MITA Annual Report 2023

Annual

Report 2023

2

Annual Report 2023

TABLE OF CONTENT 01. Chairman's Message

4

02. Board Members

6

03. Chief Executive Officer's Foreword

8

04. Executive Committee

10

05. Corporate Events 2023

12

05.1 The MITA Awards for Excellence 2023 05.2 Launch of MITA's New Strategy 2024 - 2026

06. A Snapshot of Our Achievements

20

06.1 mySocialSecurity App: Transforming Citizen Services 06.2 Malta Leads the Way in EU eGovernment Innovation 2023 06.3 Government Wireless Network Infrastructure - Increased Stability and Security 06.4 Optimising Service Excellence 06.5 Strategic Partnership to Advance Geospatial Capabilities in Malta 06.6 MITA CYBER Breakfast Series 06.7 Driving Digital Innovation: Transformative Projects in Government IT Infrastructure 06.8 MITA's TeamMalta Excels in Single Digital Gateway Projectathon

07. MITA's Preparation for Business Continuity Implementation

30

08. MITA's Commitment to Corporate Social Responsibility: A Year in Review

32

09. Reflecting on MITA's Strategy 2021-2023

34

10. Financial Statements

36

10.1 Programmes, Projects & Services 10.2 Financial Review 10.3 Board Members' Report 10.4 Independent Auditors' Report 10.5 Statement of Profit or Loss and Other Comprehensive Income 10.6 Statement of Financial Position

3

01.

CHAIRMAN'S MESSAGE As we reflect on the achievements of the past year, it is with great pleasure that I share the highlights of MITA's journey during 2023. This annual report provides insights into the pivotal role MITA has played in assisting the Public Administration to modernise and transform.

Throughout 2023, MITA has shown unwavering dedication to advancing Malta's digital landscape.

We have enhanced ICT infrastructure, fortified cybersecurity, and driven digital Government innovation. Our efforts have shaped a resilient, efficient, and citizen-centric digital ecosystem.

I am immensely proud of what we have accomplished.

The milestones we achieved and the successes we celebrated were made possible through the hard work and dedication of our exceptional team. Each highlight in this report is a testament to our commitment to

4

digital excellence. Looking ahead, MITA remains a catalyst for innovation and transformation. Our mission is to drive positive change, ensuring that government services meet the evolving needs of citizens and businesses in the digital age.

I extend my heartfelt gratitude to our employees, whose dedication and hard work have been the cornerstone of our success. Our innovative spirit and relentless pursuit of excellence have propelled us to new heights in the digital landscape. Together, we will continue to embrace new challenges and achieve remarkable milestones in our collective efforts towards a digitally empowered future.

Tony Sultana Chairman

Annual Report 2023

5

02.

BOARD MEMBERS

.

Left to right: Anthony Borg, Joseph Noel Agius, Ing Saviour Baldacchino, Tony Sultana (Chairman), Rossana Piscopo, Dr Aron Mifsud Bonnici (Board Secretary), Dr Helen Borg Muscat.

In 2023, MITA achieved significant milestones, reflecting its commitment to excellence. The success in EU Benchmarking has once again positioned Malta as a leader in digital public services, showcasing the Agency's dedication to high-quality and secure digital solutions.

6

MITA's investment in technology and information security has been pivotal. The Agency has enhanced its cybersecurity measures, ensuring robust protection for Malta's digital infrastructure. This includes the implementation of advanced security controls and the promotion of a culture of cybersecurity awareness.

In the realm of procurement and contract management, MITA has streamlined processes to ensure efficiency and transparency. The Agency has successfully managed contracts and procurement activities, adhering to best practices and regulatory requirements.

Annual Report 2023

MITA has also made significant strides in preparing for the launch of the new ERP solution. This initiative aims to improve operational efficiency by integrating data from various sources, automating processes, and providing real-time information through comprehensive dashboards.

In conclusion, MITA's achievements in 2023 have laid a strong foundation for future growth, ensuring a more connected, secure, and efficient digital future for Malta.

Employee training and well-being have been at the forefront of MITA's strategy. The Agency has implemented comprehensive training programmes and initiatives to promote employee well-being, fostering a positive and inclusive work environment.

7

03.

CHIEF EXECUTIVE OFFICER'S FOREWORD I am pleased to share with you some significant strides we made towards achieving our strategic goals for 2023. As the Agency responsible for providing ICT services and infrastructure, digital solutions and cybersecurity to government, MITA continues to play a key role in the digital transformation of the Maltese Public Administration.

We have enabled public services to be enhanced through improved systems and digitised data, making them more accessible and efficient.

Reflecting on the past year, I am immensely proud of our team's steadfast commitment. Their dedication and expertise have been crucial in driving our success. Our focus on nurturing talent, safeguarding well-being, and fostering growth, has paid dividends, and I am confident that our continued investment in our people will yield even better results.

A key highlight has been our enhanced engagement with clients. By improving feedback mechanisms and promoting transparent

communication, we have tailored our services to better meet their needs, and this has significantly boosted satisfaction levels.

The foundation for our future success lies in our robust core areas - policy, architecture, and technology. We have made substantial updates and investments, positioning us to confidently tackle future challenges. Our agile approach has streamlined processes and increased efficiency within the Agency, fostering greater collaboration.

I am optimistic about what lies ahead for MITA, with our achievements in 2023 affirming our commitment to excellence. As we look forward to 2024 and beyond, we remain dedicated to driving digital transformation and meeting the evolving needs of Public Administration. I am grateful for the support from our Chairman and Board, our Executive Committee, management and employees, and other stakeholders and partners.

I look forward to continuing this journey together. .

Ing Emanuel Darmanin Chief Executive Officer

8

Annual Report 2023

9

04.

Executive Committee In 2023, under the CEO's leadership, the Executive Committee met regularly to guide the Agency in delivering digital solutions for Public Administration. Collaborating with the MITA Board, the Committee focused on enhancing and safeguarding digital assets with advanced technology, ensuring operational resilience. The Agency's dedication led to numerous achievements, setting up another successful year.

Ivan Alessandro Chief Financial Officer​​– Finance & Contracts Department (FCD) The FCD ensures the Agency's long-term financial health, investing in intellectual property, technology, and human resources. It maximises procurement value while complying with Public Procurement Regulations, promoting sustainable financial practices and efficient resource management. .

Ing Ian Bonello Head – Service Management Department (SMD) The SMD integrates advanced IT service management practices, monitoring operations, incident handling, and ensuring seamless IT services. It is organised into units like the Service Call Centre, Workstation Management, and Network Operations Centre, enhancing service delivery and stakeholder collaboration.

Priscilla Bugeja Head – eGovernment Services Department (EGSD) The EGSD enhances the digital government landscape by providing shared eGovernment services, web engineering platforms, document management and corporate solutions, as well as related consultancy services. This ensures the efficient, innovative, and seamless delivery of government services to both citizens and businesses.

Adrian Camilleri Head – Digital Enabling Services Department (DESD) DESD supports the client in areas such as Identity Management, including the creation of a Person Register and the Address Register. It provides consultancy and drives digital transformation services to support the client implement the Digital Europe Programme, focusing on areas such as Digital Identity, the Single Digital Gateway, Digital Wallet, amongst others.

