:
Thank you very much, Mr. Chair. It's a pleasure to be back speaking with the committee.
In 2022 our research team, which is based at Carleton University and includes both me and Mr. Boots, launched govcanadacontracts.ca, an open access research tool to help people more easily explore the Government of Canada's proactively disclosed data on federal contracting. That tool provides data on all federal contracts between 2017 and 2022, but our focus in the research paper and in the testimony that we'll give today is focusing on just the IT contracting piece specifically. I should note that the paper we're presenting and the findings are still under peer review, but we wanted to release it while that process was under way, given the urgency of the topic.
Knowing that effective IT procurement is not just key to the success of individual digital projects but is also essential to effective modern public administration more broadly, our goal with the research was to better diagnose the extent to which the Government of Canada adheres to widely accepted best practice in IT procurement. We suspected, given previous research and a fairly thick body of anecdotal evidence, that the federal government wasn't following the rules for good IT procurement, but we wanted to test that assumption with stronger data.
To do so, we turned to the proactive disclosure of contracts dataset that is published by the Government of Canada. A fair amount of work went into cleaning those data. If you're interested in that, we outline how we did that on our website and also in the paper we're presenting.
To evaluate that data—in hand, cleaned and ready to go—we created a framework looking at international experience to outline a set of sort of rules for modern public sector IT contracting. Then we assessed the extent to which the Government of Canada follows those rules. What did we find? The main punchline is that the federal government breaks almost all globally accepted best practice for modern public sector IT procurement. I'll give a high-level summary here.
First, federal IT contracts are generally too big, in terms of both length and dollar value, to succeed. That conclusion rests on a strong body of evidence showing that for software projects in particular, contracts need to be small—to allow the project to adjust based on regular and early user feedback, to avoid pooling risk and dependencies in a small number of large contracts, to make it easy to dispense with vendors that are underperforming, and to open up competition to a broad range of vendors, not just those capable of bidding for and winning large contracts. Despite all the evidence that smaller contracts are far more likely to lead to project success, we find that the majority, 53%, of IT spending in the Government of Canada is allocated to contracts that break the threshold dollar value for likely project success. That's the first big finding.
The second big finding looks at the diversity of the number of vendors winning government contracts. We know from basic economics that the more competitive and pluralistic the market, the more likely you are to have success in buying. We looked at the supplier market. We identified a small number of prominent IT vendors where three vendors received over $100 million in contracts annually, making up 23% of government IT contract spending. This is alongside a really long tail of thousands of smaller IT vendors and contractors. We note in the paper that one of the things we can't identify with the data we have is how many of those are pass-through vendors that you've been looking at in something like the ArriveCAN study.
Third, we looked to the importance of building in-house IT expertise, which is something the committee has heard several times. There are reasons that you want to build that in-house IT expertise. You can be a smart shopper. You can build in-house when it makes more sense to do so. You can kind of hold those contractors to account. We looked at the ratios for contractors to in-house staff in this part of the analysis and found that in some Government of Canada departments, the number of contracted IT workers greatly outnumbered in-house IT staff. There is nuance to explore in what that right ratio is, which I hope we can get into in our discussions.
Fourth, again breaching global best practice, in a frankly shocking betrayal of responsible stewardship of public funds, current government policies favour vendor ownership of intellectual property and data and do not prioritize adoption of open source solutions. This is despite strong evidence showing that open source generates more cost-effective, secure, publicly accountable and higher-quality digital services.
These policies on IP represent a clear recipe for ongoing lock in to vendors who produce custom software for government, reducing departments' abilities to share and reuse software, likely resulting in frequent cases in which the Government of Canada is paying for the same or comparable software multiple times over.
We conclude the paper with a series of policy recommendations, which are also detailed in a brief that we presented to the committee on an earlier occasion. We also note several limitations to our analysis, which we'd like to really get into today as well, resulting in large part from the limited data we have. For us, this is really an area that is ripe for immediate attention because, as the committee will know all too well, it's very difficult to get a clear picture of IT contracting patterns in Canada, so this research is one attempt to do that. We really look forward to discussing our research process, the findings and their implications with the committee.
:
Thanks so much, Mr. Chair.
Thanks to all of you for having me here. I think it's been about a year and a half since Professor Clarke and I were here. It's really kind of you all to invite us back to talk about the research. As Professor Clarke said, I think it dovetails well with a number of the studies this committee has undertaken—the ArriveCAN study, the McKinsey study, this study on the outsourcing of contracts. Such themes as the deskilling of public sector workers, especially IT staff, and the government's dependency on outsourcing and consultants all connect as a thread throughout each of these studies. I'm glad you're doing the work to examine this.
Professor Clarke and I have spoken here before. She gave a great overview of our research in her opening remarks. All the number crunching, if you want to go back and look at it, is on the govcanadacontracts.ca website, along with the guide to reforming IT procurement that we spoke about on the previous occasion we were here.
The research paper that's just gone in for peer review is sort of the final stage of this research. You can read the preprint version on Professor Clarke's website. We'll definitely get the final version over your way once it's published. If the preprint version seems dense—classic academia—I'd say to skip to the charts. They're pretty eye-opening. On page 24 of the paper, you'll see who the biggest players are in the federal government IT space. On page 27, setting aside things like software licensing and computer devices and telephones, you'll see the big names in specifically IT consulting services year by year, which I think is of particular interest.
I think the main take-away is that situations like ArriveCAN aren't isolated cases. We're looking at systemic issues in how the federal public service conducts IT procurement work. Looking at the research landscape and other jurisdictions, it's clear just how much Canada has fallen behind its peers. The policy recommendations we put forward at the end of the paper aren't that earth-shattering. They're basically best practices that other governments around the world have been doing for years. The question is, why haven't we made any progress on them in the Canadian federal government?
There have been some baby steps over the past year or two. This committee's work probably helped move some of those forward. There's updated guidance on procurement that isn't bad, but it's very timid. There are new attestation requirements for business owners in Treasury Board policy that take effect in September, but ultimately, the interventions we've seen from the federal government over the past year, including this latest edition from September, amount to basically “follow the rules harder”. There's a great piece from Paul Craig, who's a government technologist, on his website, Federal Field Notes, that talks about why this isn't good enough.
Here's what we haven't seen. We haven't seen fundamental changes in process, regulatory or legislative changes around procurement or efforts to make procurement simpler and easier for small companies to be part of. “Follow the rules harder” isn't a viable strategy when part of the problem is that there are too many rules. This creates a lopsided environment where the only companies that can win government contracts are ones like GC Strategies but are also really large consulting firms that specialize in navigating complicated procurement processes and in building relationships with public sector IT executives. That's what they're good at and that's why they win contracts. They don't win because they're good at building technology products, which is probably why we often have so many IT failures.
On the other hand, from the public service side, if you're a senior IT manager or a senior public service leader, going to work for a large consulting firm or IT vendor is a frequent post-retirement career strategy. That's something referred to anecdotally quite a bit. It means that no one involved is incentivized to change the system.
