Minimum assurance implementation requirements for investment tiers
In-scope digital investments are assigned one of 3 tiers under the Digital Transformation Agency’s (DTA) Investment Tiering Model. This model is designed to focus oversight attention on the most important investments and ensure lower risk and/or lower value investments are not unnecessarily burdened by excessive levels of assurance oversight.
The tier is determined by the DTA in consultation with the lead agency for an in-scope digital investment.
Regardless of tier, you must demonstrate that assurance is being applied effectively throughout delivery and must also meet the minimum requirements.
For more information, refer to the Assurance Framework for Digital & ICT Investments.
| Minimum Requirements | Tier 1 Flagship digital investments | Tier 2 Strategically significant digital investments | Tier 3 Significant digital investments |
|---|---|---|---|
Assurance Plan updates Regularly update your Assurance Plan to maintain its currency and share it with the DTA for review and agreement. Provide the DTA with the final version approved by your Senior Responsible Official (SRO) and endorsed by the relevant governance board. | Every 6 months | Every 12 months | As needed |
Material variations to assurance Advise the DTA when there is a material variation from planned assurance arrangements. | Yes | Yes | Yes |
Benefits Management and Realisation Update benefits maps, profiles and realisation plans regularly throughout the benefits management lifecycle. Provide the DTA with the updated version approved by the SRO. All benefit variations must, at a minimum, be signed off by the SRO and Benefit Owner, and submitted to the DTA in accordance with the Benefit Profile Variation Agency Guidance. | As needed | As needed | As needed |
Engaging independent assurance providers Provide the DTA with documentation that clearly defines the scope and direction of your independent assurance activity. These materials may include a Request for Quote, Statement
| Agree materials with the DTA prior to your approach to market, and successive independent assurance activity commencement, where applicable. | Provide materials to the DTA for comment, prior to independent assurance activity commencement, where applicable.
| Support available on request |
Assurance activities Complete regular independent assurance activities that provide a Delivery Confidence Assessment (DCA) rating on the overall health of the investment. Note: Gateway Review reports will be handled in accordance with agreed protocols for the handling of Gateway material. | Quarterly Provide draft and final assurance reports to the DTA, ensuring a DCA rating is produced on a quarterly basis. Also provide regular reporting to the DTA on recommendation implementation progress. | Every 6 months Provide final versions of assurance reports to the DTA, ensuring a DCA rating is produced every 6 months. Also provide summary reporting to the DTA on recommendation implementation progress. | As needed |
DTA representation on primary governance boards For projects approved at or after the 2024-25 Budget, SROs are required to complete the Digital Governance Program. | You must include DTA on the investment’s primary governance board. | If requested by the DTA, you will be required to include a DTA representative on the investment’s governance board. | Not required |
SRO completion of the Digital Governance Program For projects approved at or after the 2024-25 Budget, SROs are required to complete the Digital Governance Program. | Yes | Yes | Yes |