10

Annual Report 2023

Jonathan Cassar CTO & Head - Information Security and Governance Department (ISGD) The ISGD oversees cybersecurity through six units, including the Security Operations Centre, Cyber Threat Intelligence, and Cyber Defence Operations, and is responsible for the National Cyber Security Coordination Centre. The Chief Technology Officer (CTO) focuses on technology direction, enterprise architecture, and data governance, ensuring robust IT infrastructure and strategic innovation.

Robert Galea Head – Infrastructure Services Department​​(ISD) The ISD supports government IT needs by ensuring continuous system operations and overseeing new projects. It is organised into Platform Engineering Services, Network Engineering Services, and Technology Projects, facilitating collaboration and maintaining a robust IT infrastructure.

Jesmond Mizzi Head – Executive Office The Head Executive Office supports the CEO in achieving the Agency's strategic vision and operations, focusing on Human Resources, recruitment, staff management, and PR & Communications for effective information dissemination and stakeholder engagement.

Wayne Lee Valentine Head – Facilities Management Department (FMD) The FMD ensures efficient operation and maintenance of infrastructure, security, and logistics. It manages certification, corporate transport, housekeeping, front office, building services, infrastructure projects, and business continuity, promoting a green environment and supporting organisational efficiency and safety.

Pierre Vella Head – Programme Management Department (PMD) PMD is dedicated to delivering top-tier digital services by leveraging innovative solutions and fostering close collaboration. This approach ensures modern, mission-critical systems that meet evolving government needs and high expectations, positioning PMD as a cohesive, forward-thinking team.

11

05.

Corporate Events 2023 05.1 The MITA Awards for Excellence Celebrating our People, Our Values, and Our Success. A night dedicated to our employees for their hard work, commitment, and dedication, which leads to our Agency's success.

The MITA Values Awards were conferred to six employees who attained the highest voting score for embracing the MITA Values, as follows:

On Thursday 7th September 2023, the Agency hosted the MITA Awards for Excellence. For this annual event, the Board of Directors invited all MITA employees and Ministry CIOs.

· Juan Carlo Attard · Mark Cassar · Veronica Burd · Leeon Francalanza · Owen Scerri · Robert Sultana

The Awards’ night featured speeches by the MITA Chairman and the MITA CEO, and the conferral of several Awards by the Board of Directors. Voting took place prior to the event, introducing a new concept where MITA employees could nominate candidates and teams from amongst their colleagues within the Agency. The employees were then asked to cast their votes for those employees who had gained the highest number of nominations.

12

Individual Values Awards

The MITA Team Awards were conferred to two teams with the highest voting score for teamwork. The teams were the following: National Cyber Security Coordination Centre Team Katia Bonello & Martina Bonanno

Annual Report 2023

WopHop Team (above)

25 Years Recognition

Darren Mizzi, Veronica Burd, Mark Cassar, Emmanuel Pace, Kristian Xuereb, Kyle Leonard Buttigieg,

· Raymond Azzopardi · Jonathan Cassar · David Grech · James Grech · Raymond Muscat Chairman Award

Employees were also recognised for their contribution and years of service to the Agency through the following acknowledgements: 30+ Years Recognition (top image)

The Chairman also conferred the MITA Chairman Award to James Coleiro for his outstanding contribution, work tenure, as well as his involvement in the MITA Cares.

Martin Saliba, Mark Bartolo, Mario Gatt, Lucia Vella, Carmel Mifsud, Elaine St. John, Robert Galea, Paul Galea, Veronica Burd and Valerio Hall (in absentia).

13

14

Annual Report 2023

15

05.2 Launch of MITA’s new Strategy 2024-2026 The new MITA Strategy (2024-2026), titled ‘Leveraging the Power of Digital,’ was launched during an event held on Tuesday 12th December 2023. The Agency’s strategic direction and the associated strategic model were shared with all staff. Following speeches by the MITA Chairman and the MITA Chief Executive Officer, three panels discussed the details of the three overarching domains of the new strategy. This ambitious three-year plan aligns with the EU’s evolving digital landscape and builds upon the previous strategy.

The strategy focuses on digital technologies, cybersecurity, data governance, and cross-border service compatibility. MITA will strengthen its internal capabilities, enhance digital infrastructure, and partner with the government in its digitalisation.

The strategy revolves around three core domains: Strengthening the Agency; Enhancing Digital Infrastructure; and Partnering with Government in the Digitalisation Process. While the first two domains primarily focus on reinforcing MITA's internal capabilities and digital infrastructure, they are essential prerequisites for effectively fulfilling its role as a partner to the government in the digitalisation process.

MITA recognises the critical importance of aligning its resources, processes, technology investments, and data with its strategic objectives. To this end, actions under the domain of Strengthening the Agency will prioritise employee well-being, process improvements, and the utilisation of EU funds.

Enhancing Digital Infrastructure will entail investments in the government's digital backbone, data centre and cloud services, platforms, enabling services, and engaging local and overseas expertise for innovation.

16

As a partner to the government, MITA will implement EU and national digital requirements, provide technical guidance on governance issues, and support the implementation of digital transformation initiatives within the public administration.

Additionally, MITA will focus on stakeholder engagement and client-centricity to enhance service delivery.

Cybersecurity remains a dominant concern, and MITA is committed to continue making progress in

Annual Report 2023

this critical area through constant technological and organisational investments, as well as educational and awareness initiatives.

Beyond the national scale, MITA aims to actively engage with EU and international digital bodies to influence policy and promote national and cross-border interoperability of digital solutions and data. This endeavour requires close collaboration on legal, organisational, and semantic aspects.

As technology advances, MITA sees its role as a driver of digital transformation within the Maltese public administration and as a leading participant in the broader digital ecosystem.

The event wrapped up with a corporate team-building activity that brought together all MITA employees. This initiative aimed to enhance collaboration and provided an opportunity for the team to unwind and connect in a more informal environment.

17

LEVERAGING THE POWER OF DIGITAL

18

Annual Report 2023

The Agency has established 3 Strategic Domains, which will empower the organisation to deliver its vision and support its mission.

Each Domain includes a number of Focus Areas. Each Focus Area carries a strategic objective which in turn leads to a number of action items.

Scan the QR Code MITA Strategy

Scan the QR Code Strategy Launch Video

19

06.

A Snapshot of Our Achievements 06.1 mySocialSecurity App: Transforming Citizen Services

The mySocialSecurity App, developed by MITA for the Ministry for Social Policy and Children’s Rights (MSPC), has been honoured as the Best Digital Solution at the 2023 Public Service Awards. This innovative initiative has revolutionised citizen services by prioritising accessibility, security, and efficiency.

The app offers personalised services and self-service options, empowering citizens to seamlessly manage their details and benefits estimation.

With improved service quality and reduced waiting times, citizens benefit from 24/7 access to social security services. The integration of e-ID authentication enhances security measures, mitigating fraud risks. mySocialSecurity App fosters efficient citizen engagement and promotes a more accessible public service system. Citizens can make informed choices regarding their benefits through datadriven decision-making and a responsive design.

