In response to this letter, we signalled that we were going to be doing an audit of ArriveCAN and that we were going to be determining the scope. This was not included in the scope for the ArriveCAN audit. However, we covered it in a different way in our audit, “Modernizing Information Technology Systems”, which was tabled in the fall.
We did talk about the process and the guidance that Treasury Board gives to help departments make decisions around IT systems. It's not exactly about make-or-buy decisions, but to a certain degree that is going to be covered in our future audit that we will be tabling, we expect, in May.
The point I'm making here is simply that while it's not covered in the ArriveCAN audit, you can find some helpful information in the audit that we tabled in the fall.