Assurance partner - AI and digital environment regulation services

⁠⁠⁠Overview

The National Environmental Protection Agency (ACT) is seeking an independent assurance partner for the AI and digital environment regulation services project. The assurance partner will provide objective, evidence-based assessments of project health, governance effectiveness, delivery confidence, risks and readiness at key stages of the project lifecycle.

Purpose

The project is a complex, high-profile initiative operating across AI, environmental regulation, public-facing service delivery, ICT implementation, data governance and stakeholder management. It involves multiple internal and external stakeholders and must maintain confidence across governance, delivery, privacy, cyber security, accessibility, operational readiness and benefits realisation. An independent assurance perspective will support informed decision-making by existing governance bodies and provide early visibility of emerging risks, issues, dependencies and control gaps. The assurance partner will complement, rather than replace, the responsibilities of the Project Manager and governance framework.

Scope

The scope includes:

• Project health and confidence assessments
• Governance, risk and assurance reviews
• Gateway-style and stage gate reviews at key delivery stages
• Executive, steering committee and governance reporting
• Assessment of business, technical, operational and transition readiness
• Benefits realisation and performance measurement confidence assessments
• Assessment of vendor performance and delivery controls
• Identification of material risks, issues, dependencies and governance concerns
• Independent assurance of stakeholder testing and validation activities, including oversight of feedback, remediation actions, and evidence of resolution
• AI governance, privacy, cyber security, and compliance assurance
• Developing and maintaining an assurance plan aligned to project milestones and governance requirements
• Conducting independent assurance reviews and confidence assessments at agreed stages of the project lifecycle
• Assessing project governance, risk management, delivery progress, stakeholder engagement, vendor performance, AI governance, privacy, cyber security, operational readiness and benefits realisation
• Providing concise reports and briefings to project stakeholders, including project governance bodies and senior executives
• Providing targeted advice while maintaining assurance independence
• Observing selected stakeholder engagement activities where requested and providing assurance observations regarding adherence to agreed governance and control arrangements

The assurance partner will advise, challenge, and provide independent confidence assessments. It will not manage the project, make governance decisions, approve the solution for production use, or accept risk on behalf of the agency. Responsibility for project delivery decisions, outcomes, and risk acceptance remains with the agency.

Eligibility

• There must be an appropriate separation of roles between the assurance partner and the seller who delivers the project; the assurance partner will be ineligible for a project delivery procurement process
• The assurance partner will have an ongoing obligation to declare any conflicts of interest

Contract Terms and Conditions

• 1 x 6 month extension option may be exercised subject to satisfactory performance, continued business need, available funding, and demonstration of value for money, at the agency's discretion
• Future phases of this project may occur at the discretion of the agency; any subsequent procurement, including any sole approach through BuyICT or another panel arrangement, will be subject to a separate procurement decision and documented justification demonstrating continued business need, compliance with the applicable panel rules, probity, and value for money

Information Requested

See attached requirements document for details on response requirements, including responding to the two provided mandatory insight questions.

• The seller must provide a clear, complete, and self-contained response that enables the agency to assess the proposed approach, independence, personnel, experience, delivery model, and commercial offer
• Claims should be supported by relevant examples, evidence, and clearly identified assumptions
• Marketing material may be included only where it directly supports the response

Enquiries

Buyer contact: AIproject@nationalepa.gov.au