To ask the Deputy Foreign Secretary, with reference to page 21 of the progress update entitled Transforming for a Digital Future: Government's 2022 to 25 roadmap for digital and data, published in February 2024, when his Department first assessed each of its red-rated legacy IT systems as red-rated.
Answered on
29 April 2024
The Central Digital and Data Office (CDDO), in the Cabinet Office, has established a programme to support departments managing legacy IT. CDDO has agreed a framework to identify 'red-rated' systems, indicating high levels of risk surrounding certain assets within the IT estate. Departments have committed to have remediation plans in place for these systems by next year (2025). It is not appropriate to release sensitive information held about specific red-rated systems or more detailed plans for remediation within the FCDO's IT estate, as this information could indicate which systems may be at risk, and may highlight potential security vulnerabilities. FCDO are actively managing their legacy estate via their existing change plans through system upgrades and migration to public cloud.