Ultimately, what the IT procurement system does best is shovel taxpayer money towards large, established vendors and IT consulting firms. That's what the policy on title to intellectual property arising under Crown procurement contracts calls “economic growth and job creation”, which is why vendors are supposed to own the IP for software that they create for the government. That is truly astonishing on multiple levels. Producing good software and effective government services is a secondary priority. That's a major problem. The effects of that show up years later in the frankly mediocre and unreliable government websites, software and services that we see across the federal public service today.
“Follow the rules harder” isn't going to work. What does it take instead? It takes a dramatic rethink of how procurement works, a dramatic rethink of how the public service handles tech talent and a dramatic rethink of governance processes, policies and oversight mechanisms. If you like, I can list off a whole series of examples of these in our discussion today.
Ultimately, though, I'm not confident that the federal public service is internally capable of the kinds of dramatic rethinks that are necessary. It's possible that an external independent review or some future royal commission on the public service could. If those bodies were to do their work well, most of their recommendations would involve getting rid of things—getting rid of processes, getting rid of rules and getting rid of all the barriers to doing good work in the public service, such as getting feedback, making sure you can get to decision-makers and actually learning and reacting and building things quickly enough for it to matter.
Within the federal public service, there are people doing tireless and inspiring work everywhere. I'm really grateful to have worked with many of them. They're held back by outdated processes, old technology and overly traditional ways of working.
Really, in the IT field especially, contractors and consultants don't face the same barriers, even though all those barriers are self-inflicted by the public service on its own staff.
It's easy to be a critic, especially now that I've left the federal public service and I work for a territorial jurisdiction, but ultimately what I want is for the federal public service to be excellent. It could be so much better, and Canadians in need depend on it.
I'm really happy to chat, and I'm looking forward to your questions.
Thank you so much.
I'd like to welcome both Professor Clarke and Mr. Boots to the government operations committee, also known as the mighty OGGO.
I'd like to frame my first round of questions to around two news articles I was able to research. One is from the National Post written by Christopher Nardi, which I understand resulted in an interview between Mr. Nardi and both you, Ms. Clarke, and Mr. Boots, as well as a Policy Options piece that both of you authored and was dated February 16, 2024.
I guess I'll start by making an obvious assumption that the ArriveCAN scam or debacle, however you want to frame it, certainly didn't come as a surprise to you, Professor Clarke, or to you, Mr. Boots.
Would that be a fair statement to make?
:
Yes, and this echoes a lot of what Mr. Boots offered in his opening remarks. There has been a tendency in the Government of Canada, I think historically, to layer on more rules and oversight to create new parliamentary officers, new external scrutineers when there's been some sort of scandal. While, of course, we're clearly not advocating for no rules and, in fact, the research in clean, high quality IT procurement focuses a lot on what the guardrails should be and on building a culture of responsible public service around that to avoid things like conflict of interest, for example, I think the habit we've had in Canadian public administration—layering on more rules as a way of ensuring accountability—has actually had this perverse effect of undermining accountability and seriously undermining the effectiveness of public servants.
There are tons of examples that you can find. A classic one that people loved to talk about, maybe 10 years ago, was that, when the federal government first started using social media, there were, in some cases, these 20-step approval processes to release a 140-character tweet. You can also look to the Federal Field Notes website written by Paul Craig, which Mr. Boots referenced, to find some great examples of this sort of internal administrative burden. In one case, the documentation required to publish a five-page website basically had more words than the entire edition of The Great Gatsby. We mire public servants in so many rules and compliance requirements, and the reporting burden—which is really well-documented, not just in IT but across the study of Canadian governance—that it has two effects that are relevant to this question of IT contracting.
One, it means that when it makes sense to build in-house and to try to adopt modern service design practices like user research or agile multidisciplinary teams, public servants actually can't do it. It's really difficult to do the right thing. We add so many rules that they can't be nimble enough. Streamlining those rules would, I think, create space for public servants to do some more of this work internally.
The second piece of it is that when you have those rules in place, it actually becomes difficult for vendors in some cases to work in modern ways with the federal public service because there are tight rules around things like “project gating” or the way that money flows, and that's because they can't pull together a multidisciplinary team of internal public servants because HR rules don't allow it. That's why I think the focus of this latest spotlight on the problems of IT contracting should meaningfully lead to a reset of policy with a focus on enabling good public service and a focus on what matters, which is conflict of interest and the responsible bidding processes, not creating documentation burdens for public servants. That's not going to help. In fact, it will make it worse.
:
To build on Professor Clarke's remarks, I think the pattern you see in a lot of public sector IT work is that if you imagine a large project that has 100 public servants working on it, 90 of them will be writing Word documents that are project management, oversight compliance reports, all sorts of things that are not actually building the software. If you have 100 people and only, maybe, five of them are actually writing software code, configuring systems, that's a really odd ratio that is very normal in public sector IT but just completely foreign if you work at Shopify, Google or another mature tech company. Trying to reduce those barriers that public servants face—oversight and compliance mechanisms that are really outdated—means that you spend less money having 90 people write meaningless Word documents and more people actually building software code.
One understated scandal of public sector IT is that it's very normal for the public service to undertake a $100-million IT project that could have been done for $10 million, or a $30-million IT project that could have been done for $2 million, and so there's this expectation that it's normal to have a $50-million IT project to build an online forum or an interactive website that could be done for a fraction of the cost.
There's some really great writing from Waldo Jaquith, who's a technologist in the United States, about how software is so much cheaper—it's not free, but it's much cheaper than public sector organizations expect—but the tendency is to say, “Oh, yeah, this project is similar to this previous project our department did. The last one was $50 million, so this one's probably $50 million or $60 million,” when a really strong team could build it for $2 million. That's tricky to dig into because it all has to do with how public servants are doing the work of IT projects, how 90 out of 100 people are just writing Word documents instead of actually building.
Welcome back, Professor Clarke and Mr. Boots. It's good to have you here. Thank you for being open to sharing the paper you're preparing, which is under peer review, and thank you for acknowledging that.
Naturally, I am very interested because my background is in IT, in consulting and in delivering transformational large projects enabled by technology. I was very keen when I saw the report. I listened to your opening remarks. You focused on four key areas, and you opened up by talking about how government IT projects have been too big for too long, and you suggested they should be shorter and much smaller. Why is this the case, and what are the best practices?
:
Yes. That's such a good question.
One of the reasons public servants will often offer when explaining why contracts are so big—as Mr. Boots referred to—that there's a habituation to large-scale projects and a misperception, frankly, that we need to be spending in the tens or hundreds of millions of dollars. In some cases, I think, there are vendors that the federal government is used to turning to, and those vendors know that they can charge those amounts of money to deliver on these projects.
