1. Baseline Framework Reforms Progress: Information Technology Ezra Dick & Tony Lester August 2011

2. Purpose of Presentation In this presentation we will discuss  Observations & perspective of my role  Recap the recent PITAA IT Workshop  Outline the findings from that workshop  Discuss whether these findings are the right areas of focus This session will be followed by updates on progress from some PITAA countries. 2

3. Observations & Perspective of my role Help countries build pragmatic, Best Practice IT Strategic Plans (ITSP). Focus on:  10 Core modules for Tax Administrations  Use a series of guiding Principles for both IT & Business The ITSP is Business Focussed. High level costs are identified. Aim to consult widely both internally & externally. 3

4. Recap the recent PITAA IT Workshop Excellent workshop undertaken. Wide range of capabilities on display. Excellent progress has been made by some PITAA countries. Others now realise what is required. Amazing skills within this region. Course attendees have identified key areas for them to focus on at home. OCO presentation identified similar issues that we are experiencing. 4

5. Findings from the recent PITAA IT Conference Seven priority activity groups identified i.Business Ownership for IT systems ii.Preparing the business case to gain political and other support iii.Change Management iv.People Capability v.Staff Retention vi.IT Risks vii.Data Torque We will quickly discuss these to help us confirm/disagree on their appropriateness. 5

6. Business Ownership for IT Systems All attendees agreed with concept. Logical business units for each system. Business owners need to be involved from the start  Power/Key Business users could be the starting point Business owners accountable for all decisions. IT has a role to inform business owners on new opportunities. 6

7. Preparing the business case to gain political and other support “Business Case is more than the paper it is written on.” Two aims - business case & marketing tool. Are there successful working examples in the region? Must link to:  Your Corporate documents  Current government policies & direction  Other agencies direction to reflect total government view Timing is of the essence. Do not over promise – conservative cost benefit. Prepare for negative feedback. Understand you are competing for government funding. 7

8. Change Management NOT an IT issue. Study all stakeholder needs & undertake constant feedback. Some people do not like change.  Be prepared for negative response - FAQs Target messages appropriately – WIIFM. Understand all costs fully. 8

9. People Capability Significant capability already in the region, you have regional experts NOW. In-country training, countries train countries. Exchange program. Share documents/resources NOW. PICs forums to continue  PFTAC  Data Torque Not always in house, can be supplemented by contractors. 9

10. Staff Retention Become an “employer of choice.” Ensure right skills are recruited. If possible, meet market recruitment conditions:  Current public service regulations do not help Management must lead by example. Consider lifestyle choice opportunities. Staff rotations/training developments. Incentive to become a “Regional Expert.” 10

11. IT Risks: Disaster Recovery, Business Continuity Planning Two main areas of concern: 1.Disaster Recovery (DR)/Business Continuity Planning (BCP) i.One size does not fit all. ii.If you have NO PLANS start somewhere – document your current environment. iii.Test your documents and procedures regularly. iv.Offshore data storage is an acceptable component. v.Build towards complete DR/BCP plans i.Share any existing documents now vi.Widely communicate the need for these plans. vii.Treat this matter with the Management oversight and budget it deserves. 11

12. IT Risks: Security Capability 2. Security Capability i.One size does not fit all. ii.If you have no security policy, document what is happening now. iii.Government has a role to play i.Setting standards and policies ii.Undertaking audits iv.Regular review and audit of security by both internal and external resources. v.Place more emphasis on security training. vi.Clearly communicate reasons for security. vii.Be aware of professional skills that can assist i.Share any existing documents now viii.Security is typically role based. 12

13. Data Torque Consider combined maintenance agreements for smaller PICs. Why are PICs not seeing cost of entry price reductions? Still see merit in a Regional Support Centre. Systems issues are not being shared across PICs via Time Torque. If appropriate consider group study tours. 13

14. Key Areas of Focus for Course Attendees 14 Staff Retention & CapabilityFiji, FSM, Samoa, Solomon Is, Tuvalu Vanuatu Change ManagementPNG, Samoa Disaster Recovery/BCP Fiji, Kiribati, PNG, Solomon Is, Tonga, Vanuatu Business Case/Funding approachTonga, Vanuatu IT InfrastructureTuvalu ITSPFSM, Marshall Is. Information SharingMarshall Is., Solomon Is. Risk Management - disaster recovery starting at a very basic level Tonga Website & IntranetKiribati Business OwnershipFiji, Kiribati Core System RequirementsKiribati System Security/AuditFiji

15. Discussion We will quickly discuss these to help us confirm/disagree on their appropriateness. Have we identified the right 7 issues? 15