Category Archives: public sector

Officials black out IT security report after it’s published in full

By Tony Collins

In one of the most bizarre regressions since the FOI Act came into force in 2005, officials at Somerset County Council have redacted an audit report on SAP security weaknesses after the report was published in full.

The result is that anyone can see links to both reports. This is the report with parts of it redacted – blacked out. These are links to the full versions, which were published before the redactions – here and here.

The report was written by auditors Grant Thornton for Somerset County Council and highlights weaknesses in a database that is shared by the council, Taunton Deane Borough Council and Avon and Somerset Police.  The database is part of a SAP system run by Southwest One on behalf of the three authorities.

Southwest One is an IBM-led enterprise that provides IT and other services to the three authorities under a controversial outsourcing contract. Dave Orr has written comprehensively about the deal.

Somerset published the Grant Thornton report in full. The media including Campaign4Change published some details of the IT security weaknesses mentioned in the Grant Thornton report. It appears that Avon and Somerset Police asked officials at Somerset to black out details of some of the weaknesses.

Somerset-based FOI campaigner Dave Orr says the blacking out is to save the blushes of the police.

Says Orr: “Much of the redaction in the Somerset County Council IT Controls report by Grant Thornton, especially generic and available password advice in Section 3, is not based in a genuine security threat, but looks to be rooted in a Police culture that seeks to avoid criticism and/or embarrassment.”

Somerset MP Ian Liddell-Grainger says:

“SAP was built on the cheap by IBM to serve three different customers – the County Council, Taunton Deane district council and the Police. It would have made sense to bung in a few partitions to stop council eyes taking a peek at police matters, or vice versa. But that would have cost money – perish the thought.”   

 Police SAP systems’s “significant” security weaknesses. 

BBC’s DMI project – another fine mess that was predictable

By Tony Collins

A National Audit Office memorandum published today on the BBC’s failed £125.9m Digital Media Initiative is a reminder – as in most failed big IT-enabled projects – that the causes have nothing to do with software and everything to do with management and people.

The NAO’s memorandum tells an all too familiar story with government IT (and the BBC is a public sector organisation):

– Over-optimism about the ability to implement

– Over-optimism about the ability to achieve the benefits

– Unclear requirements

– No thorough independent assessment of the technical design to see whether the DMI was technically sound

– The successful completion of the most straightforward of technology releases for the DMI, but these proved an unreliable indicator of progress.

– Technical problems and releases not meeting user expectations which contributed to repeated extensions to the timetable for completing the system, eroding user confidence and undermining the business case.

– Poor internal reporting. “The governance arrangements for the DMI were inadequate for its scale, complexity and risk. The BBC did not appoint a senior responsible owner to act as a single point of accountability and align all elements of the DMI. Reporting arrangements were not fit for purpose,” said the NAO.

– In the same way as the DWP failed with Universal Credit to take full account of recommendations in review reports, the BBC “did not adequately address issues identified by external reviewers during the course of the programme”.  The BBC had been aware that business requirements for the DMI were not adequately defined.

The BBC estimates that it spent £125.9m on the DMI. It offset £27.5m of spending on the DMI against transfers of assets, cash and service credits that formed part of its financial settlement with DMI’s previous developer Siemens. This left a net cost of £98.4m.

The BBC cancelled the DMI without examining the technical feasibility or cost of completing it, said the NAO.

The Corporation has written off the value of assets created by the programme, but is exploring how it can develop or redeploy parts of the system to support its future archiving and production needs.

Diane Coyle, Vice Chairman BBC Trust, said:

“We are grateful to the NAO for carrying out this report, which reinforces the conclusions of the PwC review commissioned by the Trust. It is essential that the BBC learns from the losses incurred in the DMI project and applies the lessons to running technology projects in future.

“The NAO’s findings, alongside PwC’s recommendations will help us make sure this happens. As we announced last December, we are working with the Executive to strengthen project management and reporting arrangements within a clearer governance system.  This will ensure that serious problems can be spotted and addressed at an earlier stage.”

Amyas Morse, head of the National Audit Office, said today:

“The BBC Executive did not have sufficient grip on its Digital Media Initiative programme. Nor did it commission a thorough independent assessment of the whole system to see whether it was technically sound.

“If the BBC had better governance and reporting for the programme, it would have recognized the difficulties much earlier than May 2012.”

Comment

The DMI project is exemplar of all that tends to go wrong in big government IT-enabled projects. Strong independent oversight and independent reviews that were published would have provided the accountability to counterbalance over-optimism.  But these things never seems to happen.

There are also questions about why the BBC took on the project from Siemens  and turned what could have been a success into a financial disaster.

NAO memorandum on the BBC’s Digital Media Initiative

BBC World at One’s focus on Government IT

By Tony Collins

The lead item on BBC R4’s World at One on Friday was about Government IT contracts.

On the programme were the government’s Chief Procurement Officer Bill Crothers, Cabinet Office minister Francis Maude, the chairman of the Public Accounts Committee Margaret Hodge, the UK IT Association, and me.

Some of the points made:

–  Bill Crothers gave an example of what he called “abuse” by some big IT suppliers. He said a young man who works for him lost his power cable. The supplier quoted £65 for a replacement. The price should have been £5 or £6.  When Crothers queried it, the supplier justified its price on grounds of security. Crothers could not believe that a power lead had security implications so he questioned the price again and received several pages of explanation from the supplier, which he did not read. Eventually the supplier “was good enough to reduce the price to £37”.

– HMRC was charged £30,000 for changing some text on its website.

– Francis Maude said a DWP team and a further 12 people from the Cabinet Office’s Government Digital Service had built – in only three months – a prototype of a digital solution to support the introduction of Universal Credit. The system cost just over £1m, he said. [Separately big IT suppliers at DWP have been paid £303m up to March 2013 for Universal Credit work.] Maude declined to predict the outcome of the “twin-track” work on the UC project.

– Some big legacy systems may soon need replacing – those that pay about £60bn a year in state pensions and collect nearly £100bn a year in VAT. “Those are going to be big projects,” said Margaret Hodge. “I don’t think we have seen the end of big projects, or the end of disasters.”

World at One in detail

Presenter Shaun Ley and BBC political correspondent Ross Hawkins focused on government IT because of an announcement by the Cabinet Office that it is drawing the line on “bloated and wasteful IT contracts”. The Cabinet Office was pitching its announcement as marking a “massive change,” said Hawkins.

Ley said Francis Maude announced the safeguards  in an attempt to ensure that IT contracts don’t become multi-billion pound failures. He said that the abandoned NPfIT had cost close to £10bn.

Hawkins quoted the UK IT Association as saying that  government did not know how to do deals with smaller suppliers. On the government’s relationship with big suppliers UKITA said the government was like a “battered wife or husband who doesn’t seem to know how to leave.”

Appalling

Hawkins said Crothers has the air of a man going to war. Crothers’ conclusion on the way things are at the moment:

“This is about the oligopoly, the cluster of big suppliers that have had it took good for too long. It’s reflective of monopolistic or oligopolistic behaviour.  It is not acting as if they are in hungry and in a competitive market.  That’s appalling.”

Universal Credit

Hawkins asked Francis Maude how confident he was that what was being put in place on Universal Credit would work.

“I hope it will work,” said Maude. “The digital solution was created by a team within DWP with a dozen or so GDS [Government Digital Service] staff assisting.

“They created a working prototype for a digital solution within 3 months at a cost of only a bit over £1m. That certainly can be basis of a successful long-term solution.”

Hawkins [to Maude] “I asked you whether you were confident the approach with DWP would work and you said you hoped it would. That suggests to me that maybe you are not (confident).”

Maude: “N0-one knows with these things. Anyone who says you are certain everything is going to succeed … the way we do things now is build something quickly, test it, prove it, test it with users, and so you can’t have certainty about any of these outcomes.”