This gets to the question around what the rules are. Partially, the administrative burdens internally imposed on public servants to put up a request for proposals and to go through a contracting process are so high that you can be incentivized to go big because, “Well, we want to get as much money as we may need for this project, and we don't want to have to do it over and over again,” so reducing those internal burdens would be a really big driver of incentivizing smaller contracting.
:
I think there's an intuition and a sense that it's the way to go, but the data are extremely strong, showing that software projects should really not exceed.... Well, the limits that we give in our paper, which borrows from the U.S.'s General Services Administration, the suggested rule is a maximum of $2 million U.S. per year for no more than three years, and with no extensions beyond that. The reason software projects in particular demand that small scope relative to, say, big infrastructure projects or something, is that, when you're talking about building software and services that are built out of that software, you don't really know what you need until you test early with users.
There was a shift in how we thought about software development in the private sector, with what's called the “agile manifesto”—which you can find online—and it changed how the private sector and leading public sector jurisdictions think about software projects. You start small, perhaps with many contracts at once, and you bring these vendors together, in part, because you're not pooling and making tons of unfounded assumptions about what the end product's going to be.
Now, to enable that way of contracting, you have to look at how money flows through Treasury Board and how budget submissions are done. You have to create space for public servants to get that early feedback and adjust. However, it has happened in many other jurisdictions. It's really remarkable how far behind the Government of Canada is in moving their software development practices to what is well-supported in the data in both private and public sector corporations, which is that you have to keep it small and test and adjust as you go.
:
I should clarify that it's not that an individual project or initiative would only cost $2 million a year over three years. We know you can't revamp and upgrade all of the benefits delivery programs, which is something currently under way for $6 million. It's that individual project components and those individual contracts shouldn't exceed those amounts.
Part of this is just that if a vendor underperforms, you can say “bye-bye” very easily. You're not locked in, and you also create scope to change what the deliverables are by having the opportunity to create new contracts as you go. It's by no means saying that you can deliver some of these large projects for that low dollar amount. It's that individual contracts shouldn't exceed that amount. This is where the idea of modular contracting comes in and of bringing together smaller pieces of a project and putting them together.
I don't know if I'm allowed to pass it to Sean, but he has lots to say about this, because I know he has thought quite a lot about how to implement modular contracting.
Sean, did you want to add ideas to this?
I'm going to ask my second question right away, because my questions a require a lot of background.
In October 2022, Ms. Royds reiterated that Public Services and Procurement Canada was looking to make procurement more fair, accessible and competitive while favouring an approach that provides the best value for Canada and Canadians. She said that PSPC had implemented procurement processes tied in with its accountability and integrity objectives and obligations, and that monitoring and verification measures were in place to ensure high-level oversight of procurement processes. However, at the same meeting, Treasury Board, which is responsible for major policies, admitted that it didn't follow up on departments' compliance with these policies or on the results they achieved, and that it was up to deputy heads to follow up, adding that the administration of government contracts was subject to internal audits by the departments concerned, as well as by the Office of the Auditor General.
When I re-read that testimony, I draw a connection to the policy brief “A Guide to Reforming Information Technology Procurement in the Government of Canada”, which you released in October 2022 and submitted to this committee. I can only wonder about those vaunted analysis and audit tools, particularly whether or not they are useful and above all, how often departments use them. I also wonder about this obsession with working in silos.
Are the tools really useful at the end of the day, or do we need to completely overhaul the work methods?
My last question is for Ms. Clarke.
As we speak, not only does Canada have a record number of employees, but it's also making unprecedented investments in outsourcing. We've learned that subcontractors with specialized skills don't necessarily transfer their knowledge to public servants.
Your brief lists the means the government has put in place to help its public servants become more specialized in information technology. I'm thinking in particular of the organization Code for Canada, the Canadian Digital Service and the Canada School of Public Service's Digital Academy.
Why is it that, despite the government introducing measures to have public servants acquire specialized skills, it continues to use that buzzword to explain the massive increase in spending on IT subcontractors?
:
That's an excellent question.
I think the fact is that, side-by-side, growth in the public service—which is, in part, in line with the growth of the population but is also a significant percentage jump—has been mentioned in several media articles. Alongside this, especially in the IT space, great growth in contracting should raise questions about.... On the one hand, I suppose you could ask whether we are doing so much more in government right now—more ambitious programming and more ambitious policies—that we need more people. That could be true, and I think there's a debate to be had about whether the amount of contracting and the growth in staff is justified by the ambition of the government's agenda.
On the question of the internal capacity-building piece and why that hasn't perhaps displaced the need for contracting, that's such a good question. I think the Canada School of Public Service does what it can to retrain and upscale public servants, but there's no mandatory training right now in modern procurement practices, even for procurement officers. This is something that the Auditor General has identified as a problem, but certainly senior leadership across the federal government has risen through a system in which they were never asked to understand technology.
In fact, often what I hear from public servants when I interview them is that senior leaders would like to insulate themselves from tech projects because they know they so often fail. There's a kind of learned helplessness and a willful blindness to these problems and an assumption that the IT community will handle them, but we don't tend to raise IT experts to the position of deputy minister, for example. This is more that you move up through the policy ranks. We have this cadre of senior leaders who have power and influence and are responsible for a lot of this oversight who sign off on things like big IT contracts but aren't getting that mandatory training to be good stewards and understand the basics of technology. Other jurisdictions are focusing on the executive ranks. It's something that we could think about doing better in Canada as part of mandatory deputy minister training.
:
Thank you so much. It's very good to be here.
I really want to thank both our witnesses for being here and for their testimony. I will admit to being very frustrated listening to this. Before this work, I used to run a non-profit organization that had federal funding. I remember having to define what office supplies were. If I bought anything outside of the definition that I had provided in my application, I would not be reimbursed. So when I hear about people getting tons of resources with so little oversight, I just find it very shocking and frustrating.
Ms. Clarke, when you appeared before the committee in 2022 to discuss the ArriveCAN debacle, you said that this was a pretty standard story. You said that in your testimony today as well. We've heard from the Auditor General and from the procurement ombud, who sees this as a systemic issue in government contracting. When the procurement ombud spoke to the committee about his report on the McKinsey contracts, he said:
I do think that now is the time to act. We really need to reconsider federal procurement in its totality....I'm fearful that if I don't start acting in a more aggressive manner, significant changes will not come. I don't think band-aid solutions are the answer. I think there needs to be significant rethinking as to how federal procurement is done.
Do you agree that the government should take a more aggressive, government-wide approach to overhauling our procurement practices? If so, what would be your recommendations for the overhaul? Have those recommendations changed for all of those that you did provide to the committee back in 2022?
:
I'll focus on the IT procurement piece specifically, because in the broader procurement reforms in the Government of Canada, there are a lot of different pieces there, from ships to procuring gardening services. In the IT space specifically, absolutely more aggressive action is needed.
