ICT Two Pass Review
The Government implemented an ICT Two Pass Review process in 2008 to provide Cabinet with better information to support decision making on major investments in ICT-enabled proposals.
The process enables a multi stage assessment of proposals – each at increasing levels of detail and accuracy. A key component of this approach is the iterative development of a Business Case that articulates the policy objective, how the proposal contributes to the achievement of that objective, and identifies and evaluates options for delivery of the proposal.
Effective business case development is a key part of the project & programme management process that helps ensure alignment between policy intent and agency activity and investment.
The process will also better position agencies for the Gateway Review processes, and is a cornerstone in the successful delivery of ICT-enabled proposals.
For government, the process supports capital budgeting decisions by providing better information on the benefits, costs and risks before final approval of ICT enabled proposals.
For agencies, the process contributes to more effective delivery of policy outcomes by providing assurance that delivery options are identified and considered, costs are fully developed prior to requesting funding, and ensuring agencies only develop full business cases for proposals which government has given in-principle approval.
Proposals Subject to the ICT Two Pass Review Process
The ICT Two Pass Review process applies to proposals, including internally funded proposals, that:
- are ICT-enabled, that is, the policy or service delivery outcomes are highly dependent on an underpinning ICT system
- have a total cost estimated to be $30 million or more, including ICT costs of at least $10 million; and
- are assessed by Finance as being high-risk in terms, for example, of cost, technical complexity, workforce capacity or schedule.
The total cost of an ICT-enabled proposal, for the purposes of determining whether it meets the cost criteria, is the through-life cost of the proposal. It includes both the capital and operating expenditure components of the proposal.
The Secretaries’ ICT Governance Board (SIGB) may also refer proposals that have a total cost estimated to be less than $30 million to the ICT Two Pass Review process, if it considers that the proposal would benefit from such a review.
Agencies bringing forward proposals that are subject to the ICT Two Pass Review process must seek first pass approval from Cabinet, supported by a First Pass Business Case.
If Cabinet gives first pass approval, agencies must:
- submit a draft Second Pass Business Case to AGIMO to enable early consideration and consultation, and
submit the final Second Pass Business Case to AGIMO for review prior to seeking second pass approval from Cabinet.
Timing of ICT Two Pass
When |
What Happens |
|---|---|
From June each year: |
Agencies advise Finance of ICT investment intentions. Agencies commence development of their First Pass Business Cases. |
From September each year: |
Finance reviews draft First Pass Business Cases and provide feedback to agencies. |
Between December and April: |
Cabinet decides if the proposal will proceed to budget deliberations. Agencies incorporate any feedback and submit final First Pass Business Cases. Cabinet considers the First Pass Proposals and decides whether to agree in-principle, subject to a Second Pass Business Case. |
Timing determined by Cabinet |
Agencies develop their draft Second Pass Business Cases. Finance reviews Second Pass Business Cases and provides feedback to agencies. Agencies incorporate feedback and submit final Second Pass Business Cases. Cabinet considers the Second Pass Proposals and decides whether to:
|
Further information about the budget and Cabinet process, requirements and timing is available to Government officials through your CFO area.
The timing and dependencies of the ICT Two Pass process, in the context of the broader budget process are described in the schematic below:
ICT Two Pass Process Alignment

Text description of ICT Two Pass Alignment
ICT Two Pass Process Alignment – PDF version
[
66 KB]
ICT Two Pass – Roles and Responsibilities
The following diagram sets out the high level roles and responsibilities of the key stakeholders involved in the ICT Two Pass Process.
ICT Two Pass RACI Chart

Text description of ICT Two Pass Review RACI Chart
ICT Two Pass RACI Chart – PDF Version
[
46 KB]
Process/Governance
Proposals that are subject to the ICT Two Pass Review process must seek staged approval from Cabinet. To enable this, agencies must submit business cases subject to the ICT Two Pass Review process to AGIMO for review, before they are submitted to Cabinet.
At first pass, the relevant Portfolio Minister seeks in-principle agreement from Cabinet to a proposal on the basis of a First Pass Business Case. Agreement is sought to develop one or more options for second pass consideration.
At second pass, the relevant Portfolio Minister seeks Cabinet’s agreement to proceed with a proposal on the basis of a Second Pass Business Case.
