A fairly standard practice in most leading private or public sector organisations is to establish a routine (typically quarterly) cadence of operational performance reviews in which the central functions would review performance of each operating division (or in this case Government Department). This would typically involve reviewing both a set of ongoing operational metrics (system uptime, volume of attempted cyber-attacks, customer satisfaction and adoption metrics, cost and efficiency performance and so forth), along with reviewing progress on major development projects so that any issues can be identified at a relatively early stage and any necessary corrective action taken. This routine discipline is not currently in place in any systematic way across the civil service. GDS put in place a performance management system in 2012 but this has fallen into abeyance with only 12% (91/777) of services currently providing updates2, and even the supporting technology now obsolete and viewed as vulnerable to cyber attack.