TO CONFIRM — draft. The pattern in institutional audits is consistent enough to be worth stating plainly: connectivity is oversubscribed against its contracted figure, there are more systems in use than the ICT department knows about, policy has not caught up with practice, and no one owns the budget line that keeps a platform running in year three.
Where to start instead
Write the roadmap after the baseline, not before it. The assessment is the cheapest part of the programme and the only part that can stop a wrong procurement.