Outsourcing failures

Hawkins said “We have had story after embarrassing story about outsourcing failures [such as the] government being charged for tagging dead people … now ministers  have an interest in coming out on the front foot and just for once being on the attack and having a whack at the IT companies.

“You don’t need to be a political genius to work out why they would like to do that rather than be endlessly explaining themselves after embarrassing stories in the papers.”

Ley (to me): “Is this the best way to deal with the problems government has experienced? The journalist Tony Collins has written widely  about project failures in IT in both the public and private sectors.”

I replied that big companies have sometimes charged a lot to make small software changes.  The Cabinet Office’s “red lines” were a good idea though they were a formalising of restrictions that had been in place some time.

The Cabinet Office doesn’t have the power to make changes happen because departments are accountable to Parliament for their spend and so don’t want much interference from the Cabinet Office. But the Cabinet Office is right to try and reduce the amounts spent on big projects.

Ley: “What will be the effect of breaking up contracts?”

I said I hoped the Cabinet Office’s restrictions would bring about a change in culture in departments against the assumption that big is beautiful. Big projects should be split into components which would give SMEs a greater involvement and could reduce the risks of projects failing.

More project disasters?

Hodge gave her reaction to the Cabinet Office’s restrictions in the context of the Universal Credit project.

“Francis Maude and Cabinet Office have been trying really hard to get some sense into the way that project has developed. But sadly the news we have had lately suggests to me that they have failed. It is about £400m so far on IT.

“What went wrong there was that the department [DWP] thought it [UC] was a big IT project instead of thinking:  we are going to be changing our business; we are going to get 6 benefits rolled into one. They [the DWP] have not written off that money [£303m] which is what my committee thinks they should have done, because they want to save face. Down the line I think we’ll see some disasters there.

“There are a lot of projects around  government, what are called legacy projects, where old systems need to be replaced . They are big projects – pensions in DWP where £60bn is given out a year;  VAT receipts  in HMRC where nearly £100bn is collected. Those are going to be big projects. I don’t think we have seen the end of big projects, or the end of disasters.”

Ley: “What about breaking them up into smaller projects? Won’t that reduce potential risks?”

Hodge: “The important thing is what Tony Collins was saying to you. What we find is that the skills don’t exist within departments, either to commission the IT properly or to manage the suppliers once they have the IT in place.

“We are about to examine the army recruitment contract – I think that is what we’ll find.  The MoD hasn’t got the skills to manage it.

Ley: “Do you welcome the ending of automatic contract extensions?”

“I warmly welcome that. This is a small step in the right direction. Having an expert as we have in Bill Crothers in the Cabinet Office is really important. What we haven’t got are skills in the departments. It is not like a business. If it was, Bill Crothers would probably run IT across the whole of government. Our departments run in silos. They haven’t got the skills. They have this demand for big, big programmes in the future and I don’t think we have seen, sadly, the end of IT disasters.”

Update

Thank you to Dave Orr for drawing my attention to an excellent piece on the World at One item by procurement expert Peter Smith who concludes:

“… There is a big issue – large suppliers have not covered themselves in glory, but small suppliers just can’t develop huge systems for DWP or MOD.

“The large suppliers must have a role, but we have to manage these contracts better. And the answer can’t just be a small hit squad in Cabinet Office. This needs real capability development across government, which we haven’t really seen as yet in a coordinated fashion.”

BBC World at One – Government IT contracts

Bill Crothers on BBC Radio 4 – suppliers get another good kicking

Are Govt IT-based project disasters over? Ask the Army

By Tony Collins

When senior civil servants know an IT-based project is in trouble and they’re unsure how bad things are, they sometimes offer their minister an all-encompassing euphemism to publicly describe the status of the scheme – teething.

Which may be why the defence secretary Philip Hammond told the House of Commons in November 2013 that the IT project to support army recruiting was having “teething” problems.

Now Hammond knows more, he says the problems are “big”. He no longer uses the “t” word. Speaking about the £440m 10-year Recruitment Partnering Project in the House of Commons this week Hammond said:

“Yes, there are big problems with the IT and I have told the House on repeated occasions that we have IT challenges…”

Only a few days ago Cabinet Office minister Francis Maude suggested that Government IT was no longer a byword for disaster, though he accepted there were still challenges.

In a speech on how he expected the UK to become the G8’s most digital government by next year (whatever that means) Maude said: “… it’s great news that DVLA is about to launch online driving records which can be used by anyone with a driving licence as well as by the insurance industry.

“Back in 2010 our digital offering was limited at best and government IT was a by-word for disaster … There are still challenges but with the help of the Government Digital Service I am determined that the UK will be the G8’s most digital government by next year.”

A few days later The Times reported on a leaked Gartner report on the army Recruitment Partnering Project. The report expressed concerns about the entire plan, including a poor project management team and delays that were allowed to spiral out of control.

It claimed that the Army’s recruitment division had failed to challenge MoD policy in 2011 that had apparently favoured the less suitable of the two competing bidders chasing the contract.

Hammond is said to be mulling over a £50m payout for Capita to build a new infrastructure for the recruiting system instead of trying to integrate it with systems supplied by the “Atlas” consortium under the Defence Information Infrastructure project. Hammond told the House of Commons this week:

“… there have been initial difficulties with that recruiting process as we transition to the new recruiting arrangements with Capita.

“In particular, we have encountered difficulties with the IT systems supporting the application and enlistment process. The decision to use the legacy Atlas IT platform was deemed at the time to be the quickest and most cost-effective way of delivering the new recruitment programme.

“An option to revert to a Capita hosting solution was included in the contracts as a back-up solution.

“I was made aware in the summer of last year that the Army was encountering problems with the integration of the Capita system into the Atlas platform. Since then we have put in place a number of workarounds and mitigation measures for the old IT platform to simplify the application process, and we have reintroduced military personnel to provide manual intervention to support the process.

“Having visited the Army’s recruitment centre in Upavon [Wiltshire] on 30 October, it became clear to me that, despite the Army putting in place measures to mitigate those problems in the near term, further long-term action was needed to fix the situation.

“It was agreed in principle at that point that the Atlas system was not capable of timely delivery of the Capita-run programme and that we would need to take up the option of reverting to Capita building a new IT platform specifically to run its system, which will be ready early next year.

“… we have already taken action to bring in a range of new initiatives that will make it progressively easier and quicker for applicants … the introduction this month of a new front-end web application for Army recruitment; a simplified online application form; more streamlined medical clearance processes …

“With an improved Army recruitment website, streamlined medicals and an increase in the number of recruiting staff, recruits should see a much-improved experience by the end of this month.

“.. we are looking at further ways of improving the management of the recruiting process in the intervening period before the introduction of the advanced IT system now being developed in partnership with Capita, which is expected to be deployed in February 2015…”

Vernon Croaker, Labour’s defence spokesman, said the recruitment project was an IT fiasco. He wondered why Hammond had initially described the problems as teething.

“Today we have learned [from newspapers] that the problems are even worse than anyone thought and still have not been fixed.

“Will the Defence Secretary tell the House which Minister signed off the deal and who has been responsible for monitoring it?

“… Will the Secretary of State also confirm that £15.5m has been spent building the existing flawed computer system behind the project? Finally, is it correct that this continuing disaster is costing taxpayers £1 million every month?…”

Croaker quoted a minister Andrew Robathan as telling MPs on 10 April 2013 that the “Recruiting Partnering Project with Capita…will lead to a significant increase in recruiting performance”.

Croaker said: “Is there any Member of this House, any member of our armed forces or, indeed, any member of the British public who still believes that?”

In March 2012 Capita announced that the Recruitment Partnering Project was valued at about £44m a year for 10 years and was expected to deliver benefits in excess of £300m to the armed forces. It would “release military recruiters back to the front line” said Capita.

Comment. Francis Maude is probably right: there don’t seem to be as many big IT-based project failures as in previous decades. But then the truth isn’t known because progress reports on big IT-related schemes are not published.

