Christine (President, Project Management Institute (PMI) Hong Kong Chapter, Ms Christine YAU), SoHyun (PMI Asia Pacific Regional Managing Director, Ms SoHyun KANG), Galen (PMI Board of Directors, Mr Galen TOWNSON), distinguished guests, ladies and gentlemen,

Good morning. It is my privilege to join you all today at this year’s PMI HK Asia Pacific Project Management Congress, a high-powered event attended by leaders who are shaping the future. As leaders in project management and different fields, you will agree that we stand on the brink of a new era in project governance and digital innovation. Good governance is not only fundamental to organisational success but also essential in the pursuit of public trust and societal benefit. Today, I would like to share with you the Government’s measures for continuous improvement of IT project governance and, more importantly, why they are critical for the well-being of our society and the sustained growth of Hong Kong’s digital economy.

Amid rapid digital transformation, project governance for IT systems is not merely a necessity for internal efficiency; it is a commitment to transparency, security and accountability. A well-governed digital landscape enables seamless public services, fosters a secure business environment and public confidence. For an economy as dynamic and globally connected as Hong Kong, we see project governance as a crucial driver to ensure that digital transformation delivers measurable and positive impacts on both our citizens and businesses.

To begin with, let me first introduce my office, the Digital Policy Office, DPO for short, which was established in July this year. As mentioned by the Chief Executive in this year’s Policy Address, DPO is dedicated to steering government bureaux and departments in leveraging innovative technology to enhance public services and implementing more digital government initiatives that will bring benefits to both the public and businesses. One of the DPO’s missions is to support the HKSAR Government in its digital transformation, enhance project governance, and strengthen the cybersecurity of government information systems as well as those of related public bodies. We aim to go beyond improving government efficiency. By fostering a digital environment built on transparency and accountability, we enable growth and confidence for the community and various sectors.

In our role as stewards of Hong Kong’s digital development, we understand that both of the private sector innovation and public services rely on a secure and resilient public IT infrastructure. Through our work including the current “iAM Smart” and the upcoming Corporate Identity platforms, we strive to maintain a digital environment where businesses can confidently invest and grow, citizens can access reliable services, and all stakeholders can trust the Government’s commitment to the digital economy development in Hong Kong.

Project governance, at its essence, establishes the standards and accountability measures necessary to align projects with strategic objectives and ensure their successful implementation. In today’s digital world, project governance also serves as the foundation for public service success, economic stability, and public trust. Effective governance brings three major societal benefits that align closely with Hong Kong’s broader goals: transparency, reliability, and responsiveness to public needs.

When government IT projects are well-governed, we build systems that deliver timely, high-quality services to the public while laying a solid foundation for business and technological progress. Project governance ensures that public sector projects that are not only cost-effective but also resilient and responsive to Hong Kong’s unique societal needs. For our communities, this translates into trust in public services. For businesses, it means confidence in the digital infrastructure that supports their operations.

To achieve these goals, my Office has introduced multipronged measures to strengthen project governance across all major government IT systems. One of the most important measures is the appointment of a senior government officer, referred to as the Project Person-In-Charge, for every high-stakes IT project. This senior officer will assume full accountability for the project’s planning, execution, and outcomes, providing experienced oversight and ensuring that decisions are made with a comprehensive understanding of each project’s potential societal impact.

In addition, we have reinforced our project verification processes to enhance security and reliability. Every major IT project undergoes rigorous pre-launch testing, including independent system stability and security evaluations. These evaluations assess the resilience of our systems under extreme conditions, helping prevent disruptions and fortify against cyber threats. For the industry, this commitment to thorough testing and risk assessment provides peace of mind, knowing that Hong Kong’s digital infrastructure is built on secure, stable systems.

These measures collectively represent our commitment to the highest standards of transparency and reliability, providing a trustworthy foundation for the Government’s digital initiatives. With these new policies in place, we aim to deliver systems that citizens and businesses alike can depend on, whether for accessing services, connecting to government resources, or simply navigating daily life in a digitally connected city.

Our governance standards extend beyond government departments to include IT systems within public bodies, recognising the essential services they provide in peoples’ daily life. Public bodies play a significant role in shaping the lives of our citizens, providing vital services and creating a bridge between the Government and society. These organisations are integral to the digital infrastructure that Hong Kong’s residents and industries rely on every day.

To maintain consistency and public confidence, we required public bodies overseeing high-stakes IT projects to appoint their senior management as Project Person-In-Charge, ensuring that public bodies uphold similarly high standards of project governance as the Government. The Person-In-Charge of the public bodies is responsible for overseeing the governance of their major projects and ensuring that systems within public bodies maintain the same level of security, reliability, and alignment with public service goals.

Before deployment, each of these systems are required to undergo stress tests and security audits by independent third parties. This additional layer of governance provides a critical checkpoint, helping public bodies adjust systems before they go live, thereby minimising risks and maximising system resilience. By aligning governance practices between government departments and public bodies, we will create a cohesive and trusted framework across sectors, supporting our vision of a connected and secure digital environment that serves both the public and industry.

The DPO further strengthened our governance by adopting a multi-stage approach to project oversight. This begins with project planning and extends through implementation, ensuring that each phase meets stringent quality and security standards. We also proactively conducts regular health checks, penetration tests, and compliance audits on government IT systems in the production environment, addressing vulnerabilities as soon as possible to safeguard the public and ensure a reliable digital infrastructure that supports the industry.

Additionally, we coordinate cybersecurity attack and defence drills to simulate real-life attack scenarios, inviting both government departments and public bodies. The first annual drill exercise has just commenced, with participation from nine government departments and three public bodies. This event enhances our collective readiness and resilience, reinforcing a culture of security across public services and aligning with the high expectation of our community. By investing in these activities, we aim to protect not only government systems and data but also the interests of Hong Kong’s citizens and businesses.

We believe project governance is all about fostering a culture of accountability and resilience that permeates every aspect of our digital strategy. This culture is embedded in our leadership roles, in our insistence on independent verification, and in our ongoing commitment to secure, transparent IT management.

This culture enables us to continuously improve, learn from each project, and anticipate future challenges. Our IT systems evolve to meet the demands of a growing, dynamic city. We see strong project governance not as a single achievement but as an ongoing commitment to Hong Kong’s citizens, businesses, and our future. By fostering this culture, we create a foundation for Hong Kong’s continued development as a world-leading digital economy, supporting innovation, and promoting an enhanced quality of life for all.

Ladies and gentlemen, as we look to the future, our commitment to project governance is a commitment to Hong Kong’s prosperity and security. Achieving excellence in governance is not a task the Government can accomplish single-handedly – it requires collaboration across sectors, with public bodies, the IT industry and the community as a whole.

I invite each of you to join us in this journey. Together, we can continue to strengthen our governance frameworks, improve the resilience of our systems, and ensure that our IT projects contribute meaningfully to the future of Hong Kong’s society and economy.

I look forward to our collaboration as we work towards a secure, efficient, and prosperous digital environment for Hong Kong. Thank you.

- ENDS -