This recognition validates MITA's commitment to excellence in public service. The success of the mySocialSecurity project is attributed to the collaboration of MITA's Social Security Team and the support of the Permanent Secretary, which has driven positive change in citizen well-being and public administration.

20

Annual Report 2023

06.2 Malta Leads the Way in EU eGovernment Innovation 2023 In the ever-evolving digital landscape, governments embrace technology to streamline processes and enhance citizen services. One crucial measure of a nation's digital maturity is the eGovernment Benchmark, conducted by the European Commission.

In the latest edition, Malta emerged as a shining example of effective eGovernment implementation, showcasing remarkable progress and innovation. · Comprehensive Online Services A standout feature of Malta's performance in the eGovernment Benchmark 2023 is its extensive range of online services. Citizens can seamlessly access various government services, from applying for permits to accessing healthcare and educational resources. This comprehensive approach ensures convenience and efficiency, simplifying bureaucratic processes for individuals and businesses. · Efficient Cross-Border Services Another noteworthy aspect of Malta's eGovernment success is its commitment to providing seamless cross-border services within the European Union.

By integrating digital services across borders, Malta facilitates smoother international interactions for citizens and businesses. This interoperability enhances convenience and promotes cooperation and collaboration across EU member states. · User-Centric Design Malta's government websites prioritise user experience, with intuitive interfaces and user-friendly design. Accessibility features are integrated to ensure inclusivity, catering to

individuals of all abilities and technological proficiencies. By focusing on usability and accessibility, Malta ensures that its digital services are accessible and easy to navigate for all citizens. · Robust Cybersecurity Measures In an age where cybersecurity is paramount, Malta demonstrates a solid commitment to safeguarding citizen data. Implementing robust cybersecurity protocols and adherence to EU data protection regulations ensure the privacy and security of user information. This instils trust and confidence among citizens, essential for the widespread adoption of eGovernment services. · Citizen Engagement Beyond providing digital services, Malta actively engages citizens in policymaking through online consultation platforms and interactive tools.

This inclusive approach empowers citizens to contribute to decision-making, fostering transparency, accountability, and democratic participation.

By involving citizens in governance, Malta strengthens the bond between the government and the people it serves.

Malta's success in the eGovernment Benchmark 2023 is a testament to its commitment to digital transformation and citizen-centric governance.

However, this is a continuous journey. As technology continues evolving and citizen expectations evolve with it, Malta must remain agile and proactive in adapting its eGovernment strategies to meet emerging challenges and opportunities.

21

06.3 Government Wireless Network Infrastructure Increased Stability and Security

MITA has embarked on a transformative journey to modernise wireless network connectivity across all government departments and entities.

This framework, accessible to all Government CIO Offices, leverages economies of scale to offer advantageous prices for wireless connectivity provisioning.

The demand for a stable wireless infrastructure has surged in recent years as more devices transition from wired to wireless connectivity.

MITA recognised this growing need and designed and implemented a new wireless infrastructure using cutting-edge enterprise-grade equipment deployed within its data centres and government remote offices.

The wireless equipment available through this framework supports the latest technologies, delivering enhanced performance, coverage, and security compared to previous infrastructure.

MITA prioritises security, ensuring a secure wireless network environment, which is particularly crucial for accessing governmentrelated critical data or confidential applications.

To streamline procurement and ensure cost-effectiveness, MITA published a wireless procurement framework enabling centralised purchasing of wireless and network access control solutions.

The new setup introduces an efficient commissioning process, with procured wireless equipment delivered directly to client sites for configuration and installation. Centralised infrastructure enables better management,

22

Annual Report 2023

troubleshooting, maintenance, and system monitoring by offering improved visibility into network health status.

Investments in a new Network Access Control (NAC) solution further strengthens network security, supporting the latest authentication mechanisms across wired and wireless equipment.

The NAC tool offers detailed reporting, integration with cloud services, and enhanced authentication processes, contributing to a more secure wireless environment.

MITA can commission wireless services more efficiently and implement robust authentication processes with the new NAC tool. Dynamic authorisation and device profiling enhance flexibility and security posture, while detailed device authentication visibility facilitates quicker issue resolution.

MITA's efforts signify a commitment to strengthening government wireless infrastructure, ensuring network operations stability, security, and efficiency. By leveraging cutting-edge technology and streamlined procurement processes, MITA continues to advance its mission of modernising government IT infrastructure for the benefit of all stakeholders.

23

06.4 Optimising Service Excellence In the realm of technological infrastructure management, efficiency, reliability, and round-the-clock availability are paramount.

MITA exemplifies these principles through its Network Operations Centre (NOC), an essential hub ensuring seamless operations across various domains. Operating on a 24x7 basis, MITA's NOC played a pivotal role in 2023, handling approximately 18,000 incidents with remarkable expertise.

24

Annual Report 2023

NOC's Dynamic Contributions

Customer-Centric Approach

Among its responsibilities, NOC actively participated in the second phase of the Mater Dei Data Centre renovation project, coordinating the relocation of around 100 servers with minimal downtime. This achievement highlighted MITA's commitment to infrastructure strength and continuity. Moreover, NOC introduced innovative monitoring services such as "Azure Cloud Cost Monitoring and Reporting", to increase operational visibility and proactive issue resolution.

MITA's dedication to service excellence extends beyond technical proficiency; it involves a keen focus on customer satisfaction. Upon closure of service requests, MITA initiates a customer feedback survey, gathering invaluable insights. In 2023, approximately 7,600 responses were received, with an overwhelming 93% expressing satisfaction.

This feedback mechanism affirms MITA's efficacy and also catalyses continuous improvement initiatives, with over 100 Minor Improvement records actioned based on customer feedback.

Service Operations Expertise

Technological Enhancements

MITA's operational expertise in Service Management has safeguarded service availability by efficiently resolving incidents. Noteworthy achievements in 2023 include handling over 60,000 calls at the MITA Call Centre, with 90% answered within 60 seconds. Additionally, MITA’s adeptness was evident in resolving 70% of the nearly 170,000 incidents and requests logged without escalating to second line support. with 90% answered within 60 seconds. Additionally, MITA’s adeptness was evident in resolving 70% of the nearly 170,000 incidents and requests logged without escalating to second line support.

Over 7,500 workstations were upgraded to Windows 11, improving security features, enhanced performance, and a more user-friendly interface.

Additionally, migrating the Request for Service (RFS) system to VMware has provided architectural improvements that ensure optimal performance, scalability, and flexibility. These upgrades underscore MITA's commitment to modernisation and responsiveness to evolving technological needs.

25

06.5 Strategic Partnership to Advance Geospatial Capabilities in Malta On Thursday, 9th February 2023, MITA and Esri signed an Enterprise Agreement, marking a significant advancement in the government's geographic information system (GIS) capabilities.

This multi-million-euro project, funded centrally by the government over three years, will provide Esri software, professional services, and technical support to twenty-three entities, including Ministries and Agencies across the Maltese Government.

geospatial capabilities, enabling them to provide better services to citizens and businesses.

