The Treasury published the Digital, Equipment and Change Assurance Framework on 23 October 2026. The guide operationalises Cabinet's April 2026 decision to improve assurance over high-risk data, digital, equipment and organisational change investments.
DECAF Operationalises Unified Assurance
The Treasury released the Digital, Equipment and Change Assurance Framework on 23 October 2026. It specifies how the Investment Decision Assurance Policy applies to data and digital, specialist equipment or organisational change investments.
DECAF forms one pillar of the broader IDA system that takes effect on 1 November 2026. It replaces the separate Gateway reviews and Infrastructure Priorities Programme with a single risk-based process.
The framework applies where the Treasury's Risk Profile Assessment identifies DEC investments as primary. High-risk projects require mandatory Point Reviews. Medium-risk projects may opt in.
Key Features and Costs
The Treasury Assurance Unit delivers reviews in collaboration with the Government Digital Delivery Agency for digital components. Reviews assess strategic alignment, value for money and deliverability.
Agencies pay $75,000 per Point Review. The fee matches the cost of previous Gateway reviews.
Mixed investments fall to the lead Assurance Unit based on primary type, scale and risk balance.
Comparison of Old and New Systems
The reform consolidates assurance across government. It responds to concerns that Ministers lacked consistent quality information on high-risk investments.
Fiscal Context and Savings Potential
New Zealand's public sector investment system totals approximately $20 billion per annum in real terms, according to the Treasury. DECAF targets better outcomes within this spend.
The Government Digital Delivery Agency projects up to 30 percent savings on a projected $13 billion technology spend over five years. Earlier intervention should reduce cost overruns and benefit shortfalls.
The Treasury will issue consolidated Fitness Assessments that combine IDA findings with value-for-money analysis and fiscal implications for Cabinet.
The Treasury Assurance Unit delivers reviews in collaboration with the Government Digital Delivery Agency for digital components.
Transition and Agency Impact
Agencies must complete Risk Profile Assessments for significant investments. High-risk ratings trigger mandatory Treasury moderation.
The new RPA template releases on 2 November 2026 after a moderation pause. Agencies need to budget for review costs and integrate assurance planning early.
The IDA Policy faces review in 2027 to maintain independence and alignment with Cabinet expectations.
Outlook for Fiscal Discipline
DECAF supports tighter control over taxpayer-funded investments. It emphasises early risk identification and practical advice for Senior Responsible Owners.
Improved delivery of digital services and organisational change should enhance public sector efficiency. The system extends opt-in access to local government and private entities subject to capacity.