It's funny; on the one hand, Mr. Boots and I have said several times that there are too many rules and that we like to add rules and burden public servants, but we also do a lot of soft rules as well—suggestions that don't really have much teeth. If we want to see behaviour change across the public service, not just in IT procurement but more broadly in how we conceptualize digital service projects, we need hard rules. We need to force change. The socialization to the status quo and the incentives to keep that status quo as is, because of the lucrative potential future consulting opportunities, are just too high.
There are some things that could be done that would give more teeth to the kind of suggestions we have right now. The digital standards, which Mr. Boots would know about better than I, because he was working on those when they were developed, come out of Treasury Board. They say all the right things. These are talking about keeping projects small and working in the open and using open source. But they are suggestions. I would guess that most senior leaders have no idea that those exist. Those are things that live on the Treasury Board website.
Make them mandatory. Make it that you can't get money for a project unless you demonstrate how you're adhering to the digital standards. They include things like doing early user research and getting software code in your hands early. This will affect internal development of software, but it will also affect how you procure, because those partners will know that they need to show that they're adhering to these modern practices.
I think that's one area. We talk about spend controls in the paper. This has not been every government's approach. It's worked well in the U.K. I think our situation is much like how the U.K. looked in 2010, before a real revolution. The conversations you're having here now at the parliamentary level were happening at the parliamentary level in 2010 in the U.K. That's why they bounded ahead as a digital leader. It was because of the kinds of things that resulted from that parliamentary inquiry. One of them was spend controls. Basically, with very few exceptions, there was a cap on how big any given IT contract could be. This is a hard rule that will force public servants into good behaviour. Over time, there might be room to soften these rules if needed, because there are some jurisdictions that talk about wanting to have more flexibility, and spend controls can be rigid. I think right now we need to force good behaviour really hard.
The other thing would be in management accountability frameworks, to actually hold senior leaders to account for how they manage IT projects and get them focusing on this as the KPIs they really care about. That's another way to try to force some change. What we're seeing now are soft and largely unread Treasury Board guidelines. The handbook on contracting that was released in the last year or so, largely in response to the work you're doing, is similar. Probably no one has read it. There's nothing in it that changes how you actually have to manage a project.
We say the right things in Canada, but then we don't actually force public servants to do those things. That's kind of the problem.
:
I'm glad you put it that way, because there are some rules that need to be streamlined and removed, and then there are others that need to be added. It's a complicated process.
What should be streamlined and removed? There has already been quite a lot of work done on this by public servants. Internally, there was a red-tape reduction report, which you can find online and to which I'll make sure the committee gets the link via the clerk. These were public servants' testimonies about the ways they need to see procurement rules and HR rules. I'm trying to think of the other one. Maybe there was something around communications. Basically, it was where they saw significant barriers to their ability to be efficient and innovative that are imposed on them by rules that don't add any value and distract them from doing the good work they want to do.
That would be a great place to start to streamline these rules: taking a hard look at the Treasury Board policy suite, which is largely incomprehensible. There is nothing more disabling to your action than following those rules or trying to understand those rules. It's years of drift of adding new bullet points. You can be in section 10.1.2.3.4 and you're reading to try to understand whether or not you can adopt open source or something. These things are not enabling. That has never been their objective. Their objective—and I'm going to use a rude word here, but it comes out regularly in interviews with public servants—is that internal rules are meant to cover your ass; they are not meant to lead to good outcomes. I hear this constantly from public servants. That exact line, when I did my Ph.D research, came up so many times that I had to note as a remarkable finding the amount of times that particular phrase was used.
This is like shifting the accountability culture to one where the focus is on accountability for results and accountability for learning and iteration versus accountability by following all these rules, doing all the documentation and producing something that didn't work, but at least Treasury Board is happy. That's obviously what no one wants, including public servants, because that is deeply demotivating as an accountability model.
Those are some places to start, I think. Mr. Boots probably has lots of thoughts on that as someone who's lived that experience in Treasury Board.
:
The connection there is that for a whole bunch of reasons, certain firms have an incumbent advantage. Often, because of the processes from the perspective of those bidding for contracts and because there are so many hoops to jump through, it can be difficult for smaller firms to bid. You end up in a case where you set up the big firms to continue to get contracts.
Why does that lead to lower quality outcomes? Is that the idea? Part of it is just the basics of not being able to force competitive pressure against these vendors, because they're going to keep winning these contracts whatever the outcomes, really.
It is remarkable how often, despite project failures or underperformance, these contracts might still be issued to those vendors. Part of that is we don't have a clear way of assessing what project success looks like. We don't have strong and proactively disclosed data on whether or not a project led to a good outcome. That's something that we couldn't determine from our data. We can see how much we spent on contracts. We don't even know what was produced from that.
This is a really common phenomenon. In interviews I've done with U.S. public servants, the same conversation comes up that there's a small cluster of three to five big firms at any given time. Sometimes it switches who's in the lead, but roughly there are three to five different firms. They'll move from jurisdiction to jurisdiction delivering bad projects, and they keep getting hired in part because no one's talking about it and no one's disclosing it in ways that make sense.
:
That's key to clarify. I know you know that, but I just want to make sure I am being clear.
How can something like GC Strategies...? I agree that, with all the information we've learned, it's surprising...well, not surprising, but it's shocking and concerning. I think part of it is just that we don't have that strong culture internally of scrutinizing value for money when it comes to these contracts, and we're habituated to simply trust that the firms winning the contracts are going to deliver.
The Auditor General, in the case of ArriveCAN in particular, also just highlighted basic breaches of responsible public service. Is that not right? I think there's also that piece. I will say that, in interviews that I've done across a whole range of countries that are really leading in digital transformation, they are not worried about their relationship with vendors. They always say, “We manage that because we have good internal rules, good organizational hygiene and sufficient IT expertise to hold them to account,” so they would never fall for a GC Strategies-type scam because they put those conditions in place. They also, really, always emphasize that these things happen in a culture of strong ethics and values.
:
Thank you very much, Chair. I'm really happy to be back at OGGO to discuss a really important issue around procurement.
In fact, as I listened to both our witnesses, I had a moment of déjà vu in terms of how I, in my past life, used to practise procurement law—I'm from Ottawa. We're talking about, now, almost two decades ago in time, and a lot of the issues that are being discussed were things that I recall quite vividly, in terms of contracting, decision-making, those manuals with sub points that Professor Clarke talks about and trying to interpret what all these rules mean.
Then, very similarly, perhaps one could argue it's in other levels of government as well, whether it's provincial or municipal, because from my time in provincial politics, being a member of the Treasury Board of cabinet in Ontario, I had very similar conversations with officials about IT procurement: “What went wrong? Why did it go wrong? Why is it over budget? Why is it not producing results?” etc.
This is not something new, so I'm interested, not in exploring the problem but more in exploring the solutions. How can we improve our system so that we can get better value for Canadians and better products as well?
