Audit by financial control VBS IT project: We change the wheel on the moving car

In the summer of 2026, Switzerland's Federal Department of Defence, Civil Protection and Sports (VBS) finds itself at a critical juncture as it navigates one of its most ambitious digital transformation projects yet. Known as "iTask," this initiative aims to separate the civilian information systems from the sensitive military ones within the department. The project has been under way since 2016, following a significant cyberattack on the state-owned defense company Ruag. This incident prompted the VBS to initiate the process of disentangling its IT infrastructure, a move now entering a particularly delicate phase.

The scale of the undertaking is immense. According to officials, the project is expected to cost around 100 million Swiss francs and is slated for completion by 2032. The VBS describes the effort as one of the largest such undertakings in the federal government’s history regarding information technology. The complexity of the task is underscored by the need to untangle approximately 126 distinct business IT services, some of which must be migrated onto a new digital platform specifically designed for the Swiss Armed Forces. This platform is set to become operational mid-year and will then be populated with these services.

Despite the ambitious goals, the project faces scrutiny from the Federal Audit Office, which recently released a detailed review highlighting several concerns. The audit pointed out that the overall planning of the iTask project was deemed incomplete, with unclear delineations of responsibilities, tasks, and competencies. There were also warnings about potential risks, including the possibility that the VBS might fail to deliver required services on time, or at all, or that they could be delivered in substandard quality. These findings have raised questions about the feasibility and management of the project, especially given the high stakes involved.

In response to the audit, the VBS has acknowledged the recommendations made and is working to implement them step by step. Daniel Keller, head of the Army Staff, expressed confidence in the project's current status, stating that it has reached a high level of maturity in terms of technical implementation. However, he also highlighted the challenges posed by the need for specialized personnel capable of managing the project over such an extended period. The migration of services to the new digital platform presents additional complexities, including technical dependencies and resource availability—some of which remain unknown at present.

To mitigate these risks, the VBS has opted for a phased approach, conducting pilot programs to test aspects of the system before full-scale deployment. These trials aim to identify and address issues early on, reducing the likelihood of major setbacks during the transition. Nevertheless, the path forward remains fraught with uncertainty, as both technological and human factors play crucial roles in the success of the endeavor.

As the project progresses, the focus will likely shift toward ensuring that the new digital platform meets the stringent security requirements necessary for military operations while simultaneously supporting the broader civilian functions of the VBS. The successful separation of these systems is seen as vital not only for enhancing cybersecurity but also for improving efficiency and compliance with regulatory standards. With the clock ticking toward the 2032 deadline, the coming years will be pivotal in determining whether the iTask project can achieve its objectives without compromising national security or public trust.