Dear Australian Taxation Office,

This FOI request relates to the use of business-developed applications (BDAs) within the ATO. By business-developed I mean applications which have been developed by ATO staff or contractors, not including the core systems mentioned in media articles such as ICP and Siebel. This may include for example applications which have been developed in a programming language such as .Net or those which exist within Microsoft Access (or similar) databases.

I request the following documents:

1. A list of all BDAs which are currently in use, or have been used, by ATO staff within the last 12 months.
2. For every BDA, documentation which confirms the BDA, and ATO use of the BDA, conform with all applicable laws, and with ATO information security policy.
3. For each BDA, documentation which confirms suitable risk-assessment processes have been undertaken where documentation in point 2 (above) does not exist.

Please contact me should you require clarification on the above.

Yours faithfully,

Carlotta Devine