Infrastructure and Security Assessment

⁠⁠⁠1. purpose of review

• The review will assess whether the current network infrastructure and cyber security operating model is efficient, sustainable, fit-for-purpose and appropriately aligned to Comcare’s risk, service and delivery needs.

2. The review will consider the following matters:

• The effectiveness and design of the current operating model for network infrastructure and cyber security, including clarity of accountabilities, decision rights and delivery responsibilities.
• Roles, responsibilities, structures and reporting lines relevant to these functions, including opportunities to simplify management layers, reduce duplication and improve accountability.
• Skills, capability, capacity and resourcing within the internal teams, including the balance of effort across BAU, project delivery, assurance, incident response and administrative activity.
• Delivery and management approaches, including processes, ways of working, governance forums, prioritisation mechanisms and hand-offs across these functions.
• Collaboration and interfaces between the infrastructure team, cyber security team, service desk, architecture, business engagement, vendors and broader technology owners.
• Current sourcing arrangements, including in-house delivery, external providers, the SOC arrangement, and use of specialist support across network infrastructure and cyber security.
• Identification of gaps, risks, inefficiencies, duplication, key-person dependencies and improvement opportunities.
• Options for future sourcing and delivery models, including in-house, hybrid or managed service options, that improve efficiency while maintaining or strengthening cyber resilience and service outcomes.
• The review is not intended to reduce network infrastructure or cyber security capability for its own sake. It will identify where the current model can be simplified, better aligned to demand, and made more efficient without increasing operational or cyber risk.

Buyer contact: tenders@comcare.gov.au