Showing posts with label NAO. Show all posts
Showing posts with label NAO. Show all posts

Thursday, 28 March 2013

GDS, the NAO, the BBC, parliament and DWP – five questions

The National Audit Office (NAO) have released a new report, Digital Britain 2: Putting users at the heart of government’s digital services, examining the Government Digital Service (GDS) plans for digital-by-default. The report's conclusions concentrate on the problems faced by people who can't or won't use on-line public services.

The same problem was examined the day before yesterday by Mark Easton, the BBC's home affairs editor.

And 52 members of parliament have put their name to an early day motion to debate the problem.

Meanwhile the Department for Work and Pensions (DWP), who were depending on digital-by-default for the introduction of Universal Credit, have published not one but two documents confirming that benefits will continue to rely on face-to-face meetings, telephone calls and letters in the post – the very opposite of digital-by-default – please see Local Support Services Framework and Universal Credit – Your claim journey.

GDS have responded to the NAO report with a post on their blog today:
Overall, this report is a really positive sign we’re moving in the right direction. But it’s also a helpful reminder of the work we still need to do to support those who are less able to use online services.
The NAO report has some ("really positive"?) comments to make on the putative savings we can look forward to from digital-by-default:
1.5 The GDS has also highlighted the possible savings from switching to digital channels. As the strategy states, central government provides more than 650 public services – which cost between £6 billion and £9 billion in 2011-12, according to GDS. The GDS has estimated total potential annual savings of £1.7 billion to £1.8 billion if all these services were operated through digital channels. More than 300 of these services have no digital channel. The savings estimate does not include the costs that may be required to create or redesign digital services. However, it also does not take into account the government’s new approach to becoming digital, set out in its strategy, which could lead to greater savings being achieved more quickly. The GDS states that the average cost of a central government digital transaction can be almost 20 times lower than by phone and 50 times lower than face-to-face.

1.6 We have not audited the estimated savings in the Government Digital Strategy, nor have we audited how government will redesign and develop its new digital services. Our future audits will evaluate the value for money of digital services as the GDS and departments work together to move more than 650 services online.
The report also mentions (without being "really positive") the need for identity assurance. Someone posted a comment on the GDS blog:
28/03/2013
dmossesq #

Please Note: Your comment is awaiting moderation.

The NAO report is available at http://www.nao.org.uk/wp-content/uploads/2013/03/10123-001-Digital-Britain-2-Book.pdf

Under the heading “Trust”, the report includes the following:

QUOTE

4.9 To use online public services people need to be able to trust the government with the information they provide online. The Government Digital Strategy recognises that users of public services often find it hard to register for online services, and that it needs to offer a more straightforward, secure way to allow users to identify themselves online while preserving their privacy. Therefore there is an Identity Assurance Programme [IDAP] under way in GDS and we were told that this is to develop a framework to enable federated identity assurance to be adopted across government services.

4.10 The government also told us that this will involve creating a simple, trusted and secure new way for people and businesses to access government services, which will provide assurance to government that the right person is accessing their own personal information.

UNQUOTE

Without IDAP, there is no digital-by-default.

DWP were led to believe that IDAP would be “fully operational” for up to 21 million claimants of Universal Credit “from March 2013″, https://online.contractsfinder.businesslink.gov.uk/Common/View%20Notice.aspx?NoticeId=797279

Here we are in March 2013. And the question the NAO almost ask is, where is IDAP?

28/03/2013
That comment has now been moderated. Has it been published? No. It's been deleted.

Tomorrow should see the publication of ex-Guardian man Mike Bracken's video diary, This week at GDS.

He's the executive director of GDS and the senior responsible officer owner for the pan-government identity assurance programme. Will he comment on:
  1. the NAO report?
  2. the BBC report?
  3. the early day motion in parliament?
  4. DWP being stranded without IDAP?
  5. the deliberations of the permanent secretaries who met at GDS's offices yesterday to consider digital-by-default?
----------
    Added 16:48:
    Following publication of the post above, DMossEsq brought it to the attention of GDS. The comment which had previously been deleted from their blog has now been published by GDS. Also, this week's edition of This week at GDS has been published, a day early, perhaps because of the bank holiday. No response to questions 2., 3. and 4. above. A passing mention of 5. and a promise to consider 1. in next week's edition.

    GDS, the NAO, the BBC, parliament and DWP – five questions

    The National Audit Office (NAO) have released a new report, Digital Britain 2: Putting users at the heart of government’s digital services, examining the Government Digital Service (GDS) plans for digital-by-default. The report's conclusions concentrate on the problems faced by people who can't or won't use on-line public services.

    The same problem was examined the day before yesterday by Mark Easton, the BBC's home affairs editor.

    And 52 members of parliament have put their name to an early day motion to debate the problem.

    Meanwhile the Department for Work and Pensions (DWP), who were depending on digital-by-default for the introduction of Universal Credit, have published not one but two documents confirming that benefits will continue to rely on face-to-face meetings, telephone calls and letters in the post – the very opposite of digital-by-default – please see Local Support Services Framework and Universal Credit – Your claim journey.

    GDS have responded to the NAO report with a post on their blog today:
    Overall, this report is a really positive sign we’re moving in the right direction. But it’s also a helpful reminder of the work we still need to do to support those who are less able to use online services.

    Wednesday, 24 October 2012

    HMRC and Skyscape 2

    The following open letter has been sent by email and by post to Phil Pavitt in his capacity as HMRC Director General Change, Security and Information with a copy to Lin Homer, Chief Executive, HMRC:

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

    Open letter [1]

    Phil Pavitt          Your ref. CETO /03531/2012
    HMRC Director General
    Change, Security and Information
    100 Parliament St
    London SW1A 2BQ          24 October 2012

    Dear Mr Pavitt

    HMRC and Skyscape Cloud Services Ltd

    Thank you for your letter dated 22 October 2012 [2] in response to my letter to Lin Homer dated 11 October 2012 [3].

