Appendix B Summary: Core Operational Solutions (COS)

a. Background:
Police Scotland's Core Operational Systems (COS) project aimed to replace 44 legacy systems with a single national system for recording crime information and storing warrant data. This project was the successor of one part of the previous i6 project. The project began with a full business case in 2018.

b. Internal Audit Findings:
BDO was able to provide moderate assurance over the design and the operational effectiveness of controls in place.

The audit also identified several areas needing improvement. This primarily related to the expected business case savings / benefits and the associated benefits reporting.

Areas of good practice were highlighted related to: project management and implementation processes with no concerns identified related to cost budgets and forecasting.

c. Summary of Findings of the Report:
SUMMARY OF FINDINGS/AGREED ACTIONS
High 0/0
Medium 6/21
Low 2/2
TOTAL: 8/23

d. SPA Considerations:
COS is a key enabler for delivery of efficiencies. The internal audit is a key element of assurance against delivery of a major IT project that are historically challenging projects to deliver in the public sector. In light of previous issues with the i6 project this audit provides assurance that this project has been overall well managed.

All recommendations have been accepted by management with majority expected to be completed by 31 March 2025.

A number of findings relates to benefits recording and reporting. This issue is an area of ongoing focus for the Resources Committee.