Risk and Importance Framework
Updated 18 February 2025
This framework categorises all digital and technology spend into five types:
-
digital services
-
platforms and common components
-
commodity technology and licences
-
specialist technology
-
resourcing contracts
Each type includes questions on:
-
cost
-
value
-
risk to users
-
delivery team capability
-
novelty of technology
-
previous delivery quality
-
political priority
The questions are classified as high, medium or low risk and importance. You must answer every question.
Your spend request will be given a high, medium or low risk and importance rating based on your highest rated answer.
If you have any answers in the high category, your spend will be rated as high risk and importance.
If you have no answers in the high category but one or more in the medium category, your spend will be rated as medium risk and importance.
If all your answers are in the low category, your spend will be rated as low risk and importance.
GDS will use this risk and importance rating to decide who carries out the assurance of your spend according to the earned autonomy policy.
1. A digital service
Building a service as outlined in the Service Manual. This includes all associated costs, such as a delivery partner and technology costs. For example, the get approval to spend service.
Question | Low | Medium | High |
---|---|---|---|
What is the expected whole life cost of development and operation? | less than £20 million | between £20 million and £50 million | more than £50 million |
How many transactions does the service expect to handle each year? | less than 100,000 (or a non-transactional service) | between 100,000 and 1 million | more than 1 million |
Is the service one of the ‘Top 75’ services published in the cross-government digital and data strategy, ‘Transforming for a Digital Future’? | No | Yes | |
Is the service primarily for users in need of special care, support, or protection because of age, disability, risk of abuse or neglect? | No | Yes | |
A. Will the service be delivered primarily by an organisation outside of government? (if yes to A) B. Has the Service Owner delivered to the service standard before? | A: No | A: Yes; B: Yes | A: Yes; B: No |
Does your spend cover the application of an emerging technology not yet widely adopted in public services? | No | Yes | |
Does your spend cover the procurement or development of a product or service that will either: (i) use AI as a significant part of decision making, including making recommendations to the decision maker, or (ii) use AI that requires specific training with data to meet your use case, or (iii) have AI features that constitute a key reason or benefit for the spend? | No | Yes | |
How many “red” or “not met” service assessment outcomes has this service received? | 0 | 1 | more than 1 |
Has the service been subject to a Parliamentary hearing (for example Public Accounts Committee) in the past 3 years? | No | Yes | |
Is this service being built as an urgent response to a crisis? | No | Yes |
2. Platforms and common components
The build, remediation or transformation of technology platforms or components, independent of a service. For example, a cloud platform, corporate network, cyber remediation programme or data insights programme.
Question | Low | Medium | High |
---|---|---|---|
What is the expected whole life cost of development and operation? | less than £20 million | between £20 million and £50 million | more than £50 million |
Will the platform you are spending money on process more than one million transactions per year? | No | Yes | |
How many Government organisations will use the component? | 1 | more than 1 | |
A. Will the service be delivered primarily by an organisation outside of government? (if yes to A) B. Has the Service Owner delivered to the service standard before? | A: No | A: Yes; B: Yes | A: Yes; B: No |
Does your spend cover the application of an emerging technology not yet widely adopted in public services? | No | Yes | |
Does your spend cover the procurement or development of a product or service that will either: (i) use AI as a significant part of decision making, including making recommendations to the decision maker, or (ii) use AI that requires specific training with data to meet your use case, or (iii) have AI features that constitute a key reason or benefit for the spend? | No | Yes | |
How many “red” or “not met” service assessment outcomes has this service received? | 0 | 1 | more than 1 |
Has the service been subject to a Parliamentary hearing (for example Public Accounts Committee) in the past 3 years? | No | Yes | |
Is this platform being built as an urgent response to a crisis? | No | Yes |
3. Commodity technology and licences
Common software licences and technology that supports day to day business activity. For example, productivity licences, laptops or office hardware such as printers.
Question | Low | Medium | High |
---|---|---|---|
What is the value of the initial term of the contract? | less than Commercial Spend Control threshold (£20 million) | between Commercial Spend Control threshold (£20 million) and £100 million | more than £100 million or Delegated Authority Limit (DAL) |
Does your spend cover the application of an emerging technology not yet widely adopted in public services? | No | Yes | |
Does your spend cover the procurement or development of a product or service that will either: (i) use AI as a significant part of decision making, including making recommendations to the decision maker, or (ii) use AI that requires specific training with data to meet your use case, or (iii) have AI features that constitute a key reason or benefit for the spend? | No | Yes | |
Is this a direct award, or extension outside of the terms of the original contract? | No | Yes | |
Is this technology being procured as an urgent response to a crisis? | No | Yes |
4. Specialist technology
Specialist or bespoke technology, built to your specific requirements either from scratch or by modifying existing solutions. For example, supporting platforms or operational transport technology and frontline military technology.
Question | Low | Medium | High |
---|---|---|---|
What is the value of the initial term of the contract? | less than Commercial Spend Control threshold (£20 million) | between Commercial Spend Control threshold (£20 million) and £100 million | more than £100 million or Delegated Authority Limit (DAL) |
Is the project on, or expected to be on, the Government Major Projects Portfolio? | No | Yes | |
Does your spend cover the application of an emerging technology not yet widely adopted in public services? | No | Yes | |
Does your spend cover the procurement or development of a product or service that will either: (i) use AI as a significant part of decision making, including making recommendations to the decision maker, or (ii) use AI that requires specific training with data to meet your use case, or (iii) have AI features that constitute a key reason or benefit for the spend? | No | Yes | |
Is this a direct award, or extension outside of the terms of the original contract? | No | Yes | |
What is the most recent IPA Rating if this is on the Government Major Projects Portfolio? | Green | Amber | Red |
5. Resourcing contracts
This category of spend is specifically for procuring resources to support delivery across an organisation’s projects or services. For example, cyber security professionals.
Question | Low | Medium | High |
---|---|---|---|
What is the value of the resourcing contract? | less than £20 million | between £20 million and £50 million | more than £50 million |
Is this either a ‘call-off’ to an existing contract or a new procurement via a CCS framework? | Yes | No | |
What is the duration of the contract, excluding extension options? | 4 years or less | between 5 and 9 years | 10 years or more |