    The point is well taken, of course, that for security reasons HMRC can’t say what data is held where. We're in we-can-neither-confirm-nor-deny territory here. It’s difficult but, given the bizarre nature of the Skyscape contract, HMRC are going to have to find some way to reassure the public about the security with which our tax records, both personal and corporate, are being held.

    “The data will continue to be kept in accordance with existing legislation and HMRC security policies”, you say. I should hope so, too – the public want, need, deserve and pay for nothing less.

    But your statement begs the question.

    The public is bound to assume that the data to be stored at Skyscape’s cloud computing facilities is the tax records of every individual and legal person in the country. What other data does HMRC have?

    And the public is bound to assume that our data is intended to be stored at Hartham Park, Corsham, Wilts SN13 0RP because that’s the address of the registered office of Skyscape Cloud Services Ltd and it’s the address of the registered office of its “ally” ARK Continuity Ltd and it’s the address of ARK’s Spring Park data centre as noted for everyone to see on ARK’s website [4]. If that isn’t a breach of security, what is?

    Skyscape is a young start-up, it hasn’t yet submitted any accounts to Companies House, it has no track record, it has only one director and he owns all the shares in the company. If the Government Procurement Service (GPS) and HMRC believe that Skyscape is an appropriate company to trust with the care of our tax records, then there is something wrong with GPS’s and HMRC’s selection criteria.

    CloudStore make the point that the inclusion of a company and its services in its on-line store is not a warranty of appropriateness. It’s up to the customer – in this case HMRC – to determine appropriateness. Eleanor Stewart, the Assistant Director of G-Cloud, says [5]: “as with everything on the G-Cloud framework the customer can determine whether they are happy with any associated risk at the point of selection”.

    The references to GPS and to CloudStore in your letter can provide the public with no comfort.

    You mention the Skyscape Cloud Alliance [6] in your letter.

    Goodness knows what ARK Continuity is doing in the Alliance. HMRC doesn’t promote itself as being in an alliance with Mapeley. Why does Skyscape expect the public to find it commercially persuasive to include its landlord in the Alliance?

    QinetiQ, VMware, Cisco and EMC on the other hand are all industry leaders and if HMRC had entered into a contract with a joint venture company involving them then we wouldn’t be having this correspondence.

    But you haven’t.

    HMRC have entered into a contract with a one-man start-up. That was the case before you wrote your letter and it remains the case subsequently. The question therefore persists, how can HMRC make such an odd-looking decision? How can they risk the nation’s tax records on Skyscape?

    There’s no joint venture company there for a Tax Inspector to get his or her teeth into. Just an “alliance”. What is an alliance in this case?

    The contract is to provide cloud computing services. “Cloud computing” means losing control [7]. Whitehall promotes cloud computing on the basis that it turns IT into a utility [8]. That is not attractive, as this month’s news about gas and electricity prices will confirm.

    None of us has control over the price our suppliers charge for gas and electricity at home or control over their staff. If HMRC enter into a cloud computing contract with any supplier, big or small, they will have the same problem. How can HMRC risk the nation’s tax records on cloud computing?

    Salesmen sometimes unfortunately make over-enthusiastic claims about cloud computing being more resilient, secure and efficient than the alternatives. Lawyers don’t believe them. Lawyers don’t use cloud computing. Lawyers are paid to keep their clients’ data under control and confidential. So are public authorities like HMRC.

    As I write, I note that the latest cloud computing débâcle is unfolding. Amazon are the biggest cloud computing suppliers in the world and they’ve just had a 12-hour outage [9].

    Our tax records are currently stored on hundreds of servers at “multiple” HMRC offices, you say. Good. That looks secure. Much more secure than storing them all in one place with a one-man start-up in some sort of nugatory alliance. And, since you mention it, the allegedly dainty carbon footprint of cloud computing will be no consolation if our records go up in smoke.

    According to HMRC’s press release [10] the Skyscape contract will save £1 million a year on running costs. We need to be guided here by the National Audit Office (NAO) report on HMRC’s on-line filing [11].

    The NAO examined HMRC’s £8 billion 10-year ASPIRE contract with Capgemini and said:

    HMRC uses a range of indicators to measure the performance of its ICT services, which include online services, and it measures availability that relates specifically to online filing. HMRC has a high-level view of the overall costs of ICT provision through the ASPIRE contract. It has been taking steps to improve that information and achieve cost savings. It does not yet have a detailed breakdown of the costs of online filing services, so it cannot benchmark those costs to assess their value for money. HMRC is currently negotiating with the ASPIRE contractors to obtain a clearer breakdown of the costs of ICT services provided. (p.8)
    Also:

    [HMRC] should proceed with its plans to identify ICT costs specific to online filing services and ensure that current negotiations with the ASPIRE contractors provide sufficient breakdown of cost information for regular benchmarking of costs. (p.13)
    In the circumstances, with the suppliers not even prepared to tell HMRC what they are charging for, some scepticism is in order about claims to be able to identify £1 million of on-line filing costs in among the £8,000 million.

    CESG have rescued the nation before from other-worldly decisions taken by Whitehall. The Home Office wanted to use DWP’s National Insurance number database as the National Identity Register for the ID cards scheme. CESG pointed out that it was inappropriate and that was the end of that [12].

    Let’s hope that they repeat the trick in their review of Skyscape. I look forward to a small piece appearing in the technical press somewhere out of the way regretting that for security reasons which cannot be given the HMRC contract with Skyscape has had to be revoked.

