The Official Report is a written record of public meetings of the Parliament and committees.
All Official Reports of meetings in the Debating Chamber of the Scottish Parliament.
All Official Reports of public meetings of committees.
Displaying 3919 contributions
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
Moving on to questions on governance, assurance and oversight of major ICT projects, I call Willie Coffey, who also joins us by videolink.
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
For the sake of completeness, have there been any cyberattacks by Russian sources over the past six weeks?
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
But clearly you remain vigilant.
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
One reason why the committee has had an interest in major ICT projects down the years is because there have been some fairly notorious cost overruns and failed applications such as those in NHS 24, the Scottish Public Pensions Agency, the common agricultural policy futures programme and the police i6 project, which has been mentioned.
I want to go back to your point that there is an existing structure of accountable officers. The committee has previously said that a much firmer grip needs to be taken of the issue and that there need to be much clearer lines of responsibility. As I understand it from reading the list of Police Scotland IT projects, it has five or six on at the moment—well, five, anyway. There are projects on the unified communications and contact platform, digital evidence-sharing capability, the national integrated command and control system, core operational solutions and mobile working. Who has oversight of all those different projects?
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
What is different now compared to the position when the i6 project was under way?
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
We have a final couple of questions from Sharon Dowey, who is also joining us via a video link.
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
I turn to Willie Coffey, who is joining us through a videolink. It is not solely an audio link, Willie; we can see you, too.
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
Agenda item 2 is consideration of the oversight and governance arrangements for major information and communications technology projects in Scotland, which is an issue that the committee has taken an interest in for a number of years. We will take evidence on that from a number of Scottish Government representatives: Sharon Fairweather, director of internal audit and assurance; Geoff Huggins, director of digital; Jonathan Ruff, head of digital strategy and policy; and Donald McGillivray, director of safer communities.
We will go straight to questions, and I will begin by asking about a matter that is preying on many of our minds. The National Cyber Security Centre has issued organisations with guidance on what to do, given the heightened state of alert around cyberattacks. Can one of you tell us whether the Scottish Government has been holding discussions with public sector bodies about the heightened risk in light of the Russian invasion of Ukraine?
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
Has the state of alert been increased in light of the events that have unfolded over the past few weeks?
Public Audit Committee
Meeting date: 31 March 2022
Richard Leonard
I should also say that we are getting tight for time.