Swiss Federal Audit Office

(SFAO)

- DRAFT audit matrix -

Audit of the DTI key project Polycom Value Preservation 2030 with a focus on the border security subnetwork

2024 [summary] CH2024dtiPolycom
SCALE
  • - Polycom is the security radio system of Switzerland's authorities and organisations for rescue and security. Due to the manufacturer's change of technology, the system in Switzerland needs to be brought up to date. Parallel operation is necessary as long as both technologies are in use. The Federal Office for Customs and Border Security (FOCBS) is con- tributing around CHF 65 million to this technological development. Together with the Fed- eral Office for Civil Protection (FOCP), the Confederation is investing a total of around CHF 160 million in this project.
COMPLIANCE FOCUS
  • - Federal Act on Population Protection and Civil Protection of 20 December 2019
  • - Telecommunications Act of 30 April 1997
PERFORMANCE ASPECT
  • - project risks with regard to the achievement of objectives
  • - management in context of rapid technology transition
VALUES INVOLVED
  • - Community: safety
  • - Domain knowledge: industry-specific
(DRAFT audit matrix)

The integration of Polycom Value Preservation 2030 into the agile approach of the DaziT transformation project ensures a high level of visibility for the project. The working method in the project is flexible and solution-orientated. There is no steering committee for the project at tinhe FOCBS. The progress of the project is continuously monitored by DaziT in a ten-week planning cycle.

(DRAFT audit matrix)

Project tasks and risk management are strongly focused on the migration work. This has taken its toll and has led to a low level of readiness for the handover of operations . Important foundations for guaranteeing security in subsequent operations have fallen behind and are not yet sufficiently mature. (…) It is important to seize the moment because the level of knowledge surrounding the project is currently very high. For example, there are gaps in the content of concepts for IT security, network monitoring, maintenance planning and emergency plans.

(DRAFT audit matrix)

The FOCBS' existing operations team is preparing intensively for the technology change, but will only just be able to cover the planned service life due to its members reaching a certain age. The maintenance contract for the Polycom radio network will expire in 2030 at the latest. The FOCBS is therefore under significant pressure to secure the expertise over the entire service life of Polycom, and to quickly clarify the situation regarding the support contract, which is due to expire, in terms of procurement law.

In 2017, Airbus confirmed in writing that it would provide technological support for Poly-com's Tetrapol basic technology until 2035. These commitments were made a long time ago and are inadequate in relation to the importance of a mission-critical radio system.

svg
The items above were selected and named by the e-Government Subgroup of the EUROSAI IT Working Group on the basis of publicly available report of the author Supreme Audit Institutions (SAI). In the same way, the Subgroup prepared the analytical assumptions and headings. All readers are encouraged to consult the original texts by the author SAIs (linked).