    Yours sincerely
    David Moss

    cc      Lin Homer, Chief Executive, HMRC
              Chartered Institute of Taxation
              Institute of Chartered Accountants in England and Wales




    [7]Cloud computing and the Gadarene lemmings of Whitehall, http://www.dmossesq.com/2012/10/cloud-computing-and-fashion-conscious.html
    [8]Cloud computing turns IT into a utility, and that's a good thing?, http://www.dmossesq.com/2012/10/cloud-computing-turns-it-into-utility.html
    [9]Amazon outage started small, snowballed into 12-hour event, http://www.networkworld.com/news/2012/102312-amazon-outage-263617.html
    [11]HM Revenue & Customs – The expansion of online filing of tax returns, http://www.nao.org.uk//idoc.ashx?docId=cd237708-5c6b-472a-af13-f432f80d80cc&version=-1
    Updates:
    24.5.12
    Phil Pavitt says "we don't currently have ID authentication in UK government".
    24.10.12
    Letter emailed to Phil Pavitt and Lin Homer
    25.10.12
    Hard copy of letter posted to Phil Pavitt and Lin Homer, links sent to Eleanor Stewart, CIOT and ICAEW
    28.10.12
    Re last two paragraphs of letter, see Andy Smith affair.
    4.11.12
    US government argue that signing a cloud services agreement reduces your property rights in the data stored in the cloud, according to EFF.
    13.11.12
    Cloud computing, and GDS's fantasy strategy: "To which, all one can say is that there must be something wrong with the Cabinet Office, GPS and HMRC procurement criteria ...".
    23.11.12
    UK.gov to upgrade buying tool after mega cockup downs £1bn deal – Government Procurement Service computer system incapable of handling tenders for government procurement.
    26.11.12
    HMRC soon to be Pavittless – will Aviva store all our insurance details with Skyscape?

    HMRC and Skyscape 2

    The following open letter has been sent by email and by post to Phil Pavitt in his capacity as HMRC Director General Change, Security and Information with a copy to Lin Homer, Chief Executive, HMRC:

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

    Sunday, 30 September 2012

    G-Cloud, GDS, HMRC and Skyscape, the company with just one director, who owns all the shares – Whitehall SNAFU

    The story so far ...

    The Government Digital Service (GDS) have contracted with Skyscape Cloud Services Ltd to host the new unified central government website, GOV.UK, in the cloud.

    Episode 1, Insanity – are they mad? Skyscape is a £1,000 company. Isn't that a bit small for this monumental responsibility?

    Whitehall's G-Cloud team say this is an example of good practice, using small and medium-sized enterprises (SMEs) instead of the ponderous and expensive big boys.

    Episode 2, Mendacity – are they lying? Skyscape claims to be in alliance with five other companies whose combined turnover is £43.3 billion and who have over 100,000 staff. Isn't that a bit big for an SME?

    Now read on ...

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

    Episode 3, Confusion – what's going on?

    HMRC
    Now HMRC have signed up with Skyscape as well as GDS. Phil Pavitt, HMRC's CIO (Chief Information Officer) says that the shift to cloud ...
    ... will save over £1 million a year in running costs and will increase reliability and security of HMRC's internal IT services.

    The Skyscape contract is a major step for HMRC in moving away from traditional ways of working with large service providers. And it's a great example of how we're exploring smarter, more innovative solutions that make life simpler for us and help us provide a better deal for our customers ...
    • Will Mr Pavitt's head roll if the Skyscape contract doesn't "save over £1 million a year in running costs"?
    • Suppose Skyscape put their prices up?
    • Suppose Skyscape go bust – it's only a £1,000 company after all?
    • Suppose Skyscape's servers fall over for a fortnight like the Royal Bank of Scotland's did earlier this summer?
    • Does HMRC have good enough book-keeping systems to know if £1 million has been saved and where and why?
    • HMRC is no SME – its ASPIRE contract with Capgemini and Fujitsu is worth £8 billion over ten years. Is it worth taking the risk of using Skyscape to save one eight-thousandth eight-hundredth of the value of just one contract among many?
    • ...
    We know the answer to one of those questions. The National Audit Office have told us that when HMRC asked their suppliers to be a bit more explicit what they were charging for on their invoices, the suppliers refused. HMRC pay anyway, whatever it is they're paying for.

    God, but Lin Homer's got a lot of work to do.

    Skyscape
    Never mind all those questions for the moment, the point at issue is that Mr Pavitt thinks that Skyscape is a small company.

    How small?

    We already know that it has only £1,000 of paid up share capital. And that the company is too young to have filed any accounts yet, so we have no idea about its P&L and balance sheet. The G-Cloud team have approved Skyscape to sell its wares on HMG's Cloudstore, GDS have bought from them and so have HMRC – how did they satisfy themselves as to Skyscape's commercial health?

    They may not have filed any accounts but Skyscape have filed an annual return, as at 3 May 2012, according to which:
    • The registered address is Hartham Park, Hartham, Corsham, Wilts SN13 0RP
    • The company has one director – Mr Jeremy Robin Sanders
    • And one shareholder – Mr Jeremy Robin Sanders
    GDS and HMRC haven't signed up with one company so much as with one man. One man owns all the shares and is the only director of the company which hosts the central government website and hosts some of HMRC's data. One man. What's going on?

    GOV.UK depends on one man. Mr Sanders. Bits of HMRC depend on one man. Mr Sanders. The G-Cloud team have approved one man to sell his wares on the Cloudstore. Mr Sanders. The UK is a big, complicated, modern state with 1,000 years of democracy behind it and government contracts affecting the entire population are signed with just one man. Mr Sanders.

