CUBE CUBE

Reports by evidential weight

Weight is what a report contributes to this corpus as evidence about internal control — not the size of what it audited. Three components, each measured against the corpus median so that a typical report scores about 100: depth, the cases carrying a real quoted citation; breadth, the distinct vocabulary terms the report illuminates; and rarity, which counts a term for more when few other reports cite it — so being the only evidence on something outweighs being the fortieth report on well-covered ground. A recency factor then discounts older reports (half-life 8 years, never below 0.60): control weaknesses age slowly, technology-specific ones quickly.

What this ranking is not

This is a measure internal to the CUBE, and nothing more. It describes how much a report adds to this collection as evidence about internal control: how many findings it documents, how much of the shared vocabulary it reaches, and how much of that is ground no other report here covers yet.

It is not an assessment of the report, of its quality, or of the work of the audit institution that produced it. It makes no claim about the real-world significance of what was audited — not the money involved, the number of people affected, the severity of what was found, or the difference the audit made. Those are the proper subject of the reports themselves, and no arithmetic over our own tagging could stand in for them.

So the order can be read only one way. A report on a modest programme may rank above one on a national programme simply because nothing else here covers its ground. And a low position usually means a report has not yet been categorised against the full vocabulary — it says something about our work on the collection, not about the report.

1
685
Digitalisation of the Social Insurance Agency's processes in pension insurance
Twenty years of digitalisation plans, and three steps in four still done by hand
SK · 2026
depth 10breadth 110rarity 32.03recency 1.00
2
444
Preparation of citizens of the Republic of Lithuania for civil resistance
Three bodies were told to lead, and the resistance plan is still a draft
LT · 2025
depth 10breadth 74rarity 20.58recency 0.92
3
428
Acquisitions of armaments and military equipment
Half the buying runs under exemptions, and none of that half is monitored
LT · 2026
depth 10breadth 71rarity 15.50recency 1.00
4
334
Use of artificial intelligence in central government
Pilots everywhere, and no road out of them
FI · 2026
depth 10breadth 59rarity 8.96recency 1.00
5
318
Internet of Things: OMB Action Needed to Ensure Agencies Secure Their Networked Devices
The inventory was due in 2024; in 2026 seven agencies still had none
US · 2026
depth 7breadth 58rarity 10.64recency 1.00
6
303
Management of Cyber Security Incidents
Both agencies had a recovery plan, neither had ever tried it
AU · 2024
depth 8breadth 62rarity 12.93recency 0.84
7
302
Drinking water under pressure
Measurable targets, and no milestone between here and 2035
NL · 2025
depth 6breadth 55rarity 13.62recency 0.92
8
288
Government cyber resilience
A deadline set for 2025, and the measuring only started in 2023
UK · 2025
depth 7breadth 63rarity 8.95recency 0.92
9
250
Lessons Learned from Government ICT Projects - Part A
The spiral nobody has an interest in stopping
NL · 2007
depth 11breadth 71rarity 13.31recency 0.60
10
234
NASA Assessments of Major Projects
Stable portfolio, concentrated risk
US · 2026
depth 9breadth 32rarity 6.56recency 1.00
11
212
AU · 2026
depth 9breadth 31rarity 4.64recency 1.00
12
212
US · 2026
depth 6breadth 38rarity 5.87recency 1.00
13
206
The Access to Work scheme
Backlogs have nearly tripled, and DWP still cannot show the scheme delivers value for money
UK · 2026
depth 7breadth 29rarity 6.52recency 1.00
14
198
A serious Case: Police priorities in criminal investigations
Priorities are set, but the police cannot show they are followed through
NL · 2026
depth 7breadth 32rarity 4.92recency 1.00
15
192
Public support for quantum computing
A sector built on temporary money, and a choice not yet made
FR · 2026
depth 7breadth 26rarity 5.88recency 1.00
16
176
Implementation of the Federal Government's Hydrogen Strategy
Despite billions in annual subsidies, Germany's hydrogen ramp-up is falling far short of its own targets, risking climate neutrality, industrial competitiveness and the federal budget
