In this part of the report, we assess whether DHHS can effectively recover its critical ICT systems and data if a disruption occurs.

DHHS's disaster recovery processes are not robust enough to effectively and efficiently recover all critical systems after a disruption. DHHS currently only has capability to recover selected critical systems. The department needs to further develop its disaster recovery processes and capabilities to minimise any loss of critical services in the event of a disruption.

In this part of the report, we assess whether DELWP can effectively recover its critical ICT systems and data if a disruption occurs.

DELWP's disaster recovery processes are not robust enough to effectively and efficiently recover all critical systems after a disruption. DELWP currently only has capability to recover selected critical systems. The department needs to further develop its disaster recovery processes and capabilities to minimise any loss of critical services in the event of a disruption.

In this part of the report, we assess whether DEDJTR can effectively recover its critical ICT systems and data if a disruption occurs.

DEDJTR's disaster recovery processes are not robust enough to effectively and efficiently recover all critical systems after a disruption. DEDJTR currently only has capability to recover selected critical systems. The department needs to further develop its disaster recovery processes and capabilities to minimise any loss of critical services in the event of a disruption.

The Victorian Government delivers a diverse range of services that are important to the economic and social wellbeing of Victorians—from management of state finances to child protection and criminal justice.

Information and communications technology (ICT) systems are critical for the operations of government agencies. Agencies depend on them to:

Ordered to be published

VICTORIAN GOVERNMENT PRINTER November 2017

PP No 262, Session 2014–17

Accountability

Responsibility of public entities to achieve their objectives in the reliability of financial reporting, the effectiveness and efficiency of operations, compliance with applicable laws, and reporting to interested parties.

Adverse opinion

An audit opinion expressed if the auditor has sufficient appropriate audit evidence and concludes that misstatements, individually and in aggregate, are both material and pervasive in the financial report.

Figure D1
Risk definitions applied to issues reported in audit management letters