Indeed little would be known about the Capita Recruitment Partnering Project is not for the leaked report to The Times. Without the leak, public information on the state of the project would be confined to Hammond’s “teething problems” comment to MPs last November.

Internal and external reports on the state of the Universal Credit IT project continue to be kept secret.  It’s not even clear whether ministers are properly briefed on their big IT projects. Hammond almost certainly wasn’t last year. IDS was left to commission his own “red team” review of Universal Credit IT.

Perhaps the “good news” reporting culture in Whitehall explains why the NHS IT scheme, the NPfIT, continued to die painfully slowly for 7 years before senior officials and ministers started to question whether all was well.

Hammond is still getting wrong information. He described “Atlas” systems in the House of Commons as the “legacy IT platform”.

The Atlas contract for the Defence Information Infrastructure was awarded in 2005 for 10 years. It doesn’t even expire until next year. It may be convenient for officials to suggest that the reason Capita has been unable to link new recruitment systems into the DII network is because DII is old – legacy IT.  But the multi-billion pound Atlas DII project cannot be accurately described as “legacy” yet.

If ministers don’t get the truth about their big IT projects until serous problems are so obvious they can no longer be denied, how can Parliament and taxpayers expect to get the truth?

Lessons from NASA?

NASA put in place processes, procedures and rules to ensure engineers were open and deliberately adversarial in challenging assumptions. Even so it has had difficulties getting engineers to express  their views freely.

Diane Vaughan in her excellent book “The Challenger Launch Decision” referred to large organisations that proceeded as if nothing was wrong “in the face of evidence that something was wrong”.  She said NASA made a series of seemingly harmless decisions that “incrementally moved the space agency towards a catastrophic outcome”.

After the loss of Challenger NASA made many changes. But an investigation into the subsequent tragedy of the Columbia space shuttle indicated that little had actually changed – even though few of the top people who had been exposed to the lessons of Challenger were still in position.

If NASA couldn’t change when lives depended on it, is it likely the UK civil service will ever change?  A political heavyweight,  Francis Maude has tried and failed to get departments to be more open about progress or otherwise on their big IT-based projects.  Permanent secretaries now allow the out-of-date “traffic light” status of some projects to be published in the annual report of the Major Projects Authority. That is not openness.

The failure so far of the Recruitment Partnering Project, the routine suppression of information on technology-based scheme such as this, and the circumscribed “good news” briefings to ministers, suggest that government IT-based project failures are here to stay, despite the best intentions of the Cabinet Office, GDS and the Major Projects Authority.

Thank you to campaigner Dave Orr for his email on the recruitment project

Patient records go-live “success” – or a new NPfIT failure?

By Tony Collins

John Goulston says the go-live of a new patient records system at his trust is a “success”.

He should know. He’s Chief Executive of Croydon Health Services NHS Trust. He’s also chair of the trust’s Informatics Programme Board which has taken charge of bringing Cerner Millennium to Croydon’s community health services and the local University Hospital, formerly the Mayday.

He was formerly Programme Director of the London Programme for IT at NHS London – a branch of the NPfIT.

In a report two weeks ago Goulston said the trust deployed the “largest number of clinical applications in a single implementation in the NHS”. Croydon went live with Cerner Millennium on 30 September and 1 October 2013.

Said Goulston in his report:

“Administrative functions do not engage clinicians; providing them with a suite of clinical functionality has been justified as each weekday approx. 1,000 staff are logged on and using the system. CHS [Croydon Health Services] has in Phase 1 deployed, in addition to patient administration, the largest number of clinical applications in a single implementation in the NHS England.”

BT helped install Millennium at Croydon under the National Programme for IT.  The trust’s spokesman says the Department of Health provided central funding, and the trust paid for implementation “overheads”.  The Health and Social Care Information Centre was the trust’s partner for the go-live.

The Centre is the successor for Connecting for Health. It has taken on CfH’s officials who continue to help run the NPfIT contracts with BT and  CSC.

Goulston said that Cerner and BT have paid tribute to the trust which installed Millennium in A&E, outpatients, secretarial support and cancer services, and elsewhere.

“Our partners Cerner, BT and Ideal have commented that the Trust has undertaken one of the most efficient roll-outs of the system they have worked on, with more users adopting the system more quickly and efficiently than other trusts … the success we have achieved to date is the result of the efforts of every single system user and all staff members,” said Goulston.

Best Cerner implementation yet?

Optimistic remarks about their launch of Cerner Millennium were also made in 2012 by executives at the Royal Berkshire NHS Foundation Trust.  Their optimism proved ill-judged.

Of the Millennium go-live at Royal Berkshire, trust executives said that it “had been considered to be the best implementation of Cerner Millennium yet and that despite staff misgivings, the project was progressing well”.   This positive message should be disseminated, they said.

Months later they told the Reading Chronicle of patient safety issues and a financial crisis arising from the Millennium implementation.

A Royal Berkshire governors Rebecca Corre was quoted as saying: “There is a patient safety issue when staff write down observations and then there is an hour before they can get it onto the computer. If it is an experienced nurse, they may pick up a problem, but others may not.”

Ed Donald, Chief Executive of Royal Berkshire was quoted as saying:

“Unfortunately, implementing the EPR [electronic patient record] system has at times been a difficult process and we acknowledge that we did not fully appreciate the challenges and resources required in a number of areas.”

Are executives and managers at Croydon Health Services NHS Trust  now similarly afflicted with an unjustified optimism about the success of their Cerner go-live?  

Past consequences of NPfIT go-lives hidden?

The Department of Health has claimed benefits for the NPfIT of £3.7bn to March 2012 but there have been trust-wide failures: thousands of patients have had their appointments, care or treatment delayed by difficulties arising from past implementations of patient record systems under the NPfIT.  For thousands of patients waiting time standards have been exceeded or “breached” because of disruption arising from troubled go-lives.

In nearly every case trusts made it difficult for the facts to come out publicly. Vague or unexplained fragments of information about the consequences of the NPfIT implementation appeared  in different board papers over several months. The facts only emerged after a journalistic investigation that required scrutiny of many board papers and follow-up questions to the trust’s press office.

So Campaign4Change investigated Croydon Health’s implementation of Cerner Millennium to see if the Francis report’s call for a “duty of candour” over mistakes and problems in the NHS have made any difference to the traditional fragmentation of facts after NPfIT go-lives of patient record systems.

The Francis report called for “openness, transparency and candour“.  Trusts were told not to hide sub-standard practices under the carpet. The health secretary Jeremy Hunt said it can be “disastrous” when bad news does not emerge quickly and the public are kept in the dark about poor care.

To my questions about the Cerner Millennium implementation Croydon trust’s spokesman always responded promptly and tried to be helpful. But it appears that trust executives have given him limited information about consequences of the go-live, and have preferred to indulge the “good news” NHS culture that Jeremy Hunt warned about.

On being asked what problems the trust has faced since the go-live the spokesman gave various answers that made no mention of the problems.

“All of our staff received training on the system, and we are continuing to offer our teams support as it is embedded.”

What of the problems arising from the implementation, and has the board been fully informed?

“Millennium has featured regularly on the Corporate Risk Register presented to each Part 1 Board meeting.   In addition, implementation has received detailed confidential consideration at Part 2 of Board meetings, (which is why you won’t find it in our public board papers).”

Given Francis’s call for duty of candour,  should the trust be more open about its problems?

“The initial roll out for CRS Millennium was introduced over three days at the Trust, with a phased approach.  We did this to ensure the system was working in each department, before introducing it in another area.

“We are monitoring waiting time performance and records management so we can identify any issues if they emerge. The system is still being introduced in some services and when this is completed we will be able to assess the overall programme,” said the spokesman.

Does Croydon’s unwillingness to give in its statements to me any details of problems indicate that the culture of a lack of transparency in the NHS will be hard to change, no matter how many times Jeremy Hunt talks about the need for candour when things go wrong?

