007
  3. Session 3: 9 May 2007 to 22 March 2011
  4. Session 4: 11 May 2011 to 23 March 2016
  5. Session 5: 12 May 2016 to 5 May 2021
  6. Current session: 12 May 2021 to 22 April 2025
Select which types of business to include


Select level of detail in results

Displaying 2133 contributions

|

Local Government, Housing and Planning Committee

Local Governance Review

Meeting date: 13 December 2022

Willie Coffey

Thanks very much for that, everybody—it was very helpful.

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

The load testing did not pick up that the system might think that there was a cyberattack, but when the system went live in real time, it did.

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

Good morning, panel.

I want to start with Geoff Huggins, if I may. In your letter to the committee, Geoff, you mention some pilot projects looking at the spend control process in two areas, namely the Scottish Government’s payment service and telephony services, and you have highlighted a number of issues that have arisen in that respect. Can you tell us a wee bit more about the outcome of that work? My attention was drawn to the part of your submission where you say:

“On the basis of the pilot work … we are developing new thinking on how to secure greater value and improved outcomes in respect of digital delivery.”

Can you give us a wee glimpse of what you mean by that? What were the actual outcomes of that process?

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

You said that one of the lessons that you have learned is that such an approach could probably not be applied to all project work. I guess that you mean that getting that kind of information, which could then be applied across the board, would require too much investment, but would not applying the same rigour across the board give rise to any risks that you might be worried about?

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

Ultimately, though, it is the DAO that assesses the effectiveness of the process. Is it measured by results—that is, projects getting through to completion without being stopped or projects not going over budget or overrunning schedules? Is that how you measure the effectiveness of your processes?

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

Many thanks for that response. That was a positive note to end on.

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

Thank you very much, convener.

On the issue that Sharon Dowey has just raised, it seems from the explanation that no load testing of the system was carried out in advance. It is clear that that would and should have identified that the system would think that there was a cyberattack. Why was that not done in advance?

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

Okay. Thanks for that.

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

The submission says that the digital assurance office was established in 2019, but I also note that that was the last year in which a project was stopped for any reason. Has your experience since then benefited you by allowing you to identify as early as possible whether a project should or should not go forward? Are you saying that, since the DAO developed this process, every piece of work that has been undertaken has successfully gone through the various stages to completion?

Public Audit Committee

Major Information and Communications Technology Projects

Meeting date: 8 December 2022

Willie Coffey

Thank you for that.

It is the digital assurance framework itself that gives rise to my next question. How do we make sure that we have the right people and the right balance to review a particular piece of work? Perhaps that is a question for Sharon Fairweather. Looking at the organogram that you have submitted in your letter, Sharon, I find the set of structures with regard to officers and responsibilities fairly complex. What does it mean in practice? Moreover, given what Geoff Huggins has just said, how do you choose which skills to deploy in particular reviews that you undertake?