The Enterprise Agreement aims to centralise coordination in GIS technologies, licenses, and services, enabling flexible access to the latest Esri technology. MITA expressed enthusiasm about the collaboration, emphasising its strategic importance in leveraging Esri's expertise to empower the government's geospatial initiatives.

During the conference, MITA shared insights into the vision for GIS technology, while highlighting success stories from local entities. These showcased how GIS technology is applied to strengthen harmonisation, manage national base maps, monitor heritage features, and support environmental-focused asset management.

The agreement seeks to unify government agencies onto a common platform, facilitating data sharing, multi-agency decision-making, and community engagement. Ministries, such as Health and Gozo, along with Government agencies like the Planning Authority and Transport Malta, benefit from enhanced

Moving forward, MITA, alongside national GIS stakeholders and Esri, will continue strengthening the local GIS community and identify new opportunities to leverage this transformative technology. By delivering higher-quality public services to citizens and businesses, MITA aims to support the government in enhancing the overall well-being of Malta's residents.

26

In addition to the Enterprise Agreement, MITA and Esri hosted a User Conference in February 2023 to promote the Government's position in geospatial technology and services. Attendees had the opportunity to learn about the latest software, tools, and techniques for spatial analysis, mapping, and data visualisation.

Annual Report 2023

06.6 MITA CYBER Breakfast Series The fifth edition of the CYBER Breakfast event series marked the end of a successful year for MITA’s National Cybersecurity Coordination Centre (NCC).

This event provided a comprehensive overview of the past year’s achievements and outlined future objectives.

The primary aim of the National Cybersecurity Community is to safeguard the Maltese and EU cyberspace by consolidating knowledge and experience while promoting active participation in research and educational programs.

The National Cybersecurity Community organised several successful events throughout the year, concluding in this final gathering. Four key objectives were established for the upcoming term: • Increase participation within the National Community • Expand awareness and outreach beyond the Community • Address skills gaps within and outside of the Community • Establish Coordinated Vulnerability Disclosure (CVD) at a National Level.

To achieve these objectives, efforts will focus on increasing awareness, encouraging participation, and facilitating responsible vulnerability disclosures.

The importance of cybersecurity education, particularly among younger generations, was highlighted.

CVD ensures that vulnerabilities are disclosed responsibly. The Community aims to implement a system for disclosing vulnerabilities safely.

The Community, comprising individuals and entities specialising in Security Management & Operations, signed memorandums of understanding with organisations to enhance collaboration. During the event, participants discussed action plans, key performance indicators (KPIs), and challenges related to each objective. Notable discussions emphasised the need for government-enforced cybersecurity standards and efforts to make the cybersecurity sector more attractive to younger generations.

In support of cybersecurity initiatives, schemes such as the CYBER+ALT Grant Scheme and the Cyber Assess Scheme aim to assist local entities and businesses adopt cybersecurity solutions.

As the cybersecurity landscape continues to evolve, the upcoming year is set to advance knowledge and implementation efforts to safeguard digital environments effectively.

27

06.7 Driving Digital Innovation: Transformative Projects in Government IT Infrastructure In a world of constant change in government IT, transformative projects are driving innovation and reshaping the digital infrastructure to better serve citizens and governmental operations.

One such project entailed the overhaul of the Malta Government Network (MAGNET), a critical digital backbone supporting governmental operations. This comprehensive update focused on bolstering bandwidth capacity and upgrading essential equipment to optimise user experiences and minimise latency.

Meticulous planning and extensive testing were crucial to reducing downtime during updates to a mere five minutes, ensuring uninterrupted service. By standardising operations across various sites, troubleshooting was streamlined and user connectivity was significantly improved.

Addressing the increasing concern of cybersecurity, robust encryption protocols were implemented to safeguard communications and fortify security measures for internet-linked devices. Collaboration between key stakeholders, including the Security Operations Centre, ensured continuous vigilance against emerging threats, safeguarding sensitive data and government operations. Advanced authentication protocols further reinforced security, which is particularly crucial amidst the increased remote access.

Another noteworthy endeavour focused on the Mater Dei Hospital Technology Refresh, aimed at enhancing network infrastructure to accommodate anticipated digital health developments. This project necessitated meticulous coordination and planning due to the hospital's critical 24/7 service environment, exemplifying the commitment to supporting

28

essential services.

Despite the diverse nature of these projects, a collaborative approach was paramount, leveraging crossfunctional expertise to deliver comprehensive solutions.

Projects were managed with a focus on innovation and professional development, ensuring that IT professionals remain adept at implementing the latest technologies and methodologies.

Moreover, these initiatives extend beyond the realm of technical expertise, fostering a work environment conducive to productivity, collaboration, and continual growth. By actively supporting national events and broader government objectives, these projects exemplify the integral role of government IT infrastructure in driving digital innovation and serving the needs of citizens.

These transformative projects underscore the commitment to excellence and collaboration within government IT infrastructure, driving continual improvement and innovation to meet the evolving demands of the digital age.

Annual Report 2023

06.8 MITA's TeamMalta Excels in Single Digital Gateway Projectathon MITA, in collaboration with the Ministry for the Economy, European Funds, and Lands, has been actively involved in implementing the Single Digital Gateway Regulation in Malta over recent years. This initiative aims to streamline digital processes and foster collaboration among Member States within the European Union.

Recently, TeamMalta, comprised of software engineers from MITA's Digital Enabling Services Department, achieved third place in the third Single Digital Gateway Projectathon held in Brussels from October 18th to 20th 2023. The team's dedication and perseverance were evident throughout the event, as they tackled various test cases and contributed significantly to the overall testing process.

The Projectathon, designed as a marathon of interoperability and compliance tests, sought to foster friendly competition among Member States while encouraging collaboration and

innovation. The event highlighted the practical applications of the Single Digital Gateway Regulation by simulating real-life data exchanges between Member States.

TeamMalta's strategic approach and technical expertise were key to their success in the Projectathon. They dominated testing from the start, showing a wellrounded approach. Despite facing connectivity issues and challenges in interpreting test cases, the team persevered and emerged with valuable lessons learned and new relationships forged.

The Single Digital Gateway Once-Only Technical System exemplifies European innovation by removing obstacles and facilitating seamless interactions across European administrations. MITA's involvement in this project underscores our commitment to enabling digital transformation in the public service sector.

Looking ahead, MITA will focus on setting the OnceOnly Technical System in production and assisting the government in leveraging this infrastructure to develop new cross-border eGovernment services. Additionally, MITA will continue to nurture relationships formed during the Projectathon and prepare for future events, reflecting our dedication to driving innovation and collaboration in the digital landscape.

Overall, TeamMalta's success in the Single Digital Gateway Projectathon not only highlights our technical excellence but also underscores MITA's role as a leader in advancing digital initiatives in Malta and beyond.

Exciting times lie ahead as MITA continues to spearhead digital transformation efforts and embrace new opportunities for innovation and collaboration.

29

07.

MITA’s Preparation for Business Continuity Implementation MITA is aligning its operational strategies to strengthen its business continuity function by aligning towards a structured approach in line with the ISO 22301 Business Continuity Standard.

This is an essential step forward to further improve the resilience and reliability of our ICT services. This is also in line with the upcoming NIS2 Directive which is mandated at both national and EU levels.