    While that's sinking in, en passant, note that Mr Sanders didn't always own all the shares in Skyscape. Mr Jeffery (sic) Paul Thomas used to own one share. Then on 19 April 2012 he transferred it to Mr Sanders. You won't forget that name, will you – Jeffery (sic) Paul Thomas.

    The Skyscape Cloud Alliance
    The following note appears on the Skyscape website ...
    SKYSCAPE CLOUD ALLIANCE

    The Skyscape Cloud Alliance partners; QinetiQ ,VMware, Cisco, EMC, and Ark Continuity bring together an end to end cloud solution which is Skyscape. This Alliance also provides a collaborative resource which drives innovation and our technical product development programme.
    What does it mean?

    If it means that Skyscape is a joint venture company set up by the allies, then Skyscape has the backing of £43.3 billion of annual revenue and 100,000 staff worldwide. Which means that it's not really an SME at all.

    But it doesn't say that. The five companies are called "partners". But Skyscape isn't a partnership, it's a limited company.

    Presumably Skyscape haven't just put these names on their website because it looks good. Because it's handy for marketing. If they used these names without the allies' permission, they'd be sued. There must be some sort of a commercial arrangement between Skyscape, QinetiQ and the others. But what sort of arrangement?

    Skyscape are not mentioned in the accounts of QinetiQ or VMware or any of the allies. The nature of this commercial arrangement is a mystery. A gentlemen's agreement of some sort, perhaps? Surely that's not enough for G-Cloud, GDS and HMRC to rely on.

    ARK Continuity
    ARK Continuity is the odd one out among the Skyscape allies. It's relatively tiny. According to its annual return as at 16 December 2011:
    • The registered address is Hartham Park, Hartham, Corsham, Wilts SN13 0RP, the same as Skyscape's.
    • It has a company secretary and three directors – two bankers plus Mr Jeffrey (sic) Paul Thomas, possibly the ex-shareholder of Skyscape.
    • It has two classes of 1p ordinary shares, A and B, 800 of each issued, so it has £16 of share capital, not all paid up at the date of the return.
    • Revcap Properties 25 Ltd owns all 800 A ordinaries and Mr Jeffrey (sic) Paul Thomas owns 320 of the B ordinaries.
    According to the 30 April 2011 Ark Continuity annual report and accounts, the two bankers are appointed as directors to represent the interests of Revcap Properties 25 Ltd, the 75% majority shareholder, the ultimate parent company of Revcap Properties 25 Ltd is Real Estate Venture Capital Partners LLP and:
    The principal activity of the company and the group is the design, construction and operation of data centres
    Nearly finally, on 9 August 2012, ARK Continuity appointed Baroness Elizabeth Lydia Manningham-Buller a director. The Rt Hon The Baroness Manningham-Buller was of course, formerly, the Director General of MI5.

    On their website, ARK Continuity are naturally proud of their Spring Park data centre. They're a property company. Of course they're proud.

    That's Spring Park at Hartham Park, Corsham, Wilts SN13 0RP, they provide a map of how to get there and they say that:
    Spring Park affords occupiers the opportunity to embrace best practice and sustainable principles in the design, construction, engineering and operation of their data centres

    Spring Park is one of Europe's premier data centre locations. Strategically positioned and built on a legacy of over 50 years investment in critical national infrastructure, Spring Park comprises 14.79ha of surface land, 9.29ha of underground, access to 114MVA diverse power supply and c93,000m² of consented data centre and office development

    Located one mile from the A4 and 8 miles from J17 of the M4 between Swindon and Bristol, the site is adjacent to secure MoD facilities and benefits from significant connectivity infrastructure

    To see the location map click here
    To watch the History of Spring Park click here
    The early footage of the Romans quarrying stone at Corsham to build the new town of Bath in the green belt is fascinating but someone should tell ARK about security. The Rt Hon The Baroness Manningham-Buller, perhaps?

    The MoD might prefer it if ARK Continuity didn't tell people where their secure facilities are. GDS and HMRC, too.

    And let's hope to God that that's not where GOV.UK is being hosted and where HMRC have stored their records. Because otherwise, now, thanks to ARK Continuity's website, everyone will know.

    G-Cloud, GDS, HMRC and Skyscape, the company with just one director, who owns all the shares – Whitehall SNAFU

    The story so far ...

    The Government Digital Service (GDS) have contracted with Skyscape Cloud Services Ltd to host the new unified central government website, GOV.UK, in the cloud.

    Episode 1, Insanity – are they mad? Skyscape is a £1,000 company. Isn't that a bit small for this monumental responsibility?

    Whitehall's G-Cloud team say this is an example of good practice, using small and medium-sized enterprises (SMEs) instead of the ponderous and expensive big boys.

    Episode 2, Mendacity – are they lying? Skyscape claims to be in alliance with five other companies whose combined turnover is £43.3 billion and who have over 100,000 staff. Isn't that a bit big for an SME?

    Now read on ...

    [Skyscape has subsequently changed its name to UKCloud: "London – August 1, 2016 – Skyscape Cloud Services Limited, the easy to adopt, easy to use and easy to leave assured cloud services company, has today renamed and relaunched as UKCloud Ltd (www.ukcloud.com), to reinforce the company’s exclusive focus on supporting the UK public sector in the digital transformation of services".]

    Monday, 9 July 2012

    Francis Maude and the economies of scale

    "A seven-year government efficiency programme has backfired and increased costs for the taxpayer by hundreds of millions of pounds, a public spending watchdog said ... Whitehall departments have spent £1.4 billion in an attempt to save £159  million by sharing "back-office" functions such as personnel and procurement ..." – Telegraph readers and followers of DMossEsq have known all about this since March.

