PiR2-IT demo
Government IT & DPI governance
Whole-of-government IT and DPI governance with generic institution names: who sets policy, regulates, operates, funds and audits digital ID, payments, data exchange, registries, consent, e-signature, government cloud and connectivity; decision rights, three lines of assurance and cross-agency workflows.
Institutions
- Parliament (ICT & budget committees) — Adopts DPI, data protection, e-signature and cybersecurity laws; votes the budget; oversees the executive.
- Cabinet digital transformation council — Chaired at Head-of-Government level; sets national priorities, arbitrates between ministries and approves the DPI roadmap.
- Ministry responsible for digital / ICT — Owns the national digital strategy, DPI policy, the interoperability framework and digital laws; supervises the National Digital Agency.
- Ministry of Finance — Budget and recurrent costs, public financial management (IFMIS), aid coordination; co-owns payments policy with the central bank.
- Ministry responsible for identity & civil registration — Policy for population registration, foundational ID and civil registration.
- Sector ministries (health, education, social protection…) — Own sector strategies, services and data; decide sector system go-lives; act as data controllers for sector data.
- National Digital Agency — Operates shared platforms (government data exchange, portal, consent, e-signature); keeps the national architecture and standards catalogue; runs the Architecture Review Board.
- National identity authority — Issues and maintains the foundational ID and provides authentication services to public and private users.
- Civil registration authority — Registers births, deaths and marriages; feeds the population register and sector registries.
- Central bank / national payment switch operator — Regulates and operates or oversees the payment switch used for government-to-person and person-to-government payments.
- Government data centre / cloud operator — Hosts government systems under national sovereignty and security rules.
- Sector digital agencies (e.g. Digital Health Agency) — Operate sector registries and exchanges (e.g. health client, facility and worker registries, HIE) on top of national DPI.
- National statistics office — Statistical standards, national code lists and the use of administrative data for official statistics.
- Data protection authority — Supervises lawful processing, registers controllers where required, reviews DPIAs and handles complaints.
- National cybersecurity agency / national CERT — Sets the security baseline for critical government systems, coordinates incident response and audits security.
- Public procurement authority — Procurement rules, standard documents and complaints review for DPI contracts.
- Telecom regulator (incl. universal service fund) — Connectivity, spectrum and rural coverage obligations; may finance last-mile connectivity for facilities.
- National standards body — Adopts national and international standards (e.g. ISO/IEC) used in DPI.
- Supreme audit institution — Independent audit of DPI spending, performance and IT controls; reports to Parliament.
- Internal audit & inspectorates — Ministry-level audit of controls, compliance and risk management.
- Ombudsman / grievance redress — Independent route for citizens harmed by DPI services, including exclusion from ID or benefits.
- Subnational governments (regions / counties) — Deliver devolved services, run local systems and connect them to national DPI.
- Development partners group — Finance and technical assistance aligned to one national plan and architecture.
- Private sector, vendors & trust service providers — Build and run systems under contract; certified providers for e-signature and payments.
- Civil society & users — Consulted on design and safeguards; monitor inclusion and rights.
DPI building blocks
- Digital ID & authentication: policy Ministry responsible for identity & civil registration; regulator Data protection authority; operator National identity authority; funder Ministry of Finance, Development partners group; assurance Supreme audit institution, Ombudsman / grievance redress
- Payments (G2P / P2G): policy Ministry of Finance, Central bank / national payment switch operator; regulator Central bank / national payment switch operator; operator Central bank / national payment switch operator, Private sector, vendors & trust service providers; funder Ministry of Finance, Private sector, vendors & trust service providers; assurance Supreme audit institution
- Government data exchange: policy Ministry responsible for digital / ICT; regulator Data protection authority, National cybersecurity agency / national CERT; operator National Digital Agency; funder Ministry of Finance, Development partners group; assurance Supreme audit institution, Internal audit & inspectorates
- Base registries (population, civil, business, land): policy Ministry responsible for identity & civil registration, Sector ministries (health, education, social protection…); regulator Data protection authority; operator Civil registration authority, National identity authority; funder Ministry of Finance; assurance Supreme audit institution
- Sector registries & exchanges (e.g. health): policy Sector ministries (health, education, social protection…); regulator Data protection authority, National cybersecurity agency / national CERT; operator Sector digital agencies (e.g. Digital Health Agency); funder Ministry of Finance, Development partners group; assurance Internal audit & inspectorates, Supreme audit institution
- Consent & data protection services: policy Ministry responsible for digital / ICT; regulator Data protection authority; operator National Digital Agency, Sector digital agencies (e.g. Digital Health Agency); funder Ministry of Finance; assurance Data protection authority, Ombudsman / grievance redress
- E-signature & PKI: policy Ministry responsible for digital / ICT; regulator National Digital Agency; operator National Digital Agency, Private sector, vendors & trust service providers; funder Ministry of Finance, Private sector, vendors & trust service providers; assurance National cybersecurity agency / national CERT, Supreme audit institution
- Government cloud & hosting: policy Ministry responsible for digital / ICT; regulator National cybersecurity agency / national CERT, Data protection authority; operator Government data centre / cloud operator; funder Ministry of Finance; assurance National cybersecurity agency / national CERT, Supreme audit institution
- Government portal & service delivery: policy Ministry responsible for digital / ICT, Sector ministries (health, education, social protection…); regulator Data protection authority; operator National Digital Agency, Sector ministries (health, education, social protection…); funder Ministry of Finance; assurance Ombudsman / grievance redress, Internal audit & inspectorates
- Connectivity for public facilities: policy Ministry responsible for digital / ICT; regulator Telecom regulator (incl. universal service fund); operator Private sector, vendors & trust service providers; funder Telecom regulator (incl. universal service fund), Ministry of Finance, Development partners group; assurance Supreme audit institution
Decision rights
- National digital strategy and DPI roadmap
- Laws: DPI, data protection, e-signature, cybersecurity
- Interoperability framework and standards catalogue
- Architecture compliance of a new system or donor project
- DPI budget, including recurrent costs
- Procurement of shared platforms
- Sharing personal data between agencies
- Security baseline and incident response
- Go-live of a sector system (e.g. health)
- Alignment of partner financing to one plan
- Grievances and redress for DPI services
Illustrative countries and data. Independent PiR2-IT tool aligned with the six pillars of health digital transformation used in World Bank Group HNP practice; not an official World Bank Group product.
Digital Health Transformation Navigator — live demo
More in this demo
- Executive dashboard
- Kenya — digital health context
- Document & template library
- Glossary of digital health and project terms
- Document management
- Framework & maturity model
- 1 · Governance & EA
- 2 · DPI & Interoperability
- 3 · Point-of-Care & RHIS
- 4 · Analytics & Decisions
- 5 · Responsible AI & Cyber
- 6 · Capacity & Change
- Maturity assessment
- Roadmap, schedule, gates and governance
- Country portfolio
- Reference IT architecture
- Data flows
- Workflows
- e-Learning
- Implementation in low-income countries
- Vendor education and certification
- Knowledge base (KMS)
- Fraud detection
- Ask the advisor