30

Annual Report 2023

ISO Understanding ISO 22301 In addressing the way forward for the Agency’s Business Continuity Framework, MITA undertook an extensive exercise to thoroughly understand the ISO 22301 standard and its associated guidelines. This exercise entailed detailed assessment of the ISO standard focusing on business impact analysis (BIA), risk assessments, the development of comprehensive business continuity plans (BCPs) and the establishment of a testing and exercising programme.

Conducting a Gap Analysis and Business Continuity Industry Best Further to the ISO 22301 understanding exercise, a gap analysis has been carried out to align MITA’s current business continuity practices with the requirements of the ISO 22301 standard.

In addition, to the ISO 22301 standard, MITA examined industry best practices and adopted feasible practices in its Business Continuity Framework.

Engaging Stakeholders

Business Impact Analysis

MITA is actively engaging all relevant internal stakeholders, including senior management and respective activity owners. Workshops and training sessions were conducted to instil awareness.

A comprehensive BIA was carried out across all MITA departments to document all activities, assess the priority of each activity against predefined criteria and determine the prioritised activities of the Agency.

This involvement is pivotal for successful implementation of the Business Continuity Framework across the Agency.

Through the BIA exercise, MITA has established a formal list of Prioritised Activities covering systems, people and processes. This is of utmost importance to ensure Organisational Resilience.

Moving forward in 2024, MITA is actively working on setting up a Business Continuity Framework which will target several milestones including: • Risk Assessments covering corporate threats and specific scenarios for the respective prioritised activities.

• Developing the Business Continuity Plan for each prioritised activity • Devise an Exercise and Testing programme to ensure business continuity tests are formally scheduled, executed and documented.

31

08.

MITA's Commitment to Corporate Social Responsibility: A Year in Review

Committed to fostering positive change, MITA, through its MITA Cares Committee, has consistently demonstrated its dedication to societal well-being, with employees actively participating in various initiatives throughout the year.

Financed through internal employee donations, MITA Cares operates as a committee within the organisation. These contributions drive numerous achievements, from organised events to the distribution of donations.

Throughout the year, the MITA Cares Committee participated in three charitable fundraising telethons. Dedicated MITA employees volunteered to help manage the pledging process, including responding to telephone calls and scheduling the collection of pledges. Regularly, MITA Cares organised “Blood Donation Drives,” where employees opted to donate blood.

32

The committee initiated the collection of groceries and toiletries from MITA employees, delivering them to local food banks to support families in need.

Quarterly initiatives included providing other NGOs with a one-off supply of groceries and toiletries. MITA Cares also supported NGOs by promoting the sale of their items internally, including seasonal goods for fundraising purposes.

MITA Cares furthered its impact by collecting and donating used laptops and tablets to children from economically challenged families, ensuring their continued education at home.

Through sponsorships and collaborations with NGOs, MITA’s financial support created lasting memories for children through group outings and provided critical assistance to families and individuals in need.

Annual Report 2023

In August 2023, MITA’s refurbishment and upgrade of the computer network at Puttinu apartments in Sutton significantly enhanced the browsing experience for patients. This upgrade also enabled family members to continue their work commitments through remote working and helped them maintain better contact with relatives and friends.

Environmental initiatives saw contributions to two projects involving purchasing and planting trees in local communities. The committee’s commitment extended to collecting and donating toys and clothes to a children’s home, bringing joy to young residents. Additionally, MITA Cares supported the travel needs of non-profit organisations, facilitating face-to-face support for patients abroad and contributing to meaningful healthcare initiatives.

MITA Cares remained steadfast in its mission to uplift those in need within society. Looking ahead, the committee aimed to broaden its reach, extending a helping hand to more vulnerable groups and providing assistance wherever possible. As MITA continued to prioritise Corporate Social Responsibility, the positive impact on communities and individuals was set to grow in the years to come.

33

09.

Reflecting on MITA's Strategy 2021-2023

support, maximising the potential of its employees and investments while ensuring risk analysis, data protection, and accountability.

MITA successfully concluded its 2021-2023 strategy, achieving significant milestones under the vision of “Committed to a Digital Future.”

The vision served as a key inspirational driver for MITA’s employees and stakeholders, emphasising digital innovation and future challenges to fulfil its mission of providing technology direction and implementing digital solutions for the government.

MITA’s strategy was grounded in its core values: People, Empowerment, Continuous Improvement, Client Focus, and Professionalism. These values guided the organisation in all its endeavours. The strategic drivers emphasised MITA’s responsibility to lead, communicate, delegate, and support technological implementations. MITA fostered innovative concepts requiring commitment and

34

Key achievements included the upkeep of the government’s digital infrastructure, the application of digital technologies, and the modernisation of shared platforms and vertical information systems. MITA provided digital architecture frameworks and assisted the government in conceptualising digital policies and strategies. The Agency also emphasised the importance of trust in government services and remained committed to safeguarding digital assets and contributing to national cybersecurity.

MITA excelled in client relations and internal improvements, promoting ICT consultancies and assisting clients in their digital agendas. The strategy also highlighted the need for continuous service improvement through better processes and tools.

People management was a central focus, recognising that employees are crucial to MITA’s achievements.

The success of the strategy relied on our team's dedication and hard work.

The MITA Board of Directors owned the strategy, with the Executive Committee spearheading its implementation.

Annual Report 2023

35

10.

Financial Statments The board members of the Agency present their annual report and the audited financial statements for the year ended 31 December 2023.

Board Members

Board Secretary

Mr Tony Sultana - Chairman Mr Joseph Noel Agius Ing. Saviour Baldacchino Mr Anthony Borg Dr Helen Borg Muscat Ms Rossana Piscopo (resigned on 18th July 2024)

Dr Aaron Mifsud Bonnici (resigned 7th August 2023) Mr Brian Micallef (appointed 25th October 2023)

36

Registered Address Gattard House National Road Blata l-Bajda HMR 9010 Malta

Annual Report 2023

Overview Malta Information Technology Agency (MITA) is the public entity vested with the responsibility to provide ICT infrastructure, systems and services to Government that leverage a modern digital ecosystem and contribute towards the definition and execution of the Government’s digital strategies that sustain a modern digital economy.

MITA, through the direction of the Office of the Prime Minister, collaborates with the Office of the Principal Permanent Secretary and Ministry CIOs to attain its mandated strategies and assigned projects.

The Agency is dedicated in assisting the Government in transforming technological innovations into real business solutions. Its unique approach combines an innovative array of ICT and project management services with focused delivery capabilities using tried and tested methodologies to help fulfil Government’s strategies and projects and maximise the benefits of investment in technology.

ICT Services to Government Throughout 2023, the provision of ICT Services to Government detailed by means of a contractual agreements between MITA and the Office of the Prime Minister, as well as specifically with the various Government Ministries and Entities, continued to provide the basis for the provision of the core ICT infrastructure to Government.

37

10.1 Programmes, Projects & Services

Azure Stack Hub Migration project

MITA is leading the migration of all workloads from three Azure Stack Hubs and Azure Subscriptions as part of an exit strategy before the contract ends in December 2025. Begun in 2023, this complex project involves migrating numerous applications, with 95% belonging to clients, requiring extensive coordination. Migrations from Stack 1 are on track for completion

by March 2024, followed by Stack 2 and Stack 3 which are to be completed by December 2025.