The spokesman:

“I’d like to be clear about the Trust’s approach:

  • The Trust board has been cited on the roll out of CRS Millennium and any potential risks throughout the process.  As I previously noted, the board received an update in September.  The board meeting, which will take place on Monday of next week, will receive a further update from the Chief Executive.  The papers from this meeting will be published on our website and the meeting takes place in public;
  • A meeting chaired by the Chief Operating Officer has reviewed any operational matters arising on a daily basis.  This is an internal meeting for clinicians and managers which has informed the implementation process;
  • Patients and visitors to the hospital have been kept fully appraised of the introduction of the system and were made aware that they may experience some delays to the check-in process while staff became familiar with the new computer system;

“These actions would suggest that the Trust has been transparent in its approach.  You are welcome to review the board papers when they are published.”

Serious problems now emerge

Croydon did indeed publish its board papers on 25 November 2013 – which is to its credit because not all NHS trusts publish timely board papers.

But it’s mostly in the small print of various board papers that details emerge of Millennium-related problems. The shortcomings are mentioned as individual items rather than in a single, detailed Cerner Millennium deployment report.  This leaves one to question whether trust directors have an overview of the seriousness of the difficulties arising from its implementation of a new patient records system.

These are some excerpts from deep inside Croydon’s latest board papers:

Breaches in waiting time standards

– “CRS Millennium (Cerner) Deployment -Network downtime – Week 1.  In particular, the significant network downtime in week 1 (BT N3 problem) led to no electronic access to Pathology and Radiology which resulted in longer waits for patients in the Emergency Department (ED) leading to a large number of breaches. This was a BT N3 problem which has been rectified with BT providing CHS with the required scale of N3 access (>600 concurrent users and >1,600 users on any day – which is the largest network usage of any trust in England).”

– • “Hospital Based Pathways: The deployment of CRS Millennium was a particular challenge in the month across the multiple service areas within the Directorate of A&E, Surgery and Maternity.

• “Cancer & Core Functions: With the implementation of CRS Millennium, the open pathways part of RTT [referral to treatment – patient waiting times) may fail the standard – validation will be completed after the narrative for this report… “

Excessive waits in A&E

– “The main drivers adversely affecting the performance in the month [October 2013) for A&E were the deployment of CRS Millennium and the commencement of winter pressures due to the seasonality change.  A&E  4-Hour Total Time in Department Target: 95.00%. Actual: 91.57%.”

Over budget

“The Trust position as at October is an adverse variance of £4.1m. This is a significant deterioration on the Month 6 position. The movement is mainly due to a significant reduction in income mainly as a result of operating issues caused by the Cerner deployment (£0.9m)…  Actual £14.8 (£14.8)m; Budget £10.7m; Variance £4.1m.”

“Cerner Millennium: Plan YTD [year-to-date] £245,000; Actual YTD  £621,000;

Significant loss in income

“… A new patient administration system was deployed in the Trust on the 30th September and 1st October (Cerner Millennium). The deployment has resulted in significant loss in income in September and October £ 1.1m. Trust performance on Activity Planning Assumptions and Key Performance Indicators is substantially worse than plan …”

Extra costs

“Medical £412k and admin £148k agency levels continue to be high due to cover for vacancies, annual leave, sickness and release of staff for Cerner training. The Trust has also incurred additional costs associated with the Cerner deployment (£600k) including overtime payments to administration staff and training costs.”

Bid to recover Cerner costs?

“… The Trust is currently forecasting a deficit position of £17.8m, which is £3.3m off the plan submitted to the NHS Trust Development Authority. This is a £3m movement from the month 6 forecast and is as a result of operational issues caused by the Cerner deployment. The current projected impact is an additional costs £1.7m and a loss in activity £1.1m . An application is to be made to recover the additional cost/losses relating to the Cerner deployment [of £2.9m] …”

HSCIC support for delays

“Cerner Millennium – Revised implementation date to Sept 2013 (achieved) ,with resultant additional costs including additional PC requirements of £146k, specialist support services £300k, procurement costs £91k, data cleansing costs £200k.

“Health& Social Care Information Centre (HSCIC) has confirmed support for the delayed implementation will be provided, accounting treatment of support to be confirmed with Department of Health.”

More money to stabilise operational position?

“As a result of operational issues caused by the Cerner deployment , Income is significantly reduced in October. The forecast assumes that the Trust will resume normal operating levels from November and that an element of the income lost will be will be recovered in the latter part of the year. A business case is being submitted to the Trust Board for additional investment in Cerner to stabilise the operational position.

“If there are further operational issues due to the Cerner deployment then this will significantly impact on the year end forecast…”

Over-optimism?

Principal risk -reporting output from Cerner is not accurate or timely. Officer in charge: CEO. Before go-live risk scores: June 2013 – 16; July – 16; Aug  – 10; Sept – 10. After go-live risk score (for Oct): 20 [high risk of likelihood and consequences]

Principal risk – operational readiness following the implementation of Cerner. Officer in charge: COO.  Before go-live risk score 15. Post go-live: 20. Risk rating before go-live – Green. After go-live – Red.

Red risks

Corporate Risk Assurance Framework

Nine risks are reported as Red [two of which relate directly to Millennium]:

“… Reporting output from Cerner is not accurate or timely. Data migration was successful. However reliance on external provider as internal knowledge has not yet been fully gained. A data quality dashboard with exception reporting is in place.

“… Operational readiness following the implementation of Cerner CRS Millennium impact conveyed to Trust Development Authority e.g. ED [Emergency Department] reporting and cost overruns

Risk scores

– Failure of CRS millennium to deliver anticipated benefits – 12. Officer in charge: CEO

– Reporting output from Cerner is not accurate or timely – 20. Officer in charge: CEO

– Operational readiness following the implementation of Cerner – 20. Officer in charge: COO

Croydon’s trust’s response to problems

Said John Goulston, Croydon’s CEO, in his latest [November 2013] report to the board of directors:

“The issues being encountered now with CRS Millennium are not due to any lack of integration testing with legacy applications or testing of workflow. They can be attributed to changing from a 25 year old Patient Administration System (Patient Centre) which did not require working in real time, was simple and intuitive to use, easily configurable and flexible to our needs.

“CRS Millennium’s patient administration functions are almost the complete opposite and the language used is new for our staff i.e. conversations, encounters etc. For our staff it has been a big ask for them to step into and up to such a complex application.”

He added: “The benefits of the new system are that each patient will have a single accurate electronic record that can be viewed and kept up-to-date by hospital and community clinical staff. This will eventually mean less time searching for patient notes, missing documentation and duplicating patient information…

“As with any massive change, there are still some challenges to tackle in making the system work effectively for every single user, in a diverse and complex organisation.

“However the success we have achieved to date is the result of the efforts of every single system user and all staff members. I would like to thank all our staff for their hard work in getting the Trust to this important stage.”

The trust spokesman gave me this statement on the problems:

“The Trust board has been given regular reports on the roll out of CRS Millennium and any potential risks throughout the process, not least through its regular reviews of the Corporate Risk and Board Assurance Frameworks.  As I previously noted, the board received a specific update in September.

“As you already know, November’s board meeting received a further update from the Chief Executive.  The papers from this meeting were published and the meeting takes place in public;  Those attending are invited to put forward questions.

“A meeting chaired by the Chief Operating Officer continues to review operational matters.  This is an internal meeting for clinicians and managers which has informed the implementation process;

“Patients and visitors to the hospital have been kept fully appraised of the introduction of the system and were made aware that they may experience some delays to the check-in process while staff became familiar with the new computer system;

“As you highlight from the board report, Cerner & BT noted that ‘the Trust has undertaken one of the most efficient roll-outs of the system they have worked on’   The papers also note some operational challenges as the system was rolled out.  These have been addressed as part of the daily meetings I reference above – these are mainly concerned with users familiarising themselves with the system and have been addressed through the support and training staff received.