    Any 12 year-old management consultant can make the case that sharing services saves money. It stands to reason.

    Except that it's not true.

    And now the Public Accounts Committee have a few words of advice for Francis Maude and the Cabinet Office:
    Committee chair Margaret Hodge said: "Shared service centres have failed to deliver the savings they should have. They cost £1.4bn to set up, £500m more than expected, and in some cases have actually cost the taxpayer more than they have saved. I welcome the Cabinet Office's ambitious new strategy for improving shared services. But unless it learns from the past it will end up making the same mistakes again."
    Will Mr Maude listen to Parliament? Or to the agile 12 year-olds touting shared services in the G-Cloud?

    Francis Maude and the economies of scale

    "A seven-year government efficiency programme has backfired and increased costs for the taxpayer by hundreds of millions of pounds, a public spending watchdog said ... Whitehall departments have spent £1.4 billion in an attempt to save £159  million by sharing "back-office" functions such as personnel and procurement ..." – Telegraph readers and followers of DMossEsq have known all about this since March.

    Any 12 year-old management consultant can make the case that sharing services saves money. It stands to reason.

    Except that it's not true.

    And now the Public Accounts Committee have a few words of advice for Francis Maude and the Cabinet Office:
    Committee chair Margaret Hodge said: "Shared service centres have failed to deliver the savings they should have. They cost £1.4bn to set up, £500m more than expected, and in some cases have actually cost the taxpayer more than they have saved. I welcome the Cabinet Office's ambitious new strategy for improving shared services. But unless it learns from the past it will end up making the same mistakes again."
    Will Mr Maude listen to Parliament? Or to the agile 12 year-olds touting shared services in the G-Cloud?

    Sunday, 1 July 2012

    Whitehall's power without responsibility

    On 12 June 2012, the Institute for Government hosted a seminar on leadership which consisted of a conversation between Sir-Gus-now-Lord O'Donnell (GOD) and his oppo in Australia, Terry Moran. They were due to discuss "the role of leadership in reform, the challenges of making change happen in public service and leading through crises".


    Sadly it is no surprise that the NAO has found substantial problems with the HMRC’s accounts. This year has seen a litany of tax errors and scandals come to light with mistakes made at the most senior level from the Permanent Secretary for Tax downwards.

    The sheer scale of waste and mismanagement at HMRC never ceases to shock me. Without even mentioning the tax gap, in 2011-12 the Department wrote off a staggering £5.2 billion of tax owed, overpaid nearly £2.5 billion in tax credits due to fraud and error and underpaid around £290 million.

    In some areas the Department is moving in the right direction and has made progress to implement improvement plans. But the Department is still plagued by IT problems; limiting, for example, its ability to link together the debts owed by tax payers across different tax streams.

    With its long history of large scale IT failures, the Department needs to get a grip before it introduces its new real time PAYE information systems and begins the high-risk move from tax credits to the Universal Credit.

    That was Margaret Hodge, chairman of the Public Accounts Committee, commenting on the National Audit Office report on HMRC's 2011-12 accounts.

    ("Challenging", of course, means impossible.)
    The event was reported next day by Sue Cameron in the Telegraph, Whitehall’s knights joust over public service reform:
    "Private sector people who come into Whitehall get a big shiny star," remarked Gus O’Donnell, Britain’s former top civil servant this week, adding: "Ministers think they’re wonderful."

    He said it with a rueful smile. Lord O’Donnell reckons that private sector executives are not always as good as they are cracked up to be by some ministers. "I tried to bring in more people from outside and on the whole they did slightly worse than other civil servants," he told a seminar on leadership at the Institute for Government (IfG) in London. "Often they took very big pay cuts to come in. You’d see some of them and you’d think… what was all that about?"
    GOD was in charge of Whitehall from 2005 to 2011. How well did He do? Take a look at Margaret Hodge's verdict alongside, "substantial problems ... litany of tax errors and scandals ... mistakes made at the most senior level ... sheer scale of waste and mismanagement ... wrote off a staggering ... overpaid ... underpaid ... plagued by IT problems ... long history of large scale IT failures ...".

    She's talking about HMRC, just one of GOD's satrapies. Just one of His satrapies where perhaps He failed to show leadership in reform, where the challenges of making change happen seem to have been too much even for Him and the public are left to pay for the crises.

    Smile ruefully. And next time someone alludes to His ability to walk on water, just ask them, what was all that about?

    According to Ms Cameron, it's all about the plans to reform the civil service and particularly, the plans to outsource more policy-making to the private sector. Clearly GOD disapproves.

    The reform plan is said to be the work of Cabinet Office minister Francis Maude and Sir Bob Kerslake, head of the home civil service. Sir Jeremy Heywood, the feline Cabinet Secretary, is quoted as saying of Sir Bob that he is "doing his best at a new level".

    Who knows how the relationship between the knights will develop over the next few years? For the moment, "doing his best at a new level" looks more like scratch-your-eyes-out than jousting.

    No doubt about the relationship between GOD and Bernard Jenkin. Having looked forward to an enjoyable assault on the capabilities of private sector executives, GOD's heart must have sunk when he saw Jenkin in the IfG audience:
    At the IfG, Lord O’Donnell was asked by Bernard Jenkin, Tory chairman of the Commons public administration select committee, about the billions wasted on public sector projects, with nobody resigning or taking the blame and ministers and civil servants sheltering behind each other.
    In Sue Cameron's account, by way of a response GOD started by raving about scope creep:
    Lord O’Donnell said there was a “straightforward” way to cope with this. The reason major projects went off track was because ministers wanted changes.
    Complete nonsense. Lazy thinking. There's nothing wrong with scope creep, it's the sign of a healthy and useful system in its prime, it just needs managing. GOD must know that. His normally smoothly functioning circuits must have been shorted by the languid Mr Jenkin's question.