We talked a lot about your research and what you found—although I might add that it hasn't been peer-reviewed yet, as I understand, and that process is ongoing, so I'm sure that's going to make it even stronger—but can we talk a bit about what you found in your experience of looking at procurement systems internationally? For the first part of the question, did you find there are similar challenges when you looked at United States, the European Union, “like countries” like Germany, France or Australia? Did you find they have similar challenges? If so, can you summarize them for us?
Can you talk a little about solutions? What kinds of changes, if any, are being orchestrated in those jurisdictions that we should look at in terms of recommendations, the work that this committee is doing and what the federal government should be doing?
:
Yes. That's great. I like placing this in an international context, because it has been interesting to see that the Anglo-Saxon cluster of governments, I'd say, has had a very similar trajectory at various stages of development in tackling the procurement issue.
I mentioned that the U.K. has done well in addressing these problems head on. We can definitely look to that jurisdiction. We can also look more broadly to countries that are now identified as having leading digital government services. This includes Ukraine, Finland, Singapore and Estonia, not countries that we have historically always looked to for practices around public sector governance. These jurisdictions are frankly nailing it when it comes to working with vendors. They all tell a very similar story about how they're managing that.
One, they're aggressively building their in-house IT expertise—to build in-house when it makes sense; to be better shoppers, as we've already described; to oversee and manage; and to ensure that when they work with vendors, those vendors want to send their A-team: We're going to be working with very talented technologists in government. I think this can be done through a mix of hiring and interchanges but also through training.
The other piece that I mentioned already comes up in interviews I've done with public servants globally on how they are managing vendors in their digital government efforts. They do often point to traditional public administration values and ethics. They have a culture of good governance. They're aware of the risks of conflict of interest, of cronyism and of revolving doors when they bring in technologists for, say, short-term stints working in government. They manage that by turning to classic tools of good public administration. They focus a lot on building kind of freeing internal rules, as we've already discussed, so that the public service can work in these modern ways themselves but also so that vendors can apply those methods when they work with the public sector.
Then there's a really big emphasis on modernizing procurement rules through such things as modular contracting, spend controls, stronger information disclosure and reporting, and prioritizing open source. There are also some really interesting ways of thinking about procurement as a policy tool. In certain jurisdictions, state IT procurement is tied to national economic development. This comes up a lot when you speak to Estonians or Finns. In Ukraine, for example, there's a real emphasis on the state trying to build an ecosystem of local vendors, having this economic growth opportunity attached to it and also making a more competitive marketplace that can bid for government work.
:
Thank you very much, Mr. Chair.
Ms. Clarke, your October 2022 brief provides a list of controls that would prevent the current situation in Canada, where the majority of IT spending, 54%, goes to contracts above the $2‑million mark.
I have two questions for you.
First, how many of those contracts have led to successful projects?
Second, how many of those contracts have unknown results, for whatever reason?
:
I think it's an excellent question. It's something that, in my own public service career, is very top of mind. How do we better enable public servants? How do we better empower them? How do we better equip them with tools?
As an outside-of-work side project, one of the websites I built several years ago was a website called "Is This Blocked in My Department", which is a crowdsourced list of, as a public servant, depending on which department you're in, whether you can use Zoom, Trello and all these different software tools that teams around the world use all the time but are often blocked or forbidden for public servants to use.
This is just an example of how risk-averse public service culture holds public servants back, and it means that they're working the same way that they might have worked in the 1990s, even though the rest of the world has moved on to much faster and more effective ways of working.
There are a few challenges. One is that public-sector IT salaries are competitive at the lower levels and really not competitive at the top. If you're just leaving a university or a college program to become a help-desk technician at the bottom level, that's a pretty good job, but if you're trying to hire some of the world's best cybersecurity experts, maybe you'll make $130,000 or $150,000 in the Canadian public service, and you'd make $400,000 Canadian working for a U.S. tech company.
Because technology professionals can move between jobs, companies and even countries so easily, it's really hard to hire people who are world-class professionals, and when you're delivering services that millions of Canadians depend on, it's actually very important. You don't need a thousand of those people, but you need five or 10 who are really good, and there's no mechanism for the federal public service to be able to do that right now.
The other challenge is that in government HR, the ability to move up the ranks without having to become a manager of other people is almost impossible. Even from the middle levels of the IT classification on up, you're expected to be managing a team, and that's the criteria you're judged on to be able to move even further up.
In modern tech companies, they realized decades ago that with your really great programmers and your really great cybersecurity people, you don't want them to stop doing that and spend all their time managing HR conflicts and approving people's leave requests. You want them to just keep on doing that craftwork that they're really good at. Modern tech companies have dual-track career progression frameworks, and those do not exist in the federal public service, so we're taking our best people and saying, "You're not going to touch a keyboard writing software for the rest of your career; you're going to manage a team of 40 people and deal with all the HR drama that ensues.” That means that even if we were to pay people more, if we're asking them to be people managers when they really want to be great cybersecurity people, great programmers or great designers, we're not letting them do that.
That's such an obvious fix that the Treasury Board has not done and has not prioritized, and that is just really at odds with how the rest of the industry has evolved.
I join my colleagues in welcoming both of you back to committee. I know that you both have appeared twice, in November of 2022 and early January of 2023.
I just want to recapture what we learned from you back then. I think we knew there was an issue when we put the arrive scam issue on the agenda of this committee, but I think what I learned from you is that government relies heavily on IT vendors and management consultants and, as you stated again today, has done little to hire this expertise in-house and/or train public servants. We also learned that it is hard to measure value for money or even how successfully completed a project is because of the ambiguous nature of how we collect data, and, finally, that spending on external consultants is growing. Mr. Boots has provided some great data with regard to that.
You mentioned lucrative contracting opportunities for public servants. Mr. Boots, as a former public servant, does all this contribute to public servants contracting with the Government of Canada to do work that they should be paid for—
:
Thank you so much. I think it's a really interesting question.
I would say off the bat that the situations we've seen in the news where public servants were simultaneously working for a department and then also running contracting companies was a huge surprise, because I don't think that's a normal occurrence. But what does seem very normal is that when you reach kind of the mid to end state of your public service career in IT, it's very normal to go work for a large IT company or for a large IT vendor, because you have a lot of pre-existing relationships with your colleagues and counterparts.
If you're a departmental chief information officer, you're probably never going to become an ADM, but you can make a lot of money going to go work for a large IT company. You're friends with all your other departmental CIOs who you used to work with. I think for those companies, it's very attractive for them to hire retired public servants who have a lot of previous connections. You see other things like large consulting firms running demo days, where they invite a lot of senior public servants to go see some cool things that new start-ups in Canada are doing while they also gather a lot of notes on what they will then pitch back to departments to sell them some new management or IT product or whatever.