“In terms of the costs, the introduction of CRS Millennium has been supported by central funding from the Department of Health with the Trust paying the implementation overheads.   These costs are a matter of public record and the Trust publishes annual Accounts as part of its Annual Report.”

Comment

When you go into hospital it’s reassuring to know the directors will be well informed and open about problems that could affect you.

The approach of Croydon Health Services NHS Trust to openness about its problems is not reassuring. It is no better or worse than other trusts that have implemented Cerner’s Millennium. In fact the timely publication of its board papers means it is more open than some.

But it should not require a time-consuming journalistic investigation to establish the consequences for patients of an NPfIT go-live. It has required just such an investigation after the go-live of Millennium at Croydon.

Board directors will not have the time to dig for, and piece together, information about internal problems that could delay patient appointments, treatment and care. They need the unpalatable facts in one place. Croydon Health Services has failed to make it easy for patients or board directors to see what has gone wrong.

NPfIT deployments at other trusts have led, cumulatively, to thousands of patients having appointments that were disrupted, or who had to wait longer to be seen than necessary, or whose records were not available, or who were seen with another patient’s records.

In shying away from telling the whole truth trusts take their cue from the top: the Department of Health has always made it hard to establish facts about anything to do with the NPfIT.  Said the Public Accounts Committee in its report The National Programme for IT in the NHS: an update on the delivery of detailed care records systems in July 2011:

 “It is unacceptable that the Department [of Health] has neglected its duty to provide timely and reliable information to make possible Parliament’s scrutiny of this project.

“Basic information provided by the Department to the National Audit Office was late, inconsistent and contradictory.”

Unanswered questions

Croydon has questions to answer, such as how many breaches of waiting time standards it has had, and may still be having, due to problems arising from the go-live. Other unanswered questions:

– What does a “a large number of breaches” in the Emergency Department mean? Have each the patients affected been told?

– Why are the risks related to the implementation much higher after go-live than before, given that the trust has had years to prepare for the go-live, and the many lessons it could have learned from other trusts?

– Exactly what problems are still affecting patients?

In a post-Francis NHS, Jeremy Hunt has demanded openness about mistakes and problems. There is an agreed need for change – but how can Hunt change an NHS culture – indeed a public sector culture – in which senior executives, in troubled IT implementations, will always emphasise the good news over the bad, perhaps hoping the bad will always remain hidden?

More IT-based megaprojects derail amid claims all is well

By Tony Collins

If one thing unites all failing IT-based megaprojects in the public sector it is the defensive shield of denial that suppliers and their clients hold up when confronted by bad news.

It has happened in the US and UK this week. On the Universal Credit  project, the minister in charge of the scheme, Lord Freud, accepted none of the criticisms in a National Audit Office report “Universal Credit: early progress”.   In a debate in the House of Lords Lord Freud quoted from two tiny parts of the NAO report that could be interpreted as positive comments.

“Spending so far is a small proportion of the total budget … and it is still entirely feasible that [universal credit] goes on to achieve considerable benefits for society,” said Lord Freud, quoting the NAO report.

But he mentioned none of the criticisms in the 55-page NAO report which concluded:

“At this early stage of the Universal Credit programme the Department has not achieved value for money. The Department has delayed rolling out Universal Credit to claimants, has had weak control of the programme, and has been unable to assess the value of the systems it spent over £300 million to develop.

“These problems represent a significant setback to Universal Credit and raise wider concerns about the Department’s ability to deal with weak programme management, over-optimistic timescales, and a lack of openness about progress.”

And a shield of denial went up in the US this week where newspapers on the east and west coast published stories on failing public sector IT-based megaprojects.  The LA [Los Angeles] Times said:

As many as 300,000 jobless affected by state software snags

“California lawmakers want to know why Deloitte’s unemployment benefits system arrived with major bugs and at almost double the cost estimate. The firm says the system is working.”

The LA Times continued:

“Problems are growing worse for the state’s Employment Development Department after a new computer system backfired, leaving some Californians without much-needed benefit cheques for weeks.”

The Department said the problems affected 80,000 claims but the LA Times obtained internal emails that showed the software glitches stopped payment to as many as 300,000 claimants.

Now lawmakers are setting up a hearing to determine what went wrong with a system that cost taxpayers $110m, almost double the original estimate.

Some blame the Department’s slow response to the problems. Others point the finger at a Deloitte Consulting.

The LA Times says that Deloitte has a “history of delivering projects over budget and with problematic results”. Deloitte also has been blamed, in part, for similar troubles with upgrades to unemployment software in Massachusetts, Pennsylvania and Florida, says the paper.

“We keep hiring the same company, and they keep having the same issues,” said Senator Anthony Cannella.  “At some point, it’s on us for hiring the same company. It’s faulty logic, and we’ve got to get better.”

In 2003 California planned to spend $58m upgrading its 30-year-old unemployment benefits system. By the time the state awarded Deloitte the contract in 2010  the cost estimate had grown by more than $30m.

The Department handed out $6.6bn to about 1 million unemployed Californians in 2012. The software was expected to ease the agency’s ability to verify who was eligible to receive benefits.

Problems began when the Department transferred old unemployment data to the new system. The software flagged claims for review — requiring state workers to manually process them.

The LA Times says that officials thought initially the workload would be manageable, but internal emails showed the agency was quickly overwhelmed. Phone lines were jammed. For weeks, the Department’s employees have been working overtime to clear the backlog.

A poor contract?

In a contract amendment signed two months ago California agreed to pay Deloitte $3.5m for five months of maintenance and operations costs. Those costs should have been anticipated in the contract said Michael Krigsman, a software consultant who is an expert on why big IT-based contracts go awry. He told the LA Times:

“It’s a striking oversight that maintenance was not anticipated at the beginning of the contract when the state was at a much stronger negotiation position.”

By the time the middle of a project is reached, the state has no choice but to stick with Deloitte to work out bugs that arise when the system goes live, he said.

System works

Loree Levy, a spokeswoman for the Department, said the system is working, processing 80% of claims on time. As for the troubles, she said, “There is a period of transition or adjustment with any large infrastructure upgrade like this one.”

Deloitte spokeswoman Courtney Flaherty said the new California system is working and that problems are not the result of a “breakdown or flaw in the software Deloitte developed”.

System not working?

While there seems to be no project disaster in the eyes of the Department and Deloitte Consulting, some of the unemployed see things differently. One wrote:

“I am a contract worker who had to fight for my unemployment benefits. I won my case and yet they still cannot pay me… It’s been more than 3 weeks since I won my appeal and as of this moment, I am owed 13 weeks of back payments. To add insult to injury, they cannot send me current weeks to certify and they refuse to even try to help me to get back into the online system.

“I blame Deloitte, but it is California that carries the heaviest burden of fault… We’re nearing November and they still haven’t fixed an issue that began over Labor Day? Nonsense!

“This is untenable for everyone affected …We are owed reparations as well as our money at this point. It’s a funny word, affected. That means families and individuals are going hungry but can’t get food stamps or welfare. It means evictions and repossessed cars. It means destroyed credit, late fees, years of turmoil and shame for people already dealing with unemployment. Shame on you California.”

Another wrote:

“ … Not communicating is NOT an answer. Unemployed individuals caught up in the nightmare were told to be patient.  Rents and other expenses were still accumulating.  But [when you] add on additional fees: late fees, restoral fees, interest fees, etc…….you get the picture.

“Dear Governor Brown,

“Please reimburse me for all additional fees I’ve had to absorb to survive this fiasco.  You are going to make me payback any overpayments, but ignore the cost to the unemployed taxpayer.  This is  appears to unfair.  Perhaps Deloitte should pay us back from their contracted funds before they receive their final payment.  I am saving all of my receipts to deduct from my 2013 tax return.

“BTW Gov Brown – I am still waiting on additional payments as of today and DMV registration for my vehicle was due on 10/20/13.  Are you going to waive the penalty for late payment? Am I the only one with this question?”

