Technology audits for public-sector organisations
We carry out an IT audit: we review your website and related systems so that you can see where the risks lie, what to fix first, where content management or integrations are getting stuck and what is missing for compliance with public-sector requirements.
When a website or internal tools have been built in stages, it is often no longer clear what works reliably, where technical problems are piling up and what is worth fixing first. A technology audit for a public-sector organisation helps you decide before an upgrade, a procurement or a change of supplier — with clear conclusions that management, the IT coordinator and the procurement team will all understand.
The organisation learns the true state of its IT infrastructure and gets specific actions to improve the website’s speed, security and accessibility.
“Tobalt” is a reliable company that meets its commitments on time and honestly. We have worked together for 5 years and have renewed our website again with their help.
Most common problems
It is not clear which part of the system causes the most trouble
When a website has been managed by several different people or suppliers, many questions remain unanswered: what is already outdated, what works only out of habit, and where work could break down at any moment. Without that picture it is hard to plan the budget, changes or new website development.
Accessibility and compliance errors are noticed too late
Public-sector websites must meet clear requirements, yet in reality barriers for people with disabilities, poorly managed cookies, unclear data collection points or content that does not meet WCAG 2.1 AA often go unnoticed.
It is hard to justify what to fix first
When there are many problems of different kinds, it is hard for IT coordinators and management to agree on priorities. As a result, important decisions are put off and the budget is spent where the risk is not the greatest.
Dependence on the current supplier gets in the way of an objective assessment
If the technical condition is assessed by the same supplier that built or maintains the system, the organisation may lack an independent picture. This is especially important when preparing for a new public tender, taking over a system or assessing whether the current solution still meets your needs.
What we do
Website performance and stability review
We identify what slows the website down, disrupts how it works or worsens the user experience on different devices. The organisation gets a clear picture of which technical causes have the greatest impact on page loading, form functionality and the overall reliability of the system.
Benefit: You will see which performance and stability issues are worth tackling now so that the website is more reliable for residents and staff.
Security and risk assessment
We assess the most common security gaps, access management, outdated components, incorrect settings and other vulnerabilities that may pose a risk to the public website or related systems.
Benefit: You will know clearly where the biggest security gaps are, what needs fixing immediately and what can be scheduled in stages.
Accessibility and usability barrier audit
We check whether the website meets WCAG 2.1 AA requirements and whether the key content and features are accessible to different users. We assess not only technical errors but also real barriers when browsing, filling in forms, searching for information or using a keyboard.
Benefit: You will be able to plan specific fixes that help the website become more accessible and compliant with public-sector requirements.
Review of GDPR, cookies and data processing points
We review where the website collects personal data, how forms work, whether information is clearly provided to users, how cookies are managed and which points may pose a compliance risk.
Benefit: You will see where processes, content or technical solutions need refining to reduce the risk of GDPR and privacy non-compliance.
Assessment of content management, integrations and procurement readiness
We assess whether it is easy for staff to manage content, whether system integrations work reliably, whether the solution is overly dependent on one supplier, and which requirements should be included in a future public tender or technical specification.
Benefit: You will be able to define more clearly what you need from a new or continued solution and prepare for procurement based on the real situation rather than assumptions.
How to get started
Discussing the situation
In a short conversation we find out what IT question you are facing — assessing a supplier, the state of a system, security or something else. This conversation is free.
Independent review
We carry out the analysis — we review quotes, systems or processes. Depending on the scope, this takes from one day to two weeks.
Clear recommendations
You get concrete recommendations with an action plan — what to do, what not to do and why. No technical jargon, in a format that is easy to understand.
Frequently asked questions
What will we receive after the audit, and will it be suitable for management and public procurement?
After the audit we provide a structured package of findings and recommendations: the problems identified, their priorities, an explanation of the risks and suggested next steps. The material is prepared so that both technical staff and management can use it, and, if needed, when preparing procurement requirements or planning an upgrade.
Do you check WCAG 2.1 AA and privacy requirements?
Yes, during the audit we can assess accessibility compliance with WCAG 2.1 AA and also review the main privacy, cookie and personal data processing points on the website. In the findings we clearly mark where we see non-conformities or risks and what action should be taken.
Can the audit be carried out even if another supplier maintains the website?
Yes. The audit can be carried out regardless of who currently maintains your website or systems. This is especially useful when you want an objective assessment of the current state or need to prepare for a change of supplier, a system takeover or a new public tender.
Will the audit affect the live website, and will we need to grant full access?
The audit is usually organised so that it does not disrupt the website’s day-to-day operation. The access needed depends on the scope of the audit: part of the assessment can be done from publicly available information, while deeper analysis may require limited technical access. Before starting we agree on which data and access are essential so that security and internal rules are respected.