Key governance issues arise in MEGA-Projects

The British NAO's report highlights critical shortcomings in governance and decision-making processes affecting mega-projects across government. It identifies recurring issues that hinder effective management, emphasizing the need for improved governance frameworks to enhance accountability and strategic oversight. Key findings indicate that these weaknesses not only threaten project success but also result in significant financial and operational inefficiencies, necessitating immediate attention from policymakers to ensure better outcomes in future endeavors.

Lessons learned: Governance and decision‑making on mega‑projects

UK 2025: Project management

SATCOM transition faces reporting gaps

The GAO reports covers many interesting remarks concerning satellite communication under Department of Defense (DOD). The gist of their audit is, however, need for quality systemic control over communication between Government and Lawmaker.

DOD SATELLITE COMMUNICATIONS: Reporting on Progress Needed to Provide Insight on New Approach

US 2025: Public e-services

Drinking water management faces strategic and data gaps

The Netherlands Court of Audit has conducted an extensive audit addressing the critical issue of drinking water security, highlighting that the current policy results concerning drinking water savings are deemed worrying. The audit underscores the urgency of implementing effective measures, as societal pressures and the risk of water shortages necessitate a sustainable approach to water management. The findings emphasize that substantial efforts are required to maintain the quality and availability of drinking water, reflecting the need for comprehensive strategies and actions from the Ministry of Infrastructure and Water Management to ensure future resilience and security in drinking water supply.

Drinking water under pressure

NL 2025: Public e-services

Sharing information on cyber threats to critical infrastructure

This report examines, how US federal agencies, and critical infrastructure owners and operators share cyber threat information. The GAO auditors found that the threat sharing challenges have not been fully resolved. Causes of problems were found in: resources, guidance, communication, access policies, process design.

National Cybersecurity Strategy Needs to Address Information Sharing Performance Measures and Methods

US 2023: Information security

Government faces critical cybersecurity challenges ahead

The UK National Audit Office's report highlights a pressing need for government departments to enhance their governance, accountability, and reporting arrangements concerning cyber risk. It emphasizes that to effectively mitigate threats, departments must rigorously assess their compliance with the cyber security standards. The findings reveal that significant progress is required to achieve a resilient cyber posture, ensuring robust protection against persistent and evolving cyber threats.

Government cyber resilience

UK 2025: Information security

Coordination of Information Protecting system

The UK National Audit Office noticed that in recent years, cuts to departmental budgets and staff numbers, and increasing demands from citizens for online public services, have changed the way government collects, stores and manages information. Concurrently, the threat of electronic data loss from cyber crime, espionage and accidental disclosure has risen considerably. The NAO’s audit results in emphasising role of the whole system coordination.

Protecting information across government

UK 2016: Information security

Who’s there? - Establishing identity at government agencies

The Swedish NAO auditors examined system of establishing the identity of individuals entering Sweden. The audit report highlights a need for stronger expertise, clearer responsibilities, and improved use of biometric data to ensure accurate and unique identity verification

Who’s there? - Establishing identity at government agencies

SE 2024: Public e-services

AI and security of critical infrastructure

The US GAO has reported significant shortcomings in the current AI risk assessments conducted across critical infrastructure sectors. Key findings reveal that while sector risk management agencies have identified some AI use cases and potential risks, the majority failed to adequately assess the likelihood of threats exploiting vulnerabilities and did not fully evaluate the level of risk. This highlights an urgent need for improved guidance and methodologies to enhance the robustness of risk assessments related to artificial intelligence in critical infrastructure.

ARTIFICIAL INTELLIGENCE: DHS Needs to Improve Risk Assessment Guidance for Critical Infrastructure Sectors

US 2025: Public e-services

Preparing to AI requires time

The British NAO covered strategy and governance, use of artificial intelligence in government and future opportunities. The auditors considered also support for adopting and scaling AI. They point out fundamental areas to exploiting AI opportunities: “updating legacy systems and improving data quality and access”. NAO noticed at the same time that it will take time to implement.

Use of artificial intelligence in government

UK 2024: Artificial intelligence

Urgent reforms needed for troubled IT investments

The US GAO highlights significant challenges in federal IT acquisition and management, underscoring that over $100 billion invested annually often fails to deliver timely capabilities, incurs cost overruns, and lacks effective management. Despite substantial investments aimed at maintaining and developing critical systems, many projects fall short on mission-related outcomes due to deficiencies in project planning, requirements definition, and oversight, necessitating urgent reforms to enhance accountability and performance in federal IT initiatives.

Critical Actions Needed to Urgently Address IT Acquisition and Management Challenges

US 2025: Public e-services

Unclarities make task harder

The Swedish NAO audited Commission focusing on integrity across law enforcement agencies. Among findings were: lack of clarity on the administrative support it receives and a risk of tasks unbalanced with capacities.

Oversight of law enforcement agencies - An audit of the Swedish Commission on Security and IntegrityProtection

SE 2016: Professional integrity

Help, measure and analize

US GAO reviewed Early Hearing Detection and Intervention (EHDI) program and discovered that although there is evidence supporting its effectiveness, some children in need may not have appropriate access to them. The audit findings show among others that measurement of the program performance requires improvement, as well as analysis of its results.

HEARING DETECTION AND INTERVENTION: Program Connects Deaf or Hard of Hearing Infants and Children to Services, but Actions Needed to Improve Access

US 2025: Public e-services

Incomplete implementation

The SAI Kosovo audit covered digitizing the management of pharmaceutical stock in healthcare institutions to supply medicines and disposable materials to patients from essential and non-essential lists. It was revealed that the system was not fully implemented in all healthcare units, like pharmacies in hospital wards and clinics, as well as Family Medicine Centers. This has led to inadequate management of pharmaceutical stock, lack of proper planning, and inefficient use of medicines and medical supplies.

Pharmaceutical Stock Information Management System

KS 2024: Public e-services

Cyber security of critical water structures not watertight

Dutch SAI examined the way in which the Directorate-General for Public Works and Water Management are prepared to deal with cyber threats to critical water structures. The audit analyses what scenarios and tools can be applied to detect cyber threats and protect water structures against cyber attacks. It also reviews if the tools for detecting cyber threats and attacks are effective and whether they offer sufficient protection.

Strengthening the digital defences: the cyber security and critical water structures

NL 2019: Information security

Ransomware - significant security challenge to critical infrastructure

The US GAO report describes the impact of ransomware attacks on the nation's critical infrastructure, assesses federal agencies' efforts to implement best practices across sectors, and analyzes their actions to evaluate ransomware risks and the effectiveness of support. To achieve this, US GAO examined four critical infrastructure sectors.

CRITICAL INFRASTRUCTURE PROTECTION: Agencies Need to Enhance Oversight of Ransomware Practices and Assess Federal Support

US 2024: Information security