Scrutiny

California’s state Assembly has set a date of 6 November 2013 for a hearing into the Department’s system upgrade.

“We’re going to look at EDD, the contractors and others to see how the system broke down so we can avoid this in the future,” said Henry Perea, chair of the Assembly’s Insurance Committee, which has oversight over the jobless benefits program.

On its website Deloitte says:

“Deloitte continues to help EDD [Employment Development Department] transform the level of service it provides to unemployed workers and improve the quality of information collected by EDD. The next time unemployment spikes, California should be ready to meet the increased demand for services.”

Massachutsetts IT disaster?

On the opposite coast the Boston Globe reported on an entirely separate debacle (which also involved Deloitte):

          None admit fault on troubled jobless benefits system

“… even with the possibility that unemployed workers could face months more of difficulties and delays in getting benefits, officials from the Labor Department and contractor, Deloitte Consulting of New York, testified before the Senate Committee on Post Audit that the rollout of the computer system was largely a success.

“‘I am happy with the launch,’ said Joanne F. Goldstein, secretary of Labour and Workforce Development, noting that she would have liked some aspects to have gone better.

“Mark Price, a Deloitte principal in charge of the firm’s Massachusetts business, acknowledged that software has faced challenges during the rollout, but insisted, ‘We have a successful working system today. ‘’’

NPfIT shield

A shield of denial was up for years at the Department of Health whose CIOs and other spokespeople repeatedly claimed that the NPfIT was a success.

Comment

If you didn’t know that Universal Credit IT wasn’t working, or that thousands of people on the east and west coasts of the US hadn’t been paid unemployment benefits because of IT-related problems, and you had to rely on only the public comments of the IT suppliers and government spokespeople, you would have every reason to believe that Universal Credit and the jobless systems in Massachusetts and California were working well.

Why is it that after every failed IT-based megaproject those in charge can simply blow the truth gently away like soap bubbles?

When confronted by bad news, suppliers and their customers tend to join hands behind their defensive shields. On the other side are politicians, members of the public affected by the megaprojects and the press who have all, according to suppliers and officials, got it wrong.

Is this why lessons from public sector IT-based project disasters are not always learned? Because, in the eyes of suppliers and their clients, the disasters don’t really exist?

None admit fault on troubled jobless benefit system

State fired Deloitte

Complaints continue despite claims system is under control

As many as 300,000 affected by California’s software problems

California’s predictable fiasco?

Who polices police IT reports?

By Tony Collins

The police, and civil and public servants in central government, the NHS and local authorities criticise journalists for biased reporting – taking selected facts out of context.

They’re sometimes right.  Journalists working for national newspapers can draft an article that is diligently balanced only to find, by the time it’s published, it leaves out facts which would have complicated, blunted, or contradicted the main points.

It’s one thing for this to happen in the world of journalism. You don’t expect public bodies to report on their own affairs with a partiality that rivals out-of-context reporting by some newspapers.

But it appears to be happening so regularly that one-sided self-reporting on organisational performance may be becoming the norm in the public sector.

In the NHS subjective, positive reporting in board papers – where managers tell directors what they think they want to hear – could help to explain why Cerner patient record implementations have, for years, gone badly wrong for the same reasons.

In recent months reports without balance have been published on the performance of Avon and Somerset Police’s IT outsourcing contract with IBM. 

Somerset County Council, Taunton Deane Borough Council and Avon and Somerset Police  are minority shareholders in a private company, Southwest One,  which is owned by IBM.

Confusingly, Taunton Deane Borough Council issued positive reports about its successful partnership with Southwest One – and then it decided to take some services back in-house.

Now it has emerged – only as a result of FOI requests by Somerset resident and campaigner Dave Orr – that two independent organisations, the National Audit Office, and HM Inspectorate of Constabulary, have commented positively on Avon and Somerset Constabulary’s partnership with Southwest One, based entirely on the unaudited opinions of the police force itself.

SAP

From his FOI requests Orr learned that the Avon and Somerset’s outsourcing deal with Southwest One has not gone entirely as expected. The National Audit Office’s FOI team has released notes of a joint visit by the NAO and HM Inspectorate of Constabulary to Avon and Somerset police in December 2012.  The visit was to find out about how well Southwest One was delivering services to the police force.  

The NAO’s notes are positive in parts. They say that performance has improved considerably since the implementation of the contract.

“Implementation of SAP improving the accounts close-down process, initial issues being resolved and a good quality of service being provided regularly.”

But there is another side to the story that is not reflected in the published accounts of Avon and Somerset’s relationship with Southwest One. The NAO’s [unpublished] field notes say:

“Fewer than expected benefits have been realised from IT due to the considerably different security requirements of the Police compared to the Councils.

“It also took a long time for SAP to be implemented. There has yet to be a duty management system implemented by SWOne which is part of the contract… SAP would have benefited from some pre-launch testing or piloting.”

A letter to Orr from the Home Office appears to confirm that Avon and Somerset Police’s participation in Southwest One is an unequivocal success.

“The private sector can help to deliver police support services better and at lower cost. Every pound saved means more money for the front line, putting officers on the streets…

“In its report “Policing in Austerity: rising to the challenge [2013] Her Majesty’s Inspectorate of Constabulary identified the Southwest One partnership as being a key element in achieving savings for Avon and Somerset Constabulary while ensuring better procurement, streamlining business support processes, and ensuring better use of police officer time.

“The report also noted that the Southwest One collaboration was the first of its kind for policing in England and Wales and that to date, no other force has delivered this level of partnership with local authorities.”

A little of the other side of the story comes in the last sentence of the Home Office letter to Orr which says: “We understand that Avon and Somerset Constabulary continues to work closely with IBM to resolve any technical difficulties and improve the services provided by Southwest One.”

Indeed a table on page 155 of HMIC ‘s 2013 report Policing in austerity: rising to the challenge indicates that Avon and Somerset Constabulary has one of the worst records of any police force when it comes to savings delivered between 2010/11 and 2012/13. [Table: Key indicators of the challenge – quartile analysis.]

Southwest One began a 10-year contract providing services to Avon and Somerset Police in 2008. The services included enquiry offices, district HR, estates, financial services, site administration, facilities, corporate human resources, information services, purchasing and supply, and reprographics. The contract involves 554 seconded staff.

Comment

Police forces, councils, the NHS and central government departments need  a few Richard Feymans to report on their organisation’s performance. Feynman was a gifted scientist, MIT graduate and noble prize winner who was chosen as a commissioner to report on the cause , or causes, of the Challenger Space Shuttle “O” rings accident on 28 January 1986.

He reported with such independence of mind and diligence that his hard-hitting findings were not considered acceptable to be included in the main report of the Presidential Commission of inquiry into the accident.  Feynman had to be content with having his findings published as an appendix to the Commission’s report – and an edited appendix at that.  

He suggested in his book “What do you care what other people think?” that his appendix was the only genuinely balanced part of the official inquiry report. 

“For a successful technology, reality must take precedence over public relations, for Nature cannot be fooled,” said Feynman.

One of his questions was whether “organisation weaknesses that contributed to the [Shuttle] accident [was] confined to the solid rocket booster sector, or were they a more general characteristic of NASA.”

One of Feynman’s conclusions:

“It would appear that, for whatever purpose – be it for internal or external consumption – the management of NASA exaggerates the reliability of its product to the point of fantasy.”

If such exaggeration happens at NASA it can happen in UK police force IT reports, and in board papers on the performance of councils and NHS trusts.

When journalists get it wrong it’s usually to their eternal regret. In the public sector positive unbalanced reporting is so “normal” that hardly anyone involved realises it’s a deviant practice. The US author Diane Vaughan coined a phrase for such corporate behaviour.  She called it the normalisation of deviance.  

It’s surely time for public bodies to move away from the norm and start reporting on their performance, and the performance of their outsourcing other private sector contracts, with balance, objectivity and independence of mind.   

