CIO

Customs Failure "A Catastrophe" of IT Governance

Whoever holds ultimate responsibility for the almost total paralysis of Australia's ports, the move to production of the Imports module of Australian Customs' massive re-engineering program proved "a monumental and catastrophic failure in corporate governance of IT".

But while the system, as a whole, failed utterly, corporate governance expert and principal consultant of Infonomics Mark Toomey says that doesn't mean the Integrated Cargo System (ICS) should be abandoned. Nor, at this stage, should the $200 to $250 million sunk into the project so far be considered wasted.

Toomey, who has presented a detailed discussion paper examining what went wrong with ICS in the November Infonomics IT Governance Letter, says now is not the time to launch hasty work intended to "cure the problems." Instead, he says, Customs should take a deep breath, and go back to basics.

"It seems undeniable that the cutover to the imports module of ICS, which saw ports choking on unprocessed cargo, and the year's peak load of pre-Christmas imports hopelessly delayed, was a comprehensive failure. In subsequent enquiries, it may well be proven that individual elements of the system worked well. But the reality is that, as a whole, the system failed utterly."

To begin to repair the damage, Toomey says the Australian Customs Service must implement effective governance processes before making any more decisions. It should look to contemporary guidance, such as that provided in AS8015, and ensure that its governance system for CMR and other initiatives is capable of steering the initiatives to a successful result.

"To learn what is missing from the existing governance system, it would be best to thoroughly review it, taking input from all stakeholders," he says. "The governance system should ensure that all significant decisions are made appropriately, by the right people, on the basis of robust evidence that the conditions to proceed are in place and stable. In an improved governance framework, the Australian Customs Service and major stakeholders need to revalidate the business case for CMR, to confirm and positively articulate the objectives and value that the nation will accrue from the project. Then should assess the work required, from this point forward, to achieve the objectives."

Doing so will involve evaluating the technology that has been created, the readiness of the industry, and the detail of the actual problems experienced during October. Toomey says Customs should also prepare a new plan, with engagement and agreement of all stakeholders, for the achievement of the objectives and value.

That plan needs to be fully and accurately costed, using the benefit of experience to date, detail the work to be undertaken by all parties, and calculate the cost of the work to test the economic case for persisting.

Toomey notes Australia's record of IT failures is no better than the rest of the world, from "distant examples", such as Westpac Bank's fabled CS90 project to far more recent examples like the disastrous Sydney Water's Customer Information and Billing System, and RMIT University's Academic Management System. Organizations should have learnt many lessons from these failures to help ensure IT initiatives do not founder and signs of trouble are not overlooked.

Yet he says Australia's recent experience of sea and air ports grinding to a standstill after problems emerged in deployment of the Cargo Management Re-engineering Project suggests that the lessons are yet to be learned.

"The reality is that we know very well in Australia how to get IT projects right. The absolute core discipline of governance of ICT is the single factor that makes sure the right people are engaged, doing the right thing, for the right reasons, in the right way, achieving targets and managing risks. Australia actually leads the world in definition of IT Governance with the publication in January this year of AS8015. The problem, as I see it, is that too many organizations believe that they are doing IT right - it's everybody else that has the problems," Toomey says.

Join CIO, the CIO Executive Council & IDC on 6 October at Australia’s premier Melbourne event for senior IT executives – the CIO Summit 2010. Find out more or register now.

More about: Australian Customs Service, RMIT, Sydney Water, Westpac, Westpac, Westpac Bank

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
 
Featured Whitepapers
Achieving ROI Through Application Integration: Meeting the desktop challenges of complex IT environments

This 2-part white paper examines ways you can optimise your software management, focussing on installation, integration and migration of applications into an existing environment. Read about benefits and gain insights now.

Wondering how to improve your business with UC on an IP Network?

Join Computerworld's Live Webinar where we will address the move many companies are making towards IP based voice services (SIP trunking, VoIP) and look at how they are using a single connection for data and voice rather than separate lines. Learn about the latest in IP networks and how it can help your organisation.

Wednesday 25th November 2009, Time 10.30 am EST (Sydney, Australia) Screening at your desk

Register now

  • +

    WikiLeaks founder Assange questioned by Swedish police 01 September, 2010 05:36:00

    Police and prosecutor are keeping mum on how the investigation is progressing
    WikiLeaks founder Julian Assange has now been questioned by Swedish police regarding a molestation charge directed at him, his lawyer said Tuesday.
  • +

    uTorrent patches application against DLL vulnerability 30 August, 2010 04:31:00

    uTorrent is one of many applications that is affected by the vulnerability
    The developers of the uTorrent file-sharing application have released an updated version that fixes a problem that could allow an attacker to load malicious code onto a user's computer.
  • +

    Wikileaks' Assange to be questioned, says Swedish prosecutor 26 August, 2010 04:54:00

    The Wikileaks founder has been accused of molestation, though one charge has already been dropped
    Swedish Chief Prosecutor Eva Finné has ordered that WikiLeaks founder Julian Assange be questioned about molestation allegations.
  • +

    Adobe fixes 20 vulnerabilities in Shockwave Player 26 August, 2010 03:55:00

    Most of the vulnerabilities could allow an attacker to run rogue code on a computer
    Adobe Systems patched 20 security vulnerabilities in its Shockwave Player on Tuesday. Most of the flaws could allow an attacker to run their own code on an affected computer.
  • +

    Sticks and stones: Picking on users AND security pros 26 August, 2010 02:08:00

    Name-calling is harmful to the cause of security
    I took my share of name-calling as a kid. I did my share of name-calling, too. We're taught that nothing good comes of such behavior. I've been thinking a lot about that since writing an article two weeks ago called "Security blunders 'dumber than dog snot'" during the 2010 USENIX Security Symposium.

Recent comments
Zones
SAS Resource Centre

This Resource Centre hosts a wealth of thought leadership articles, whitepapers, and success videos, to help you make the most out of your corporate information in order to swiftly make sound business decisions to survive and thrive in the current economic climate.

Oracle Resource Centre

News, Features and the latest whitepapers on SOA, Application Grid, Enterprise Management and Database

CIO Industry Insight Podcast #9: Tim Ayling, Chief Executive Officer, Platform46
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper
Securing People and Information: How to Protect Against Today’s Web-based Threats

This white paper explores the benefits of an Application Delivery Network, highlighting the ability to protect your users and applications and still deliver outstanding application performance with confidence, consistency and cost-effectiveness across your distributed network.

Read Whitepaper

Brought to you by