DE · 2025
depth 7breadth 23rarity 6.65recency 0.92
17
174
The police's discontinuation of cases concerning financial crime
Police routinely discontinue financial-crime cases above the confidential threshold, and some without the authority to do so
DK · 2026
depth 7breadth 24rarity 4.57recency 1.00
18
166
PL · 2025
depth 5breadth 28rarity 6.31recency 0.92
19
139
US · 2024
depth 4breadth 31rarity 4.91recency 0.84
20
132
US · 2023
depth 6breadth 16rarity 7.33recency 0.77
21
113
Who’s there? - Establishing identity at government agencies
Who’s there? - Establishing identity at government agencies
SE · 2024
depth 3breadth 13rarity 7.37recency 0.84
22
110
DOD Real Property: Actions Needed to Improve Oversight of Underutilized and Excess Facilities
DOD's Real Property Blind Spot: Inconsistent Data, No Risk Guidance
US · 2025
depth 5breadth 19rarity 2.35recency 0.92
23
105
UK · 2025
depth 5breadth 11rarity 3.77recency 0.92
24
94
US · 2025
depth 3breadth 15rarity 3.59recency 0.92
25
86
US · 2026
depth 3breadth 13rarity 2.48recency 1.00
26
84
US · 2024
depth 4breadth 10rarity 3.65recency 0.84
27
83
Strengthening the digital defences: the cyber security and critical water structures
Cyber security of critical water structures not watertight
NL · 2019
depth 4breadth 25rarity 3.77recency 0.60
28
77
Understanding algorithms - 2021
Demistify the Algorithms!
NL · 2021
depth 4breadth 16rarity 4.06recency 0.65
29
76
KS · 2024
depth 2breadth 8rarity 5.20recency 0.84
30
73
UK · 2024
depth 7breadth 4rarity 0.70recency 0.84
31
65
CH · 2024
depth 3breadth 10rarity 2.35recency 0.84
32
63
Management of digitalization of public and administrative services
Development of eServices requires constant care
LT · 2023
depth 3breadth 10rarity 2.79recency 0.77
33
60
US · 2025
depth 2breadth 7rarity 2.88recency 0.92
34
59
CH · 2023
depth 2breadth 7rarity 4.05recency 0.77
35
55
KS · 2023
depth 5breadth 6rarity 0.65recency 0.77
36
55
Can we rely on the access to IS and the receipt of e-services?
Manage access to the receipt of e-services
LV · 2024
depth 4breadth 7rarity 0.81recency 0.84
37
53
Finansinspektionen’s work to combat conflicts of interest
Avoiding conflicts of interest requires more attention from Finansinspektionen
SE · 2020
depth 3breadth 8rarity 3.91recency 0.60
38
53
US · 2025
depth 3breadth 5rarity 1.61recency 0.92
39
49
BH · 2022
depth 3breadth 6rarity 2.49recency 0.71
40
48
Examination of development and operation of the public key infrastructure
Comprehensive review of Public Key Infrastructure
CH · 2023
depth 4breadth 4rarity 1.22recency 0.77
41
47
LV · 2021
depth 5breadth 5rarity 1.05recency 0.65
42
46
US · 2024
depth 4breadth 5rarity 0.25recency 0.84
43
46
US · 2024
depth 3breadth 6rarity 0.99recency 0.84
44
45
Cyber Security Assurance
ASSURANCE NEEDED TO SECURE INFORMATION
LT · 2022
depth 5breadth 4rarity 0.33recency 0.71
46
42
CH · 2022
depth 4breadth 5rarity 0.67recency 0.71
47
40
SE · 2016
depth 3breadth 7rarity 2.06recency 0.60
48
37
Informatization of hospitals
Sometimes it is really not about the money…
PL · 2013
depth 3breadth 6rarity 1.66recency 0.60
49
35
DK · 2023
depth 3breadth 5rarity 0.26recency 0.77
50
33
Database access management
Enhanced Information Security Needed for National Database
EE · 2023
depth 2breadth 5rarity 1.09recency 0.77
51
33
Protecting information across government
Coordination of Information Protecting system
UK · 2016
depth 4breadth 5rarity 0.26recency 0.60
52
32
SE · 2023
depth 3breadth 4rarity 0.19recency 0.77
53
31
AU · 2019
depth 4breadth 4rarity 0.20recency 0.60
54
29
Cyber protection arrangements
Coordination and budget
FI · 2017
depth 3breadth 5rarity 0.61recency 0.60
55
28
DK · 2023
depth 2breadth 5rarity 0.45recency 0.77
56
21
Use of European Union funds in promoting information society
Balance needed for success of Information Society Development Plan
EE · 2012
depth 2breadth 4rarity 0.55recency 0.60

56 reports ranked. A further 169 in the corpus are not ranked here: they predate the eight-axis vocabulary and carry no category tagging, so breadth and rarity cannot be measured for them. They enter this ranking as they are re-tagged.

Expert judgement is recorded separately and added on top of the computed score, so recomputing weights never overwrites it.