If managers knew that reports on the progress of their contracts would be audited for impartiality and competence over organisational self-interest, perhaps they would have a greater incentive to avoid badly thought through outsourcing deals and IT implementations.

Is this why some council and NHS scandals stay hidden for years?

NAO report “Private sector partnering in the police service”

Dave Orr’s HMIC FOI requests and answers

NAO’s FOI responses on Avon and Somerset Police

Capita has duty to promote success of Barnet contract

By Tony Collins

Capita has a contractual duty to promote the success of the “One Barnet” outsourcing deal with Barnet Council – apparently without taking into account facts that may count against success.

Within the 2,400 pages that make up contracts between Capita and Barnet Council, Unison has discovered clauses that appear to put the onus on the service provider to talk up the success of Barnet’s outsourcing deal.

These are excerpts from the contracts:

“The Service Provider shall use its relationships to create advocates of the success of the One Barnet programme by informing the Department of Communities and Local Government and the Local Government Association of key milestones and achievements within the programme thereby supporting increased political awareness of the Authority and the Service Provider shall utilise its corporate and personal networks to support the communication of the success of the Partnership via appropriate case studies.”

The contract points out that the service provider has “frequent meetings across central government at official level and occasional meetings at ministerial level”. It also sits on the Public Services Strategy Board, the Whitehall & Industry Group, Reform, Policy Exchange and Localis.

“The Service Provider shall use its relationships to create opportunities for the successes of the Partnership to be promoted enhancing the profile of the Authority at strategic level across the public sector,” says one of the contractual clauses.

Thank you to Dave Orr, a campaigner for openness over local government outsourcing deals, for drawing my attention to the Barnet Council clauses.

Comment

It now seems to be official – that outsourcing deals in local government have to be perceived as successful. Perhaps these sorts of clauses in local government outsourcing contracts help to explain why the public don’t learn of failing “partnerships” and joint ventures until what has gone wrong can be hidden no longer.

This is not open government. This is a contractual expectation that the supplier’s representatives should smile, and smile broadly, whenever the subject of an outsourcing deal with Barnet is discussed, or there is an opportunity to discuss it.

Which rather undermines the credibility of the Public Services Strategy Board, the Whitehall & Industry Group, Reform, Policy Exchange and Localis if supplier’s representatives are there to pass on PR messages about their outsourcing deals, whatever the truth.

“Smile and others will smile back. Smile to show how transparent, how candid you are. Smile if you have nothing to say. Most of all, do not hide the fact you have nothing to say nor your total indifference to others. Let this emptiness, this profound indifference, shine out spontaneously in your smile.” Jean Baudrillard.

Is this a reason some council and NHS scandals stay hidden for years?

By Tony Collins

Six years into Southwest One’s joint venture between IBM and three public authorities, the outsourced service is not a big success.  

Somerset County Council, one of the joint venture’s partners, has been in dispute with IBM, the major shareholder in Southwest One. It cost the county council £5.9m to settle, including £800,000 in costs when bringing back staff who had been outsourced.

The joint venture’s SAP-based “transformation” led to complaints of poor quality of service by some of Somerset’s finance users; the venture has consistently made losses and on the matter of savings, Somerset Cabinet member for resources, David Huxtable, said there have been some but added:

“It was a very complex contract and lots of the savings were predicated on an ever-increasing amount of money being put into public services and we know in the last four years that has gone into reverse.”

Now IBM has sold its low-margin customer care outsourcing unit which could affect the future of Southwest One.

Yet a smaller partner in Southwest One, Taunton Deane Borough Council, describes the relationship as a “success”. Reports to Taunton Deane’s councillors on Southwest One are remarkably positive.

Dave Orr an IT specialist who used to be work for Somerset County Council and has kept a close eye on Southwest One since it was formed in 2007 has drawn my attention to Taunton’s latest reports on the joint venture. When read quickly Taunton’s reports are upbeat, almost breathless with praise for the joint venture.

Below are excerpts from two reports that have been written for today’s meeting of Taunton Deane’s Corporate Scrutiny Committee.  The first is a “Procurement Transformation Update”, report to the council by Southwest One’s Chief Procurement Officer.

There are no hints of any difficulties on the contract except a comment that cutting spending will make it harder to achieve procurement savings. From Southwest One’s report to Taunton:

“Executive Summary

“As at 31/07/13, in excess of £1.8m [report’s emphasis] savings have been delivered to the Council through signed-off procurement-related initiatives brought about by Southwest One’s Strategic Procurement Service. This is up from £1.59m when last reported in January 2013.

“A further £1.364m of savings are scheduled to be delivered from these signed-off initiatives during the life of the current Southwest One contract, which expires in 2017.

“Multiple projects continue to be progressed by Southwest One Strategic Procurement Service which are expected to significantly add to the pipeline of savings. These Include initiatives for a new pool & spa at Blackbrook; Waste; Insurance; various small scale initiatives within the DLO/HPS areas .”

A second report for Taunton’s Corporate Scrutiny Committee “SouthwestOne Partnership Update report” is written jointly by a team at Taunton council and the CEO of Southwest One. Again it’s upbeat and summarises Southwest One’s performance over the last six months.

“Service delivery for TDBC, viewed in the round, is broadly on track. The majority of services perform well or extremely well (eg Customer Services). We do have concerns in some areas and we are working closely with the services in question to remedy the issues. “

The report says that the shared service model in conjunction with larger authorities provides Taunton with “much needed resilience” (report’s underlining) in service delivery, although “this has been impacted to a certain extent by changes made recently to the contract by the other partners”.

Additionally, “our secondee staff to SWO benefit from ‘assured employment’, which was offered by IBM”.

A survey of staff in June 2013 “saw marked improvements in staff morale and communication”.

Sickness absence for the financial year to the end of March 2013 was slightly down to about 9 days per full-time employee though up a little more recently.

Appendices – now for the problems

It’s only when councillors come to the report’s appendices that they will see some detail of the problems. But how many councillors will scrutinise a report’s appendices? From the Taunton report’s appendices:

“There are service and capacity issues. The helpdesk move caused significant problems, leading to an increased number of issues being raised with the Client Team from TDBC [Taunton Deane Borough Council] staff. We are closely monitoring the plan SWO [Southwest One] have put in place to fix these issues.

“Project delivery capacity and project scheduling continues to cause concern, with improved governance within TDBC highlighting this problem more acutely. Our issue tracker is currently tracking 11 escalated issues with SWOne, 6 of them with a Red RAG status.

“ SRM (Supplier Relationship Management) performance in SAP continues to be well below the required level despite the amount of focus it is receiving from SWOne. Work on a revised governance process for the SAP system is underway and looks likely to deliver a more controlled SAP Change process.”

The most serious problem – and it is not mentioned until the penultimate page of the report’s appendices – is that savings will be nowhere near the original target of £10m.

“This is red, tracked against the original [savings] £10m target. To date £2.8m has been signed-off and it is not yet clear how the lower target of £5.7m will be achieved as there are fewer savings opportunities and initiatives emanating from SWO…”

From the small print of Taunton Deane’s report it is possible to work out that the cost of the council’s SAP implementation was supposed to have been paid off by savings but hasn’t. Indeed a debt of nearly £1m is still incurring interest.

Comment

Perhaps it’s unfair to pick on Taunton Deane’s reports to councillors. The positive tone is little different to dozens, perhaps hundreds, of NHS, council and central government board reports I have read over two decades.

If you’re a director of a public authority your job is probably made harder if you’re getting self-vindicating internal reports on the organisation’s progress. It would be more helpful if management reports were neutral and objective, framed by unvarnished facts.

When you hire a roofing company and it reports back on the finished job, you want to know about the tiles that leave a gap or are loose, not the ones that fit nicely.

NHS trust reports can often be particularly one-sided, often of the type that say:

“We had 3 fatalities on the main staircase last month because of a ruptured floor lining but the overall accident rate in that part of the building is down over the last 3 years and our falls rate overall is 3% below the average for the NHS as a whole.