    That's where the jousting was taking place – between GOD and Jenkin, and GOD was unhorsed.

    "Straightforward"? In the Whitehall temple to deviousness it's hard to imagine a greater insult for a permanent secretary, let alone a Cabinet Secretary.

    The first thing any senior civil servant will tell you is that the minister wants what the permanent secretary tells him he wants (the masculine includes the feminine). And if the minister insists on wanting something else, then that will be sabotaged. Completely. While leaving no incriminating traces.

    It's in the Sue Cameron article as well but the extent to which GOD was wrong-footed by Jenkin's question is clearer in PublicService.co.uk's article about the same encounter, "Only accountable if you're responsible":
    The former Cabinet Secretary told an Institute for Government event on leadership and reform that he is not opposed to the idea of senior civil servants being held to account by select committees ... He said: "I would like to have the situation where we have public servants appearing in front of select committees for things that they are really responsible for, but to be really responsible you have got to have the power ..."
    The only way this argument of GOD's works is if He believes that senior civil servants are not currently responsible. That their job is not a responsible job. That senior civil servants should not currently be called to account by Parliament because they are doing only a menial factotum's job.

    He can't believe that. It's not true. And it's the opposite of what He would normally be expected to argue, viz. that the country is lucky to enjoy such a capable Executive branch of government, dominated by Whitehall. And that, in turn, means that the senior civil service must be accountable.

    A bad day's work for Him, that IfG seminar was another nail in the coffin of GOD's chances of being the next Governor of the Bank of England.

    That's His problem.

    The public's problem, clearly and repeatedly identified by Margaret Hodge and Patrick Jenkin, is that our senior civil service wastes billions of pounds of our money. Whitehall's misfeasance in public office has already survived 30 years of outsourcing to the private sector and of recruiting private sector people and methodologies. More private sector involvement isn't going to solve the problem.

    Neither is moving to cloud computing or using so-called "agile" software engineering methods or making public services digital by default.

    That's all flannel. Whitehall has demonstrated for decades that it is quite agile enough to waste public money digitally, by default, in a cloud or anywhere else. The infantile fascination with technology offers no salvation, only automated misfeasance.

    The solution, also clearly and repeatedly identified by Margaret Hodge and Patrick Jenkin, lies in accountability. More openness, earlier in the life of Government initiatives. Whitehall must acknowledge the supremacy of Parliament. They must be open with Parliament.

    GOD must know that and like an old-style union baron he obtusely refuses to accept it. But He's gone now. He's retired, even if He doesn't realise it.

    It's up to Sir Jeremy and Sir Bob. They're the leaders now. We don't want them jousting. Or hissing at each other. We want them to make Whitehall obey the Constitution. That will be good for Whitehall as well as the public. Sir Jeremy and Sir Bob must make Whitehall accountable. That is their duty.

    Whitehall's power without responsibility

    On 12 June 2012, the Institute for Government hosted a seminar on leadership which consisted of a conversation between Sir-Gus-now-Lord O'Donnell (GOD) and his oppo in Australia, Terry Moran. They were due to discuss "the role of leadership in reform, the challenges of making change happen in public service and leading through crises".

    Thursday, 14 June 2012

    HMG's cloud computing strategy – there isn't one – and the Edgbaston Test

    On 20 October 2011 Chris Chant listed 23 symptoms of the illness which Government IT suffers from. He carried on energetically repeating his diagnosis, unchallenged, and promoting cloud computing as the effective prescription. There he was, at it again, six months later on 11 April 2012, in a blog post on the G-Cloud website, #Unacceptable IT is pervasive. Two days later his resignation was announced.

    The man in charge of G-Cloud is Andy Nelson, the Government's Chief Information Officer (CIO). That's only a part-time job. He is more fully occupied as CIO at the Ministry of Justice, where he's got his work cut out with Libra among other things. Libra is the £467 million Fujitsu system which is meant to produce the accounts for HM Courts and Tribunals Service. When the National Audit Office saw the 2010-11 accounts they were in such a mess that the NAO couldn't even qualify their opinion, they had to disclaim an opinion.

    Under Mr Nelson, Denise McDonagh is also responsible for G-Cloud. Again, it's only a part-time job. Her day job is CIO at the Home Office. And again, there are quite a few distractions there:
    • There's the £385 million CSC contract with Sarah Rapson's Identity & Passport Service which is one of the reasons UK passport-holders are currently being over-charged by £300 million a year.
    • There's the £265 million IBM contract with the UK Border Agency to provide IABS, Jackie Keane's Immigration and Asylum Biometric System. IABS is meant to keep the UK border secure and make the 2012 Olympics safe but there's a problem – the biometrics don't work.
    • The same problem applies to the National Policing Improvement Agency's promotion of MobileID, a system to allow policemen on patrol to check suspects' fingerprints on the spot using mobile equipment. The idea is for MobileID to save police time. Which it will because, with a 20% failure rate, this flaky technology will cause 20% fewer criminals to be arrested.
    Those distractions and others will no doubt explain her lacklustre post on 26 April 2012, Cloud Cynicism (or Dispelling the Dark Clouds) and why she hasn't been heard from since.

    Not so, Eleanor Stewart. She's a trouper. She's the Assistant Director of G-Cloud and she's always good for a lively post. On 27 April 2012 she produced Crowdsourcing and a response., in which she took up some of the many questions posed in the 20 responses to Chris Chant's last post.

    What the heck can we do to resolve some of the scary and largely unknown legal and policy issues that people are nervous about in a globalised world?, she asked. Good question. No answer.