38

Annual Report 2023

Improved security posture on Aruba wireless equipment across MAGNET

Support for the National Events

Integrated and onboarded of Steward Hospitals infrastructure & IT systems

MITA configured Aruba wireless equipment to isolate noncorporate devices connecting to MAGNET onto a 'quarantined' network with minimal access, mainly to the Internet. This complex project, completed over most of 2023, aimed to protect MAGNET and its resources from unsecured devices. The effort significantly improved MITA's and the government's security posture.

In 2024, this configuration will be extended to address also some Cisco wireless devices.

MITA delivered network, security, and workstation support for several national events, including the Public Service Expo, Games of the Small States of Europe, Med9 Summit, and Ukraine Peace Formula Summit. These events demanded meticulous planning to ensure network uptime, resilience, and security. Often spread across multiple sites and days, they required extensive onsite coverage.

In early Q2 2023, the Health CIO engaged MITA to assist in migrating all IT systems from Steward Malta to the Government of Malta. The migration had to be completed quickly to ensure uninterrupted healthcare services for patients. This project was challenging, requiring a thorough understanding of the existing systems and meticulous planning for the migration of IT systems, applications, and data.

Thanks to the excellent teamwork between MITA, the Health CIO Office, and Steward Malta IT resources, the project was successfully completed on time.

39

Decommissioning of the Enterprise SharePoint Collaboration

Corporate Electronic Document Management System (CeDMS)

WordPress Hosting Platform

MITA provided a SharePoint collaboration platform for government entities to host intranet activities such as document management, sharing, and workflows tailored to internal business needs.

Based on SharePoint 2013, it included features like auditing, corporate authentication, search, document management, workflows, and web content management. With Microsoft’s end-of-life deadlines, MITA launched an internal project to support CIOs in migrating these sites to SharePoint Online. By March 2023, all collaboration sites were successfully migrated.

Although the websites have been decommissioned, the collaboration environment remains active due to dependencies within the ECMS platform.

MITA continued to provide consultancy to the Public Service on the implementation of a paperless environment through an electronic document management system. By Q2 2023, MITA finalised a tender for this system. On August 30, 2023, an open call was issued for procuring an electronic document repository and workflow management solution to replace the paper Public Service File.

The tender includes two pilot implementations to demonstrate the solution's applicability and plans for broader adoption. Tender bids were opened in November, and MITA began evaluating and adjudicating the submissions.

The virtual team overseeing the WordPress Hosting Platform (WoPHoP) collaborated effectively with the Government of Malta to deliver 26 Ministry and Parliamentary Secretary portals within a tight 21-day window for the 2023 Public Service EXPO. Despite maintaining full support for the web hosting platform, including ongoing operations, the team achieved a unified set of portals. This effort introduced a standardised UI across all Government portals, simplifying back-office administration and improving citizen user experience.

Recognised with the "Best Virtual Team of the Year" award, the initiative showcased MITA's commitment to excellence and teamwork across multiple departments.

40

Annual Report 2023

Notifications Platform

Client Assessment Framework

Cyber Root

MITA undertook a substantial initiative to revamp the Notifications Platform, collaborating closely with our supplier. This strategic technology refresh leveraged Azure Public Cloud Technologies, aimed at accommodating an anticipated surge in public notification usage. Comprehensive capacity planning ensured the infrastructure’s readiness for future growth. Remarkably, this effort resulted in a significant cost reduction, equivalent to 50% of previous years’ expenses. This demonstrates our commitment to efficiency and cost-conscious responsibilities.

MITA has implemented a framework to consolidate five essential cybersecurity services for the Government of Malta.

These services encompass Penetration Testing, Vulnerability Assessments, Risk Management & Assessments, Security Architecture Assessments, and Audit & Reviews.

The primary objective is to identify security weaknesses and vulnerabilities that could impact government services. By leveraging this framework, MITA actively supports public administration in safeguarding and maintaining their solutions against cybersecurity threats.

MITA hosted the 5th edition of Cyber Root, Malta’s premier cybersecurity conference and expo. Distinguished international and national speakers delved into critical cybersecurity topics, including governance, regulations, strategies, incident response, threat intelligence, social engineering, and insider threats.

Attendees explored the expo area, engaging with global and local cybersecurity vendors who showcased cutting-edge services and solutions, contributing to more resilient infrastructures.

41

Dynamic Application Security Testing

CTI Programme

Email Service

MITA proactively safeguarded its infrastructure by deploying a Dynamic Application Security Testing (DAST) tool. This automated solution assesses web applications by simulating real-world traffic and requests, identifying security vulnerabilities.

By analysing application responses, MITA can promptly address these weaknesses, fortifying overall security. Consequently, this proactive approach shields the organisation from reputational damage, data breaches, and financial losses.

MITA, through its Cyber Threat Intelligence function, launched the Cyber Threat Intelligence Community Programme for both the Public Administration and the private sector. This initiative aims to foster collaboration by sharing reliable intelligence from international and local sources among participating stakeholders.

The program proactively safeguards infrastructures by encouraging collaboration and exchanging potential indicators.

Ultimately, it contributes to a culture of sharing, protecting the Maltese cyberspace and extending beyond.

MITA finalised an update to the GMICT Email Policy, enhancing the document to support day-to-day decision-making and further safeguard the service.

Additionally, MITA introduced a client option to migrate mailboxes from on-premises (hosted within MITA) to the cloud (hosted at Microsoft), enabling seamless integration with other Microsoft services.

This migration process was streamlined through the Request for Service Portal. Simultaneously, MITA improved on-premises infrastructure by replacing the backup management utility, resulting in faster and more efficient mailbox restore procedures.

42

Annual Report 2023

Service Catalogue and Service Dashboard

eID Migration to Azure Consolidation

Revision of the eIDAS Regulation

MITA has recently revamped the Service Catalogue and Service Descriptions, enhancing readability and intuitiveness. The new structure, accessible via the CIO portal, facilitates seamless navigation through MITA’s diverse service offerings, making it easier for clients to find essential information. Additionally, the creation of the Service Dashboard enhances the customer experience by displaying service health for critical services. This dashboard provides clarity on whether an issue is localised or widespread, increasing visibility and fostering better communication with clients.

MITA achieved significant milestones in enhancing the eID solution. After migrating to Azure in December 2022, MITA focused on post-implementation tasks and decommissioning the previous environment. The collaboration with the NOC was invaluable.

Additionally, MITA developed a robust service management framework, including an operational manual and detailed operations calendar. Monthly system checks ensured effective governance, while risk assessments, failover testing, and backup test restores contributed to excellence.

The framework underwent an internal review and received commendations from the auditor.

MITA played a crucial role in the eIDAS expert group, which focused on revising the eIDAS Regulation to introduce the European Digital Wallet. This innovative wallet aims to transform authentication for eGovernment, private, and crossborder services, as well as digital signatures. MITA actively engaged in discussions, shaping Malta’s positions and advocating for a 24-month implementation period after the Implementing Acts. Late in the year, a preliminary agreement was reached on the latest draft of the Regulation, with Parliament scheduled to vote on it in Q1 2024.