“Our contractor confirms that the floor lining is within KPI requirements and a repair will be effected shortly.”

It appears that those who write board reports for public authorities feel an obligation to motivate and inspire, to leave the reader feeling good, to clothe bad news in layers of good news, omit it altogether or put it in the appendix hardly anyone reads.

Is this one reason so many outsourcing and NHS scandals stay hidden for years? 

IT suppliers out of control of DWP on Universal Credit?

By Tony Collins

The Department for Work and Pensions is investigating with consultants PwC whether poor financial controls on payments to IT suppliers have “materialised into cash that should not have been spent”.

If there is evidence the DWP’s permanent secretary Robert Devereux says the DWP will raise the matter with suppliers.

It’s rare for details of central government’s relationship with specific suppliers to come into the public domain but this has happened to some extent on the Universal Credit IT project, thanks mainly to the National Audit Office.

Last week the NAO published a summary of a PwC report into the financial management of UC’s IT suppliers. PwC’s report was circulated to MPs on the Public Accounts Committee who read out some of its contents at a hearing this week.

The Committee’s MPs questioned Devereux, his Finance Director Mike Driver, and Dr Norma Wood, Interim Director General at the Cabinet Office’s Major Projects Authority.

Wood said the Major Projects Authority noticed that suppliers, in doing user acceptance testing, were increasing their average daily rates from £500 to about £800.

Said Wood:

“We came back down to about £500, in round figures. That could mean that you have much greater quality, so one has to be careful. We didn’t have an evidence base really to be able to probe this, which is why we recommended to the accounting officer that he undertake this [PwC] investigation.”

Wood agreed with Margaret Hodge, chair of the Public Accounts Committee, that financial control of the IT companies was a “shambles”.

Hodge said: “The PwC report reads more shockingly than the NAO report in terms of the lack of financial control.” She said that the DWP had sat on the PwC report for six months [before releasing it internally], a point the department has not denied.

Hodge said the PwC report referred to:
– incomplete contracts
– incomplete evidence to support contracts
– inappropriate authorisations
– insufficient information supporting contract management
– delegated authority given to a personal assistant to authorise purchase orders on the behalf of the chair of the strategic design authority

“This is a shambles,” said Hodge. “The fear that one has is that money was clearly paid out to the four big ones—Accenture, IBM, HP and BT—which they claimed on a time basis. It was not a tight contract; it was on a time-and-materials basis, which could well have paid out for no work being done.”

Wood: “I agree with you…it is quite clear that suppliers were out of control and that financial controls were not in place. As we did the reset, we ensured that everything was properly negotiated and contracted for, so that is very tight in terms of the reset going forward, but there are definitely questions about how it was handled… As with any payments you should have a proper audit trail and they should be properly governed. They should have been properly contracted for…”

Wood said that she would use the same suppliers again. “Under proper control why not?”

Hodge said the DWP appeared to have given suppliers a blank cheque. “Last night Mr Driver [DWP Finance Director] kindly sent me a copy of the PwC report, which is even more damning in my view [than the NAO report Universal Credit: early progress], particularly on the blank cheque that you appear to have given to suppliers and the failure to keep Ministers properly informed.”

Conservative MP Richard Bacon said the findings in the PwC report were “extraordinary”. Reading from the report he said there was:
– Limited cost control
– Ineffective end-to-end accounts payable processing
– Limited control over receipting against purchase orders
– Accenture and IBM accounted for almost 65% of total IT supplier spend, as at February 2013.
– Purchase orders for Accenture and IBM do not allow for granular verification of expenditure as they are raised and approved by value only. Thus, they cannot
be linked to individual delivery and grades of staff use. Receipting is completed by reference to time sheets. However, this confirmation is not complete and/or accurate as the majority of those individuals receipting do not have the capability and capacity to verify all time recording. This constraint has resulted in expenditure being approved with a nil return in many cases. As a result, payments may be made with no verification.

Bacon added:

“After all the history that we have had of IT projects going wrong, how can this
extraordinarily loose control—it is probably wrong to use the word “control”—how can this extraordinarily loose arrangement exist?”

Devereux, who was criticised by Hodge on several occasions for not answering questions directly, replied: “I will try at least to explain what was going on. Let me take you back to the process that we were operating. The process we were operating was seeking to work through, in the space of a four-week period -”

Hodge: “You are doing it again, Mr Devereux.”

Devereux: “I am afraid that I cannot answer the question without giving some facts.”

Hodge: “So is PwC wrong?”

Devereux: No, no. PwC is correct, but I am about to explain what else was going on. I have just had a long set of sessions with PwC, who as we speak, are doing further work for me to establish one particular, critical thing that you will want to know, which is that other things were being checked in the background here that enabled PwC to go back and do some ex post calculations about exactly how much was being paid for each of the outputs we had. It is absolutely right to say-”

Bacon “… Is it not utterly elementary that when you are paying a supplier for having given you something, you know what it is you are paying and what you are getting for it? This is basic!”

Devereux said his department had a resource plan agreed with Accenture (the main UC IT supplier) which was based on a computer model on what a piece of work would involve.

“The contract …in any one month was being based on that calculation of how much work we were likely to put into it in advance. Then the signing off of invoices was indeed based on looking at monthly time sheets. I agree with you that that is not a satisfactory position.”

Bacon: “What is amazing is that you said you did not know any of this until the supplier-led review brought it to you in the summer of 2012. This had been going on for quite a while. There was apparently nothing going on in the Department that was flagging this up. Internal assurance, internal audit—where was it?”

Devereux: “… I conclude this, and it is my responsibility—that more than one line of defence has gone wrong. We have talked so far about whether the programme was properly managing itself.”

Bacon: “This is extraordinary, and it is horribly familiar…it is absolutely central to your job as accounting officer to be sure that you have got lines of defence that are operating effectively. That is part of your job, isn’t it?”

Devereux: “It is part of my job.”

Bacon: “So to be surprised by this is an extraordinary admission, is it not?”

Devereux: “I can only be surprised by this if I am not getting signals from my second line of defence—my financial controllers—that they are worried about what is going on.”

Bacon: “You do sound as though you are blaming everybody underneath you, I am afraid.”

Devereux: “I do not intend to do that, but you are asking me what I knew and what I didn’t know. I am trying to take you through the process by which I am aware of things, and the action I have taken on them.”

Bacon: “But my point is that it was your job to know. It is your job to manage this. You are effectively the chief executive of the DWP.”

Devereux: “I am the chief executive of the DWP, I am the accounting officer, and I am accountable for it. Correct.”

Bacon: “But you didn’t know, did you?

Devereux: “I didn’t know on this, no.”

Hodge revealed that one of the conclusions of the PwC report was that there was a lack of evidence of ministerial sign-off of some contracts. PwC tested 25 contracts over £25,000, and only 11 could be traced with approval; and evidence of value for money provided to the Minister was limited in some cases.

Hodge said: “Basically it [PwC] found that you failed to consult properly with Ministers in signing off the IT contracts.”

Driver: “I think we had a weakness in the process that was operating…It has not always been possible to find all of the paper evidence to confirm a decision. We hold our hands up; we need to improve that. We have now significantly improved the control arrangements that operate within the Department ahead of ministerial sign-off.

“We have also significantly improved the arrangements that apply to any sign-off with the Cabinet Office. I personally chair what is called a star chamber group, which looks at all contracts before we seek authority from the Cabinet Office to go forward…”

Devereux: The work that I was trying to describe to the Chair earlier, which PwC is doing now, is to establish whether the risks we have been running, given this lack of control, have actually materialised into cash that should not have been spent…

“In the event that there is evidence of that, we will go back to the suppliers, obviously. I do not want to run this argument too hard, but there is a set of control weaknesses here which gives rise to a risk of loss of value for money. I accept that.”

MPs dig hard for truth on Universal Credit IT