Agencies must use existing resources to develop the First Pass Business Case, but the First Pass Proposal may include a modest bid for additional funds to develop the Second Pass Business Case where necessary. This ability to potentially secure funding to further develop a proposal is an additional benefit of the Two Pass process.
Sponsoring agencies need to submit ICT Two Pass Business Cases via CABNET to:
Assistant Secretary
Investment Management Branch
Australian Government Information Management Office
Department of Finance and Deregulation
Emerging ICT Investment Intentions:
From June each budget year, agencies notify AGIMO of ICT investment intentions and ICT enabled proposals that may meet the ICT Two Pass Review criteria, as they arise.
The purpose of the agency discussions with AGIMO is to establish an early understanding of the potential nature, scale, complexity and broad cost of major agency ICT initiatives that may emerge for formal consideration by Cabinet. Detailed information on the proposal is not required at this stage.
In September each year, Finance will review draft First Pass Business Cases and will provide feedback to agencies.
In November each year, Cabinet will decide which major ICT-enabled proposals may be brought forward by Portfolio Ministers for consideration, on the condition that they undertake the ICT Two Pass Review process.
First Pass Approval
At first pass, agencies will be expected to have canvassed realistic ICT options to deliver the outcomes of the proposal. Agencies should have developed a broad, through-life cost estimate and an indicative schedule for each ICT option.
Agencies should prepare an initial Business Case with one or more well considered options, and then seek in-principle agreement to the proposal from Cabinet to develop one or more options for further consideration.
Agencies must comply with the First Pass Business Case Requirements and may refer to the ICT Business Case Guide when completing the First Pass Business Case template and Costing Spreadsheet.
- First Pass Business Case Template - PDF Version [
30 KB] - First Pass Business Case Template - RTF Version [
96 KB] - First Pass Requirements - PDF Version [
75 KB] - First Pass Requirements - RTF Version [
1.8 MB] - Costing spreadsheet [
244 KB] - Sample First Pass Business Case (Fictional Proposal) – PDF Version [
75 KB] - Sample First Pass Business Case (Fictional Proposal) – RTF Version [
428 KB]
A benefit of the first pass review is to minimise the use of agencies’ resources on developing a proposal prior to the Government’s initial consideration.
Second Pass Approval
At second pass, agencies develop the Business Case in support of the proposal being brought forward for the second pass review by Cabinet. The Second Pass Business Case includes detailed cost assessments and risk mitigation strategies. The cost estimates are based on rigorous planning in terms of the scale and features of the ICT infrastructure, applications and support required, including non-binding, tender-quality estimates from the private sector where appropriate.
Agencies must comply with the Second Pass Business Case Requirements and may refer to the ICT Business Case Guide when completing the Second Pass Business Case template and Costing Spreadsheet.
- Second Pass Business Case Template - PDF Version [
31 KB] - Second Pass Business Case Template - RTF Version [
89 KB] - Second Pass Requirements - PDF Version [
92 KB] - Second Pass Requirements - RTF Version [
1.9 MB]
Defence ICT Investment Approval Process
Department of Defence ICT projects that are not assessed through the Kinnaird two-pass process are to use the ICT Two Pass Review process as well as the following agreed costing guidance. Enquiries should be directed to the Defence, Security and Intelligence Branch (non-DCP) or the Defence Capability Assessment Branch (DCAB) of Finance.
- First and Second Pass Costing Guidance for Defence ICT Projects - PDF Version [
143 KB] - First and Second Pass Costing Guidance for Defence ICT Projects - RTF Version [
271 KB]
Consideration of Agencies’ ICT Investment Capability in the ICT Two Pass Process
Agencies subject to the Financial Management and Accountability Act 1997 (FMA Act agencies) are implementing the Portfolio, Programme and Project Management Maturity Model (P3M3™) as a common methodology for assessing their organisational capability to commission, manage and realise benefits from ICT-enabled investments.
The Government considers independently validated P3M3 assessment results in the ICT Two Pass process.
