This policy describes the requirements for entities planning digital investments involving payments.
Applicability
Digital investment proposals are assessed against this policy by the DTA through the Digital and ICT investment oversight framework (IOF).
Commonwealth entities are encouraged to apply this policy to all digital investments.
Policy requirements
-
Comply with legislation
An entity must comply with any legislation relevant to its circumstances.
-
Understand alignment to payment archetypes
Payment systems can be grouped into archetypes. Alignment to one of the eight architypes listed in the standard will provide a focal point for identification of previous investment and assessment of solution suitability.
-
Prioritise standardisation and interoperability
Following standard payment methods or taxonomies allows greater performance and interoperability.
-
Ensure security and fraud prevention
Stringent security measures, including encryption, access controls, and monitoring to detect and prevent fraud, are critical to the safeguarding of payments and related data.
-
Set payment timelines and prompt payment standards
Clear timelines for processing payments promotes prompt payment to and by individuals and businesses. Entities may establish procedures for expedited processing of payments in emergency situations, where immediate funds are required, such as during natural disasters.
-
Ensure, and report on, transparency
Transparency in the payment processes, including clear documentation and communication of payment terms and conditions, is critical to build trust and give confidence in payment recipients.
-
Engage stakeholders and consider user experience
Prioritising accessibility, ease of use, and support for multiple payment methods will ensure payment systems are designed with the end-user.
-
Prioritise simplicity, sustainability, scalability, and emerging trends
The developing of long-term strategies for the sustainability and scalability of payments solutions will accommodate future growth and technological advancements. Entities should prioritise the simplification of payment processes, with a defined transition strategy to digital payment platforms.
-
Adhere to reuse principles
Entities must give priority to the adoption of reuseable digital and ICT solutions, patterns, or knowledge, and, where necessary, design new solutions with a focus on future reuse.