You do see those sorts of patterns. One way to fight that is to make it possible, as I mentioned earlier, to have a more successful long-term career with market-competitive salaries while you're still in the public service. Of course, I have friends who have left the public service to go make triple their previous salary working for a large tech firm. I left the federal government and I work for a provincial government. I'm still a public servant. I'm paid exactly the same as I was in my old job, and I'm very happy to be able to play a role in having a public impact. But for other people in different situations, it's very understandable. They leave to make triple the salary.
It's hard to say no to tripling your salary. That's an appealing thing. That has consequences for this somewhat cozy relationship that you see in news articles between the super-large tech providers to government and the public service.
:
I'll read it into the record:
Given the Government has spent $9 million dollars of taxpayer money on a luxury condo located on “Billionaires Row” in New York City for the Consul General, the committee order Global Affairs Canada to produce a list, within fourteen days of this motion being adopted, of all properties including the addresses and listing prices of those that were visited or considered for purchase for the official residence of the consulate general in New York, and the committee call the following witnesses to testify:
Minister of Global Affairs, Mélanie Joly
Consul General of Canada in New York, United States, Tom Clark
The Deputy Minister of Global Affairs and other representatives from the department.
If I may, I would like to quickly speak to the motion that I just read into the record. I think what has come to light over the past few years under this government's procurement practices is extremely disturbing, but perhaps not surprising. Whether it has been the hundreds of millions of dollars going to Liberal insiders, or their friends at McKinsey getting special treatment in receiving government contracts, or former Liberal MPs and future Liberal leader hopefuls like Frank Baylis, whose company got a massive contract during the pandemic for ventilators that went unused.... It cost the government hundreds of millions of dollars, only to be sold as scrap metal.
We have seen the complete lack of spending controls on major procurements, including arrive scam. Every step along the way, this government has tried to cover up these consequences of their failed governance. We know that they voted against the audit of the ArriveCAN app, swearing that there was nothing to find—
We agree with the motion in general, but I'd like to make a few changes.
We agree that we need to look at the acquisition of a $9‑million condo for the Consul General in New York City. Generally speaking, to the average person, $9 million represents nine working lives. That's significant. It's taxpayer funds, so it's important that we look at this. In the context of a federal budget, it may seem like a drop in the bucket, but it's a significant amount nevertheless.
So here's the motion with the amendments I am suggesting to my colleagues. It will be sent out to them in a moment if they haven't already received it:
Given the government has spent 9 million dollars of taxpayer money on an apartment in Manhattan, New York for the Consul General, the committee order Global Affairs Canada to produce a list, within 14 days of this motion being adopted, of all properties including the addresses and listing prices of those that were visited or considered for purchase for the official residence of the consulate general in New York, and the committee call the following witnesses to testify:
the Consul General of Canada in New York, U.S.A., Tom Clark,
the Deputy Minister of Foreign Affairs and other departmental representatives,
representatives from Public Services and Procurement Canada and the Treasury Board, as well as a panel of New York City real estate agents, and
the Minister of Foreign Affairs, Mélanie Joly, if the committee deems it necessary after hearing the other witnesses.
And that these meetings be held between August 19 and August 27, 2024, inclusively, and that apart from these three additional meetings, the committee hold no additional meetings before September 9, 2024, with the exception of meetings pursuant to Standing Order 106(4).
The wording refers to the meeting that was scheduled for today, but we can remove that part because it's null and void. So it would end after the reference to meetings requested pursuant to Standing Order 106(4).
At this juncture, the Conservatives will be voting in favour of the amendment.
Owing to the technical difficulties experienced by my colleague Mrs. Block and to complete the record, I wish to finish her thoughts.
Whether it's their friends at McKinsey getting special treatment and receiving government contracts, or former Liberal MPs and future Liberal leader hopefuls like Frank Baylis, whose company got a massive contract during the pandemic for ventilators that went unused and cost the government hundreds of millions of dollars only to be sold as scrap metal, we've also seen the complete lack of spending controls on major procurements like arrive scam, an app that started with an $80,000 initial price tag but ballooned to at least $60 million, according to the Auditor General.
Every step along the way, this government has tried to cover up these consequences of their failed governance. They voted against the audit of the ArriveCAN app, swearing that there was nothing to find and they swore there was nothing to find with the McKinsey contracting, yet, each time, malfeasance was found and has revealed a troubling pattern. Right before the House rose for the summer recess, it was reported that the government was purchasing a building right on Sparks Street. No practical reason for purchasing this building was given in the articles, but they did note that—surprise, surprise—a good friend—
:
No practical reason for purchasing this building was given in the articles, but they did note that—surprise, surprise—a good friend of the , Michael Pitfield, had part ownership of that building.
Again, Conservatives are voting in favour of the amendment.
Of all the buildings they could have purchased in Ottawa, they happened to buy one that directly benefits a close friend of the .
Again, Conservatives are voting for the amendment.
Now, in New York, one of hand-picked diplomats—
Now in New York, one of hand-picked diplomats just got a big upgrade in his residence. Trudeau has found it prudent to purchase an apartment on Billionaires' Row for $9 million.
Again, Conservatives are voting in favour of the amendment.
This is how chosen elite live high on the taxpayer's dime at a time when Canadians are struggling to pay their mortgages or their rent.
Again, Conservatives are voting in favour of the amendment.
This is at a time when our country is seeing more tent cities cropping up across the country and at a time when two million-plus Canadians are going to food banks to feed their families, and, according to the Office of the Superintendent of Financial Institutions, more hurt is on the way with more defaults on the horizon as many Canadians are facing mortgage renewals over the next few years.
Again, Conservatives are voting in favour of the amendment.
Frankly, at a time when Canadians are living through housing hell, is more interested in buying for and buying from his friends over delivering for Canadians. Conservatives believe that Canadians deserve answers, which is why Mrs. Block brought forward this motion, which calls on the government....
I can't complete her thoughts on that, but that's my intervention.
Thank you, Chair.
:
I thank my colleague for his suggestions.
As far as the witness list is concerned, we don't usually put that in our motions. Instead, we wait until the end of the meeting to determine when we will submit the list of witnesses. Having said that, August 12 is a reasonable date.
As far as the documents are concerned, if there's a 30‑day deadline, at best we will have them just in time for the first meeting with witnesses, or at worst, we may not have them at all and won't get the opportunity to read them and do a proper analysis. So, in my opinion, 30 days is too long for us to receive those documents.
I understand all the challenges with translation and interpretation and what that entails, but I don't like to go on a fishing expedition when I question a witness. I like to be able to base my thoughts on something tangible that I've been able to analyze. If I don't have the documents before the first meeting, I'll have to go fishing when asking the witnesses questions. After receiving the documents, I may realize that the answers were in the documents and that I could have asked better questions if I had had them beforehand. That would mean I wasted my time and the witnesses' time. At the end of the day, we'd also be wasting taxpayer funds, because they pay for the committees and for all the time we spend on this.
So, for efficiency reasons, I'm against this 30‑day deadline, because I need to read the documents before the meeting. Personally, I won't be able to support the subamendment. I'm sorry.
