1. Management of risks

Gateway is intended to provide Government with visibility, assessment and mitigation strategies for risk across capital, ICT and major recurrent projects.

A GCA framework must set a financial threshold over which it is mandatory for projects to be risk-assessed to determine the applicability and extent of Gateway reviews

The Gateway process is underpinned by risk-based assessments of projects and programs which must include the following appropriately-weighted criteria:

- The total cost of the project or program

- Level of Government priority

- Interface complexity

- Procurement complexity

- Agency capability

- Criticality of the service

The number and application of Gateway reviews is to be determined by the level of risk

High profile / High Risk (HPHR) projects will form 'Tier 1' projects within each framework. These projects will attract the highest level of scrutiny. HPHR projects will normally require all gates with the framework to be completed

Projects or programs can be broken up for the purpose of Gateway reviews if it is beneficial to do so. However, the project or program as a whole should be considered when assessing risk

Projects can be grouped into programs for the purpose of Gateway reviews if it is beneficial to do so

A GCA should reassess the risk rating of a project in the event of a material change in project scope or environment.