All FMA Act agencies with an annual ICT spend greater than $2 million are required to incorporate in their first and second pass proposals the results of their P3M3 assessments. Current organisational capability in ICT-enabled investment will be considered as part of the ICT Two Pass Review process:
- from December 2010, for agencies with annual ICT spends over $20 million, and
- from June 2011, for agencies with annual ICT spends between $2 million and $20 million.
Further information on Organisational Capability in ICT Investment is available from the Finance website.
For advice on the incorporation of P3M3 information in the ICT Two Pass process, please email the Capability Assessment mailbox.
Gateway Review Process
The ICT Two Pass Review process complements the Gateway Review Process (Gateway), for ICT enabled proposals. The key points of difference between Gateway and ICT Two Pass Reviews are that Gateway applies throughout a project’s lifecycle and is an independent project assurance methodology designed to assist the Sponsoring Agency to deliver its project objectives and to deliver projects successfully.
Gateway involves conducting a series of brief, independent reviews at critical stages in the development and implementation of a project and reporting to the sponsor. The ICT Two Pass Review process is designed to provide Cabinet with information to support its decisions on major investments in ICT-enabled proposals.
The process aids in the preparation and presentation of compelling business cases in the context of a portfolio of investments, both at the agency and whole-of-government levels.
The following schematic identifies the relationship between the ICT Two Pass process and Gateway:
ICT Two Pass Gateway And Relationship
Text description of ICT Two Pass and Gateway Relationship
ICT Two Pass and Gateway Relationship – PDF Version [
15 KB]
For more information on the alignment of the ICT Two Pass Review process and Gateway, refer to EM 2010/47: Budget: Timetable for the Gateway Review Process.
Cyber Security requirements in Business Cases for ICT-enabled New Policy Proposals
Agencies are required to consider and address cyber security risks and ensure proposals comply with relevant Government Cyber Security policies in all Business Cases prepared for ICT-enabled proposals, including those:
- brought forward as part of the Minister’s Portfolio Budget Submission
- brought forward for consideration outside of the Budget process
- submitted through the ICT Two Pass Review Process
- submitted through the Department of Defence’s ICT Investment Approval Process and its Two Pass Approval Process, and
- that are internally funded investments (only where business cases are required under the Budget Process Operational Rules regarding Asset and Capital Proposals.).
Agencies need to demonstrate that the proposal aligns with the Australian Government’s Cyber Security Strategy.
The Business Cases for ICT-enabled proposals also need to reference and explain how the proposal will comply with the mandatory requirements of the Protective Security Policy Framework (PSPF) and the ICT requirements of the Information Security Manual (ISM) through the various stages of the proposed systems development lifecycle.
Agencies should address key cyber security policies and ICT requirements under the PSPF and ISM in the early stages of a proposal’s systems development (at the concept development and planning stages) to enhance the integration of cyber security into a project.
For more information on the alignment of the ICT Two Pass Review process and Cyber Security requirements, refer to EM 2010/59 Cyber Security requirements in Business Cases for ICT enabled New Policy Proposals.
Additional Information
ICT Business Case Guide - PDF Version [
1.1 MB]
ICT Business Case Guide - RTF Version [
2 MB]
Cabinet Submission recommendations must seek first or second pass approval in accordance with the ICT Two Pass Review process. The required form-of-words is set out in the Cabinet Circular on recommendations for Portfolio Budget Submissions and Cabinet Submissions.
The ICT Two Pass Review process is managed by AGIMO within the context of the broader budget process, which is managed by the Budget Group in Finance. The two groups have arrangements in place to share information provided by agencies in order to fulfil their respective roles.
Frequently Asked Questions
The answers to the Frequently Asked Questions should be read in conjunction with the ICT Business Case Guide and associated Estimates Memoranda (EMs). EMs are available to government officials from CBMS or your CFO unit.
The Investment Management Branch in AGIMO manages the ICT Two Pass Review process. If you have any queries concerning the process or its application to particular ICT-enabled proposals, please contact the Investment Management Branch by emailing ictadvice@finance.gov.au.
Contact details for ICT Two Pass enquiries:
For enquiries on the ICT Two Pass process, call (02) 6215 1584 or email ictinvestmentframe@finance.gov.au
To advise us of your ICT initiatives, call (02) 6215 3095 or email ictadvice@finance.gov.auContact for information on this page: ictinvestmentframe@finance.gov.au