:
We're clear on the second part about the witnesses.
Regarding receiving the documents and the translation, it's always difficult. We can't guarantee it, because I don't know how many documents are going to arrive. If 5,000 pages arrive, just to exaggerate, within 14 days, they're not going to get translated whether we say 14 days or 21 days. However, there's not a lot going into the Translation Bureau right now, so I think we probably should be fine with that, assuming they're not taking vacations. I would assume so, but nothing's a guarantee and we wouldn't be able to guarantee if it was the 14th anyways, or we wouldn't be able to guarantee if it was 31 days or 30 days, as was originally proposed.
:
We're now back to the original amendment by Mrs. Vignola, which adds the dates for the meetings and ends other meetings.... Bear with me for two seconds.
We're adding Mrs. Vignola's...we've accepted a subamendment and we're back to the original amendment by Mrs. Vignola, which reads: "And that these meetings be held between August 19th and August 27th, 2024, inclusively, and that apart from these 3 additional meetings, the Committee hold no additional meetings before September 9, 2024, with the exception of the 106.4 meetings".
Then it also changes the last line for the witnesses to read, “The Minister of Global Affairs, Minister Joly, if the committee deems it necessary”.
We're now back to that amendment.
I will go to Mr. McKinnon.
Go ahead, sir.
:
I'm sure we've all dabbled in real estate in our personal lives, if not professional lives, but my concern is that and there's always a cost attached to any assessment of fair market value.
The Chair: [Inaudible—Editor]
Mr. Larry Brock: I understand that, Chair. I just want to complete my thoughts.
There's always a cost to obtain an assessment. In the ordinary course of events, the Liberal government, or an agent of the Liberal government, would have negotiated the purchase of this extravagant, ultra-luxury penthouse on Billionaires' Row for $9 million. There may or may not have been an assessment that was made privy to the agent who purchased the property on behalf of the Government of Canada, but unless it's in the government's possession, even if one exists, and unless the author of that assessment is a very generous individual or company, they are highly unlikely to release it to the government to comply with this order without a cost. The Liberal Party of Canada is in a position to pony up for a potential expenditure to comply with this particular order of committee, and my concern is it should not fall to the taxpayer.
:
Maybe save that for your committee, Mr. McKinnon.
I'm sensing we're getting close, so I'm hoping we might be able to get one more round in with the witnesses, because I want to hear more from them.
Do we need to vote on Mr. McKinnon's subamendment? It sounds like we're in general agreement with basically providing those documents if they exist, as the clerk has read back. Are we fine with that? Do we need to vote on it, or can we accept it as is? I'm sensing we are accepting it by unanimous consent.
(Subamendment agreed to)
The Chair: We are now back to the original, now-amended motion, and thus to the amendment first. Are we fine with it?
(Amendment as amended agreed to)
The Chair: Wonderful.
We're back now to the amended motion. Are we fine with it, colleagues?
(Motion as amended agreed to [See Minutes of Proceedings])
The Chair: Wonderful.
I am glad we did not dismiss our witnesses. We are going back to our speaking order. I'm sincere about that, because I'm finding the time with Mr. Boots and Ms. Clarke fascinating, so I'm very happy that we can have them for a bit longer.
Mr. McKinnon, you are up now for five minutes with Professor Clarke and Mr. Boots. Go ahead, sir.
:
I don't know whether I can rank the top three just off the top, but when I look at countries that are generally succeeding in the quality of their digital services and modernization, vendor management and IT contracting are a big part of their strategy because, clearly, the answer here is not for everything to be built in-house. There's a lot of room, and there has to be room to have healthy relationships with these outside providers.
I mentioned a few examples of countries that are doing interesting work in this space. I'll offer up a few that come to mind. I know that, in Singapore, in speaking with a public servant there who works on their digital government initiatives, they have a practice of making sure that, whenever they work with a larger vendor that may not be a local firm, they have clauses in the contract that say that they have to bring along local firms to give them the opportunity to work on a government project, to help infuse more local economic development and to foster a really strong local tech ecosystem.
On the point of bringing in strong tech talent, we talked a fair bit already about the issue of salary disparities. Countries that are succeeding at bringing in that kind of talent to senior roles are taking some of the measures that Mr. Boots mentioned, like not strictly forcing these people into managerial roles when that's not where their passion and talent lie, but also really emphasizing the public mission of government. This is something that comes up constantly in interviews with technologists who choose careers in government despite the lower pay: It's really rewarding and meaningful to actually improve your country and help people get services that work. Pushing that message is really powerful and works very well, as examples, in the United States and in the United Kingdom, for bringing in technologists.
We talked a bit about the problems of revolving doors and sashaying from a career in government into these firms, and how that creates opportunities for, perhaps, inappropriate contracting. I also think we want to nuance that by noting that we still want to encourage a fluid interchange between the private sector and government, to acknowledge that it may not be realistic for those who have lucrative opportunities in the private sector to work an entire career in government, to make it easier to have more of those interchanges and to build up a really strong culture of seeing those outside players as not strictly the enemy while having strong rules and good organizational hygiene internally so that, when you do have that back and forth, you don't worry as much and don't need to be as concerned about conflict of interest or cronyism.
This came up, for example, when I spoke with public servants in Estonia, a globally recognized digital leader. They see the boundary between public and private as pretty fluid, and that's partially because they are a tiny nation and it's a small community. I asked them, “Aren't you worried about those folks leaving government and then using that to build the profit of a firm?” They said, “We all know each other. We have a high level of trust. We have strong rules in place and a very strong culture of good governance.”
These are some of the things we want to focus on building in Canada. I think there are tons more. I think that the spending controls, which I mentioned, are needed in this case just as a hard stop on bad practices. That's another one....
:
In relation to the question of who owns the software that's being built through government IT contracts, around intellectual property and the use of open-source software, there are some other really interesting examples of different countries doing really interesting things. A couple of examples of this that may be a bit more comparable to the Canadian geographic context are both Germany and France.
The Government of France, maybe a decade ago, declared in legislation that essentially all technology products bought and used by the federal government or by the national government in France needed to be open-source. The term “open-source”, I think, often makes you think of geeks writing code in the basement of a university, but open-source software is widely used by the private sector tech industry, governments, universities and organizations all around the world. It helps get around the situation in which you bought a product from a commercial software vendor that only they provide, and then you're just stuck with them for decades, which often happens with government technology products: We spend millions of dollars on a product from one vendor, and getting away from them is too difficult because they're too entrenched. That's a systemic problem that shows up a lot, so France has legislation that says, “When we're paying companies to build software for us, it needs to be reusable and licensed under an agreement that lets other departments, other parts of the government or even other countries use it.” That's really important.