    And What ‘worked examples’ might we be able to provide to ... sceptics? That's in response to the simple question how cloud computing is supposed to obviate the need for long contracts to produce systems like Libra, for example, or IABS or DWP's Universal Credit. Chris Chant says it will. How? No answer.

    Ms Stewart threw the post open to the crowd. And published one comment. One. The limiting case of a crowd. (I wandered lonely as a cloud?)

    "Scary and largely unknown"? Hmm. Quite clearly, no-one in HMG knows the answers to some very basic questions about its cloud computing strategy. Which is odd. They keep talking about it. Andy Nelson, for example, was holding forth at the Cloud Computing World Forum only the other day. And they've been advocating it for years – the G-Cloud Overview was being touted in August 2010. But still no-one can answer the questions.

    Is it all hot air? A cloud of hot air? A cloud which, when it hits some of the colder patches of reality, results in heavy precipitation and the wettest drought ever seen, which washed out the Edgbaston Test? That's certainly what it looks like at this end of the wicket.

    ----------

    A version of this post has been kindly published by the estimable PublicTechnology.net

    HMG's cloud computing strategy – there isn't one – and the Edgbaston Test

    On 20 October 2011 Chris Chant listed 23 symptoms of the illness which Government IT suffers from. He carried on energetically repeating his diagnosis, unchallenged, and promoting cloud computing as the effective prescription. There he was, at it again, six months later on 11 April 2012, in a blog post on the G-Cloud website, #Unacceptable IT is pervasive. Two days later his resignation was announced.

    Saturday, 19 May 2012

    Ministry of Justice soon to be Chakrabartiless

    The Times, 19 May 2012:
    Whitehall mandarin wins race for bank
    A leading Whitehall official has secured the top job at the European Bank for Reconstruction and Development, making him the first Briton to win the post.

    In a diplomatic victory for Britain, Sir Suma Chakrabarti, who serves as the Permanent Secretary of the Ministry of Justice, will lead the EBRD for the next four years ...
    Whitehall – misfeasance in public office
    HM Courts Service Trust Statement for the year ended 31 March 2011
    HM Courts Service hides “Libra” IT’s new shortcomings
    ...

    Ministry of Justice soon to be Chakrabartiless

    The Times, 19 May 2012:
    Whitehall mandarin wins race for bank
    A leading Whitehall official has secured the top job at the European Bank for Reconstruction and Development, making him the first Briton to win the post.

    In a diplomatic victory for Britain, Sir Suma Chakrabarti, who serves as the Permanent Secretary of the Ministry of Justice, will lead the EBRD for the next four years ...
    Whitehall – misfeasance in public office
    HM Courts Service Trust Statement for the year ended 31 March 2011
    HM Courts Service hides “Libra” IT’s new shortcomings
    ...

    Sunday, 22 April 2012

    Amazon, Google, Facebook et al – the latter-day pied pipers of Hamelin

    The earliest mention of the story seems to have been on a stained glass window placed in the Church of Hamelin c. 1300. The window was described in several accounts between the 14th century and the 17th century ... This window is generally considered to have been created in memory of a tragic historical event for the town. Also, Hamelin town records start with this event. The earliest written record is from the town chronicles in an entry from 1384 which states: "It is 100 years since our children left". (Wikipedia)

    ---------- o O o ----------
    The children
    In December 2011, Facebook had 845 million monthly active users, of which 483 million were daily active users. That's a lot of children.

    While children follow the music, grown-ups follow the money.

    As Martin Sorrell says, influencing social networks is an extremely powerful way of building brands and trust in brands. That's why the hidden persuaders pay for Facebook, Google and other platforms. That's why the people who think they are the users don't pay. We're not the users, we people who do scores of Google searches every day and who meticulously update our Facebook pages and who tweet our every passing thought. Users pay. We're the product.

    Mr Zuckerberg doesn't work hard every day developing Facebook because he loves organising parties. And Mr Schmidt doesn't spend a fortune every day improving search algorithms, giving away Google AdWords coupons and suggesting the optimal route between A and B on Google Maps because he hates people to get lost. Only a child would believe that.

    Mr Sorrell (WPP) gives money to Messrs Zuckerberg (Facebook) and Schmidt (Google). And Messrs Zuckerberg and Schmidt give us to Mr Sorrell. Willing buyer, willing seller, we're neither – in this exchange we're the product.

    The burgomasters
    Meanwhile in the Whitehall district of Hamelin, a confused burgomaster is trying to think how to kickstart the economy. If only my townspeople would maintain a personal data store ... I could launch a midata initiative ... hey wait a minute, 30 million of them already have Facebook pages and a growing number have Google+ accounts ... maiden's prayer ... answer ...

    Meanwhile in the Whitehall district of Hamelin, another confused burgomaster is trying to think how to modernise public administration. If only my townspeople had electronic identities ... I could launch an Identity Assurance service (IdA) ... public services could become digital by default ... the Government Digital Service (GDS) ... hey wait a minute ...

    Meanwhile in the Whitehall district of Hamelin, all the confused burgomasters are justifiably sorry for themselvesAs if we haven't got enough problems ... kickstarting the economy ... communicating with the townspeople ... the bloody townspeople – excuse my French – and their damned residents' associations ... always moaning ... the Public Administration Select Committee ... the Public Accounts Committee ... the Home Affairs Committee ... it's never-ending ... and the wretched impertinent National Audit Office ... ILA ... CSA ... Tax credits ... NPfIT ... FiReControl ... ID cards ... Libra ... NOMS ... Aspire ... IABS ... UC ... RTI ...

    ... which brings us to ...

    The rats
    Infested with management consultants with scaly tails and bloated bewhiskered contractors, the Hamelin government IT systems are "unacceptable", says the Schweinhund Chris Chant – pardon my Switzerdeutsch – and it's about time the burgomasters who aren't up to the job got out.