If approved, Member States will have until around 2026 to implement this transformative digital wallet.

43

Person Register

Health Programme

Police and VISA systems Programme

In 2023, MITA prioritised the modernisation of the Person Register and ensured GDPR compliance by updating its architecture and data handling processes. Key enhancements included the integration of Azure authentication and role-based access control to bolster security.

The system now employs a common dataset API to replace older methods of accessing person data, providing endpoints for core and extended attributes.

In addition, a subscription-based service using Azure Service Bus was introduced for data updates. The roll-out plan featured comprehensive training and technical workshops, with substantial progress made towards the goal of completing the pilot exercise within the year.

In 2023, the MITA Health Programme achieved remarkable milestones. First, it successfully migrated the myHealth front-end and Admin portal to Azure, enhancing security and efficiency. Additionally, the deployment of parent-guardian authorisation allows access to parent-guardian to the health records of their minor children.

Notably, doctors gained immediate online access to link with patients, streamlining consultations.

Furthermore, the launch of Images and ECGs in myHealth significantly enhanced the doctor’s diagnosis as well as treatment. Lastly, the introduction of chatbot functionality optimised user engagement and assistance, marking a year of technological advancement and improved healthcare accessibility.

The Police National and Border control systems underwent crucial upgrades to align with the latest evolutions of the Schengen Information System (SiSRecast+).

These enhancements included preventive alerts to protect vulnerable individuals and deter irregular migration. Additionally, the Police Incident Reporting System was refined to comply with recommendations from the Schengen Evaluation and Monitoring mechanism (SCHEVAL - EU Commission). Furthermore, Malta implemented an extended service for National Long Stay VISA applicants, allowing those from high-volume countries to opt for an accelerated procedure with a different fee regime. Notably, the VISA system established a Data Retention Policy for N-VIS and successfully implemented offline database shipping for various event log data in accordance with this policy.

44

Annual Report 2023

Customs & SRE Programme

Social Security Programme

Taxation Programme

The Customs & SRE Programme team successfully designed and implemented the SAS cloud infrastructure, including a new data warehouse for MFIN to support the AI in taxation project.

DevOps practices were streamlined, integrating with HVPG, Line of Business, and enabling containerisation principles across PMD. Additionally, the UCC underwent modernisation and updating in alignment with European Commission Customs legislation.

Notably, 65% of the Customs footprint was modernised, reflecting substantial progress in enhancing operational efficiency and security.

Throughout 2023, MITA continued with the modernisation of the SABS suite of applications by implementing a serviceoriented architecture on a cloud-based infrastructure, thus achieving enhanced scalability, efficiency, and future-readiness.

Additionally, MITA conducted the necessary enhancements to implement the budget measures related to social policy, including pensions, for 2024. Notably, the Welfare Systems have been transitioned to fall under the direct responsibility of the Ministry.

MTCA launched its 3-year strategy, emphasising AI-enabled projects led by PMD. Notably, PMD spearheaded the implementation of SAS Advanced Analytics and AI Suite, with the first deployment suite of reports launch by end of 2023. Additionally, the footprint supporting the tax return cycle for individual taxpayers underwent modernisation. Remarkably, 25% of the taxation footprint was modernised, including new implementations that facilitated international data exchanges.

45

Funding Programme

Enterprise Risk Management

MITA finalised the 2014-2020 programme period, ensuring successful project completion.

Additionally, the 2021- 2027 new programming period was launched, setting the stage for future initiatives. Notably, all databases were migrated to PaaS 04, enhancing scalability and efficiency, while the web server also underwent successful migration.

In 2023, the Enterprise Risk Management (ERM) function at MITA achieved significant milestones. Responsible for governing the ERM Framework within the Agency, it ensured compliance with international standards. Under the ERM framework, risk owners across the Agency identified and logged risks in the Risk Register System (RRS), relevant to their processes, projects, and services.

46

These risks were diligently monitored, updated, and managed in line with the Agency’s risk appetite. Regular ERM Committee meetings facilitated discussions, reviews, and monitoring of material risks. The MITA Risk Register System (RRS) received regular functionality updates, maintaining a robust foundation for recording and managing MITA risks. New employees received induction sessions on risk management concepts and MITA’s ERM framework, while focused ERM training benefited a substantial number of MITA staff.

Notably, the ERM function initiated a new effort related to Third Party Risk Management.

Annual Report 2023

Internal Audit Office

Achieving Corporate Governance

The internal audit function is set to ensure an independent, disciplined approach to evaluate and improve the Agency’s controls and add value to MITA operations. The annual IAO Risk-based Audit plan is devised from the IAO Strategic plan and approved by the Board Audit Committee (BAC) before its implementation. The plan is materialised through the verification of key risks at both strategic and operational levels. Improvements are made to add value and ensure sound internal controls are sustained across the Agency. Together with ISG Chief, IAO is also responsible for liaising with external auditing bodies, government departments and entities to facilitate through a defined process, received external information requests.

IAO and ERM continuously to collaborate in contributing to the identification of risks that MITA may be exposed, to put forward recommendations on effective controls to mitigate highlighted risks.

IAO maintains four main principles as part of its code of ethics, being, Integrity, Objectivity, Confidentiality and Competency. This is done in compliance with the Institute of Internal Auditors (IIA) International Standards. The BAC plays a key role in assisting the MITA board in fulfilling its oversight responsibilities in internal controls systems, risk management systems and the internal and external audit functions whilst ensuring the objective assessment of the Agency’s performance and its management. The MITA Internal Audit Office reports to the BAC, enabling independence and structural separation from management to enhance objectivity.

47

10.2 Financial Review The overall financial performance of the Agency for 2023 shows a net surplus before tax of €748,718 (2022: €720,043).

Revenue from the provision of projects and ICT services to Government reached €47,762,045 (2022: €39,976,697), up by 19% from 2022 results.

48

Annual Report 2023

10.3 Board Members' Report Statement of board members' responsabilities

The Agency's statute requires the board members to prepare financial statements for each financial year which give a true and fair view of the state of the affairs and profit or loss of the Agency for that year, in accordance with the requirements of International Financial Reporting Standards as adopted by the European Union.

In preparing these, the board members are responsible for: • adopting the going concern basis unless it is inappropriate to presume that the Agency will continue in business; • selecting suitable accounting policies and applying them consistently; • making judgements and estimates that are reasonable and prudent; • accounting for income and charges relating to the accounting period on the accruals basis; • valuing separately the components of asset and liability items; and • reporting comparative figures corresponding to those of the preceding accounting period.

The board members are responsible for keeping proper accounting records which disclose with reasonable accuracy, at any time, the financial position of the Agency. They are also responsible for safeguarding the assets of the Agency and hence for taking reasonable steps for the prevention and detection of fraud and other irregularities.

Auditor RSM Malta, Registered Auditor, have expressed their willingness to continue in office and a resolution for their reappointment will be proposed at the Board Meeting.