Germany recently launched what it calls the sovereign technology fund, which is essentially government funding to build digital software products that can be reused across the German government and other governments around the world so that they're not paying for the same software over and over again. There's this idea that, just as bridges, airports and ports create an infrastructure on which the economy functions, government-owned or open-source government-used software creates an infrastructure layer that lets services be delivered more efficiently, at a lower cost and more reliably.
There's a lot of interesting work happening to make software reusable. I think that, for Canada, you could imagine a future government introducing something like a “Don't Pay for the Same Software Twice Act” that enshrines this idea that if we're paying for some company to build a brand new piece of software—
:
Ms. Clarke, before we left off I asked you about ministerial accountability because we saw situations like the Liberals' arrive scam, companies like GC Strategies—a two-person operation working out of a basement—adding no value. Supposedly, they were to source resources to work on the project, but we learned from KPMG, which is a huge company, that KPMG was instructed by the public service that they would need to be a subcontractor of GC Strategies, adding 30% to the cost of it—and there were many of these cases.
Is the problem that no one is in charge anymore, so there's no one actually trying to evaluate whether we're getting value from these contractors, big or small? As you said, though the larger companies are the most successful at winning the bids, they're not necessarily providing the best value for money.
Value for money is a whole other conversation that we'll save for another day because there are far too many cases in which, as the Auditor General noted, we don't get value for money with the Liberals' procurement process.
:
I think the point around holding ministers to account for these kinds of failures is really important, and it's something that we've seen in other jurisdictions where there was a massive change in thinking about how to work with vendors and how to manage digital initiatives more generally. It's usually because there was a big political scandal and somebody was on the line, was held to account and there was a clear point of ministerial ownership.
This is a challenge in the Canadian case in that we have muddied ownership of all these questions. Is that not right? There are, first of all, many departments involved, like Public Services and Procurement Canada, Treasury Board. Now we have the , Shared Services. ESDC is an owner of many of these, so how do we...?
To move beyond just the specific question of what happened with ArriveCAN, when there is an IT failure it can be really hard to locate whom to blame, but also, who's then sitting around the cabinet table, feeling like, “I'm responsible for this and I own this”? We had a minister of digital services in the past. We no longer have that role. I'm not sure that was necessarily the answer to this problem, but one thing that I think will be important to think about in future machinery-of-government configurations is, how do we create a clear locus of responsibility and accountability that answers questions in question period and actually can access the information they need to be responsible?
Of course, the other challenge around ministerial accountability on this particular file is that their ownership is so distributed and the decisions are happening in so many different ways that it's really hard to know who would be reasonably blamed for these things.
:
It's a good perspective. In some ways, that's an illustration of the burdensome internal barriers that exist for public servants who are trying to get a procurement or an RFP out the door. It is so much work and so time-consuming to go through all of the paperwork steps to get there. That's one of the reasons that public service teams are so incentivized to have, instead of five small contracts, just one enormous contract with one of the really large vendors, who then will probably get a bunch of subcontractors and do work that's really hard to keep accountable.
I think breaking things into smaller contracts, as Professor Clarke spoke about, is a way of being more accountable to you if those contracts are actually delivering good value. If it's a contract for $2 million for six months for some team and they do a bad job, you can drop them and move to the next vendor. But if you have a five-year-long contract for $30 million with one company, even if they're doing a terrible job two years in, you're probably still stuck with them. It's too hard to extricate yourself. Breaking a thing into smaller contracts is a way of improving the quality of outcomes.
Around the overall cost of even large IT projects, one thing the private sector technology industry shows us is that you can have a massively popular software product used by millions of people for a fraction of the cost more than if it were used by only a few people. For example, if you're the team that launched Instagram 10 or 15 years ago, you probably had a team of five software developers. You built Instagram. The cost of running the team that built Instagram is the same if it had two people using it or if it had 300 million people using it. The only differential cost is a little bit of cloud computing infrastructure, which doesn't really cost much money nowadays. So the team of people building it is the most expensive part regardless of how much it's used.
That way of thinking really hasn't internalized itself into government software, where the idea is that this is used by millions of people, so we need a thousand-person team of contractors working on it. The truth is that you could build an equally high-quality product with a team of 10 or 15 at a fraction of the cost.
There is some great writing from Waldo Jaquith in the United States. I don't know if we've mentioned his work before. He has a great piece about “scrum team years”, which is around this assumption that a large IT project in government surely must cost $50 million. But what are you actually getting for $50 million? A lot of paperwork.
To actually build the software that people will use, you might need one team. That might be $1 million a year. You might need two teams. That's $2 million a year. The costs are actually much lower than people are accustomed to in government IT. There's just this normalized idea that it's a large project affecting a lot of people, so it must cost a lot. It's hard to question that when that's established thinking on these types of projects.
:
Thank you so much, Chair. I appreciate it.
This has just been so fascinating. As a member who isn't often on this committee, I have to say I've really enjoyed what I've learned.
One of the questions I'm asking both of you, because you have different expertise on this issue, is about finding the right balance between in-house and contracting out. That has come up a lot. How should we consider measuring that? What do we need to assess in that process?
I will say for the public service that they are on the precipice of defending taxpayer dollars and how they're spent. This is obviously not going very well right now, so what kind of policy do we need to really find that balance of in-house, and what is the justification behind it?
When we look at a lot of these issues, the problem is that, until there's a crisis, they are very hard to explain to people who vote in our country, and we want Canadians to have a better understanding of why we're doing what we're doing when we're in government. If you could give us a little bit of thoughtfulness around that, I would really appreciate it.
:
It's a good question. There's some nuance, and I don't think there is a clear rule yet on what the ratio is between in-house versus outsourced. There are different approaches. As I mentioned, some governments really emphasize a fluid back-and-forth. Their focus is on a core of IT expertise in particular roles. The product ownership role is one, so it's something that is regularly cited to me as something that needs to be brought in-house.
Taking senior leadership and empowered proven technologists who've produced high-quality services and putting those folks into deputy minister-rank positions where they can actually influence how the rest of the work in their department unfolds seems to be an area where focusing on in-house is really important.
There's scope to think about this across departments. We work right now with the Canadian Digital Service, and that's something we haven't talked about yet today, but that is an important tool we could use more across the federal public service to bring in tech talent.
Many governments start out this journey of re-skilling or upskilling by creating these small digital service teams at the centre, and then, over time, departments create their own digital service teams with the idea that they can pass on these methods and try to retrain internally.
However, there is no golden rule for how much of the work should be sent out to others to do and what should be kept in-house, with the exception, as I said, of how regularly the product ownership role comes up. The other one that regularly comes up when I speak to public servants about this issue is they feel very strongly that policy, vision, strategy and the objectives of a digitization initiative should be internal, and then the footwork can be fruitfully outsourced.
There are certain other areas where it's just not going to be reasonable to keep that expertise on hand, like the latest expertise in artificial intelligence or cybersecurity. This might be something where we want to turn more to external advisors and have a sufficient base of knowledge internally to be able to ask good questions and really scrutinize the advice they provide.