    So who will rid us of the rats?

    The piper(s)
    Tim Berners-Lee?
    ... individual users were not yet being allowed to exploit all the information relating to them to make their lives easier. Armed with the information that social networks and other web giants hold about us, he said, computers will be able to "help me run my life, to guess what I need next, to guess what I should read in the morning, because it will know not only what's happening out there but also what I've read already, and also what my mood is, and who I'm meeting later on".
    Maybe not.

    Martha Lane Fox?
    Asked by a local authority official whether older channels needed to be "shut off" for savings to be realised, she replied: "Yes, absolutely. That's fundamental to digital by default.

    "It's not an option to keep sending people paper when they are perfectly able to use a digital service. It's not an option to keep a call centre going when you see volume go dramatically down. So of course, you have to turn channels off."
    Maybe not.

    Werner Vogels? (Who? You know. Werner. Werner Vogels. The Chief Technology Officer of Amazon Web Services, AWS. That's who.)
    "We are trying to break through the traditional model of enterprise software development," Vogels said, reiterating the AWS mantra for those who have not heard it before. "Core to the old style of doing business was that enterprises were being held hostage with very long-term contracts because that was the only way that you were able to drive your costs down. What is important is that you should keep your providers on their toes every day.

    "If we are not delivering the right quality of services, you should be able to walk away. You, the consumer of these services, should be in full control. That is core to our philosophy. And with that also comes the belief that if you help us gain economies of scale, and if we together operate to get increased efficiencies out of our platform, you should benefit from that."

    This is why, Vogels said, AWS has cut its prices 19 times on various services – it now offers more than 30 services, ranging from compute and storage clouds to various database, load balancing, and application frame work services. The most recent price cuts, announced in early March, have resulted in some S3 customers seeing their bills drop by 40 per cent and some EC2 users seeing a 32 per cent drop.

    "Why would we do this?" asked Vogels rhetorically. "Because we believe that we should help you be more successful. If you are more successful, in the long run, we will have benefit from that as well. This is a pure win-win situation for all of us."
    Now you're talking my language, said each burgomaster, assuming that the other burgomasters knew what the Double Dutch Mr Vogels was talking about. A 32% cut for the EC2s? Sounds good. And the S3s are doing even better, with 40%! Maybe Chris Chant was right. Maybe we should modernise ourselves ... and get rid of those rats once and for all.

    And it's not just AWS. There are more pipers where they came from. Google cloud services. Microsoft Windows Azure. IBM SmartCloud. Apple iCloud. To name but a few.

    Music to my ears, said each burgomaster, as though they'd never heard of predatory pricing and antitrust, and they all went off for a free lunch.


    ---------- o O o ----------


    In some accounts it is hard to tell the burgomasters from the children. Or the rats from the pipers, come to that. Harder still when you see how many burgomasters were recruited by rats after their early and well-funded retirement, or joined pipers.

    The earliest mention of the story seems to have been in a doodle on the home page of Google c. 2028. The doodle was described in several tweets between the 21st century and the 24th century ... This doodle is generally considered to have been created in memory of a tragic historical event for the town when all central and local government records went up in a puff of smoke or, more poetically, a "cloud".

    Also, the Whitehall town log now starts with this event. The earliest text record is from the town Facebook page in an entry from 2112 which states simply:


    ----------

    Updated: 3.3.14
    NHS England patient data 'uploaded to Google servers', Tory MP says

    A prominent Tory MP on the powerful health select committee has questioned how the entire NHS hospital patient database for England was handed over to management consultants who uploaded it to Google servers based outside the UK ...

    The patient information had been obtained by PA Consulting, which claimed to have secured the "entire start-to-finish HES dataset across all three areas of collection – inpatient, outpatient and A&E".
    Update 2.6.14

    A rueful article by Hugh Muir in the Guardian, Internet giants wooed us, but the honeymoon is over, nails the point, "we have been seduced. We have been lured by soft music and friendly adverts into a relationship that is anything but equal, and threatens to turn abusive".

    Updated 26.8.14
    We wanted the web for free – but the price is deep surveillance
    Advertising has become the online business model but by its very nature it involves corporations spying on users to produce more targeted results

    Updated 27.8.14
    Data guardian Sir Nigel Shadbolt on privacy versus freedom
    ... today we’re paying more attention to the big corporates and internet giants that sit on huge deposits of our data and stare back at us from the other side of the screen. Google, for example, has become a monopoly more powerful than many states.

    Updated 26.4.15
    Amazon Web Services is showing traditional IT players how they need to change

    Amazon Web Services (AWS) is clearly doing something right. The e-commerce giant has split out AWS revenues for the first time in its latest financial results, revealing a $5bn business growing at nearly 50% year on year.

    AWS has shown the big, traditional IT players the way to do public cloud - defining the market for infrastructure (IaaS) and platform as a service (PaaS) along the way, forcing the likes of IBM, HP, Oracle and Microsoft to respond. Amazon is by far and away the dominant public cloud player ...
    Always worth reading, that is from Bryan Glick's latest editorial in Computer Weekly magazine. He's right about that. The Pied Piper is surging.

    Mr Glick adds:
    Amazon has achieved $5bn of cloud revenue at a time when there are still widespread fears about cloud - related particularly to security and data protection - that prevent many large organisations, especially in heavily regulated sectors like financial services, from moving to public cloud. But those fears will be overcome; the sceptics will be convinced; the laggards will be forced to catch up. A tipping point is approaching.
    Is that right?

    Are the sceptics laggards? Or are they the responsible custodians of our "security and data protection"? Ours and our children's.