This report was approved and authorised for issue by the Board Members on 17 December 2024, and signed on their behalf by:

Mr Tony Sultana Chairman

Mr Anthony Borg Board Member

49

10.4 Independent Auditors' Report To the Members of Malta Information Technology Agency Report on the Audit of the Financial Statements Opinion We have audited the accompanying financial statements of Malta Information Technology Agency ("the Agency"), which comprise the statement of financial position as at 31 December 2023, the statement of profit or loss and other comprehensive income, statement of changes in accumulated fund and statement of cash flows for the year then ended, and notes to the financial statements, including a summary of material accounting policy information.

In our opinion, the financial statements give a true and fair view of the financial position of the Agency as at 31 December 2023, and of its financial performance and its cash flows for the year then ended in accordance with International Financial Reporting Standards (IFRS Accounting Standards) as adopted by the European Union (EU).

Basis for Opinion We conducted our audit in accordance with International Standards on Auditing (ISAs). Our responsibilities under those standards are further described in the Auditor's Responsibilities for the Audit of the Financial Statements section of our report.

We are independent of the Agency in accordance with the ethical requirements of both the International Ethics Standards Board for Accountants’ International Code of Ethics for Professional Accountants (including International Independence Standards) (IESBA Code) and the Accountancy Profession (Code of Ethics for Warrant Holders) Directive issued in terms of the Accountancy Profession Act (Cap. 281) in Malta that are relevant to our audit of the financial statements, and we have fulfilled our other ethical responsibilities in accordance with the IESBA Code and the Code of Ethics for Warrant Holders in Malta. We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our opinion.

Other information The board members are responsible for the other information. The other information comprises the board members' report, but does not include the financial statements and our auditor's report thereon. Our opinion on the financial statements does not cover the other information, and we do not express any form of assurance conclusion thereon.

In connection with our audit of the financial statements, our responsibility is to read the other information identified above and, in doing so, consider whether the other information is materially inconsistent with the financial statements or our knowledge obtained in the audit, or otherwise appears to be materially misstated.

If, based on the work we have performed on the other information that we have obtained prior to the date of this auditor's report, we conclude that there is a material misstatement of this other information, we are required to report that fact. We have nothing to report in this regard.

50

Annual Report 2023

Responsibilities of the Board Members for the Financial Statements The board members are responsible for the preparation of financial statements that give a true and fair view in accordance with IFRS Accounting Standards as adopted by the EU, and for such internal control as the board members determine is necessary to enable the preparation of financial statements that are free from material misstatement, whether due to fraud or error.

In preparing the financial statements, the board members are responsible for assessing the Agency’s ability to continue as a going concern, disclosing, as applicable, matters related to going concern and using the going concern basis of accounting unless the board members either intend to liquidate the Agency or to cease operations, or have no realistic alternative but to do so.

The board members are responsible for overseeing the Agency’s financial reporting process.

Auditor's Responsibilities for the Audit of the Financial Statements Our objectives are to obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement, whether due to fraud or error, and to issue an auditor's report that includes our opinion. Reasonable assurance is a high level of assurance, but is not a guarantee that an audit conducted in accordance with ISAs will always detect a material misstatement when it exists. Misstatements can arise from fraud or error and are considered material if, individually or in the aggregate, they could reasonably be expected to influence the economic decisions of users taken on the basis of these financial statements.

As part of an audit in accordance with ISAs, we exercise professional judgement and maintain professional scepticism throughout the audit. We also: • Identify and assess the risks of material misstatement of the financial statements, whether due to fraud or error, design and perform audit procedures responsive to those risks, and obtain audit evidence that is sufficient and appropriate to provide a basis for our opinion. The risk of not detecting a material misstatement resulting from fraud is higher than for one resulting from error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations, or the override of internal control.

• Obtain an understanding of internal control relevant to the audit in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Agency’s internal control.

• Evaluate the appropriateness of accounting policies used and the reasonableness of accounting estimates and related disclosures made by the board members.

• Conclude on the appropriateness of the board members’ use of the going concern basis of accounting and, based on the audit evidence obtained, whether a material uncertainty exists related to events or conditions that may cast significant doubt on the Agency’s ability to continue as a going concern. If we conclude that a material uncertainty exists, we are required to draw attention in our auditor's report to the related disclosures in the financial statements or, if such disclosures are inadequate, to modify our opinion.

51

Our conclusions are based on the audit evidence obtained up to the date of our auditor's report. However, future events or conditions may cause the Agency to cease to continue as a going concern.

• Evaluate the overall presentation, structure and content of the financial statements, including the disclosures, and whether the financial statements represent the underlying transactions and events in a manner that achieves fair presentation.

We communicate with the board members regarding, among other matters, the planned scope and timing of the audit and significant audit findings, including any significant deficiencies in internal control that we identify during our audit.

Conrad Borg (Principal) for and on behalf of RSM Malta Registered Auditor 17th December 2024

52

Annual Report 2023

10.5 Statement of Profit or Loss and Other Comprehensive Income

Particulars

2023

2022 €

€

Revenue

47,762,045

39,976,697

Cost of Sales

(39,040,712)

(32,196,494)

Gross surplus

8,721,333

7,780,203

Movement in pension benefits

(122,987)

124,365

(7,947,144)

(7,042,227)

Write off of prior year accrual

186,253

-

Operating surplus

837,455

862,341

Finance costs

(88,737)

(142,298)

Surplus before tax

748,718

720,043

Income tax

921,507

(342,531)

1,670,225

377,512

Administrative expenses

Surplus for the year

53

10.6 Statement of Financial Position as at 31 December, 2023.

Particulars

2023

2022 €

€

Property, plant and equipment

2,856,184

2,726,202

Right-of-use assets

1,736,428

2,005,775

Deferred tax

2,130,040

975,004

Total non-current assets

6,722,652

5,706,981

7,028

14,583

Trade and other receiveables

5,120,015

3,719,701

Contract assets

8,612,397

2,615,414

101,947

266,747

Cash and cash equivalents

12,106,947

18,455,721

Total current assets

25,948,334

25,072,166

TOTAL ASSETS

32,670,986

30,779,147

ASSETS Non-current assets

Current assets Inventories

Current tax receivable

54

Annual Report 2023

€

€

Capital reserve

4,542,497

4,542,497

Accumulated fund

6,837,979

5,167,754

TOTAL EQUITY

11,380,476

9,710,251

Finance lease obligation

1,565,783

1,801,943

Provision for liabilities and charges

1,149,733

1,158,648

Total non-current liabilities

2,715,516

2,960,591

Finance lease obligation

324,944

334,957

Provision for liabilities and charges

272,568

140,667

Trade and other payables

6,001,512

7,846,111

Contract liabilities

11,975,970

9,786,570

Total current liabilities

18,574,994

18,108,305

TOTAL LIABILITIES

21,290,510

21,068,896

TOTAL EQUITY AND LIABILITIES

32,670,986

30,779,147

EQUITY AND LIABILITIES Capital and Reserves

Non-current liabilities

Current liabilities

The financial statements have been approved and authorised for issue by the board members on 17 December 2024 and were signed on their behalf by:

Mr Tony Sultana Chairman

Mr Anthony Borg Board Member

55