4 Costs

4.1 Direct project costs:

4.1.1 Agencies will only need to introduce S.E.E. PKI if there is an application need. Each application will vary in its project resource requirements.

4.2 Acquisition costs:

4.2.1 Certificate costs: Indicative cost $100.

4.2.2 Software costs: S.E.E. PKI will use the existing browser client software and drivers provided with any PKI hardware.

4.2.3 Hardware costs: Access to the S.E.E. PKI will be enabled with a S.E.E. Key. The S.E.E. Key can either be a smartcard token / reader or a USB smart token. Indicative costs are:

• Smart card, $70 & reader, $300

• USB smart token, $120 (uses existing PC USB port)

4.3 Implementation costs

4.3.1 Implementation services and facilities: Helpdesk and support services will require training on the new systems. Agencies may choose to redevelop their applications to take advantage of the S.E.E. PKI. It is anticipated that most implementation will occur during the normal upgrade of an application.

4.3.2 Loss of productivity: The procedure to issue a replacement S.E.E. Key if lost or misplaced will be more onerous than a password replacement. The existing S.E.E. Key will have to be revoked, and a new S.E.E. Key issued.

4.3.3 If the S.E.E Key is left at home, the staff member may have to return home to retrieve it.

4.4 Whole of life ownership costs:

4.4.1 Service and operating costs: The agency's Information Technology unit and helpdesk will need to manage hardware tokens, software and software configurations associated with the S.E.E. PKI.

4.4.2 The loss of a S.E.E. Key is estimated to be about $170 - $220. This would consist of:

Direct cost of loss: $100 Digital certificate replacement $120 USB Token replacement ($70 smart card replacement)

Indirect cost of loss: $ Employee productivity loss - depends on what the S.E.E Key is being used for, whether others can cover for them, and what else they can do.

4.4.3 Annual maintenance / licences: Each person allocated a S.E.E. Key, will need their digital certificate reissued annually. The current cost is $80 per person, per annum.

4.4.4 Upgrade and replacement of facilities: Agencies implementing inter-agency applications will need IT resource capable of integrating the application with the S.E.E. PKI.

4.4.5 Staffing costs: Each agency will need to assign one or more staff members the role of Registration Agent to manage the registration of employees applying for a digital certificate, and to revoke certificates when employees depart the organisation.

4.4.6 On-going training and support: Internal helpdesk staff will need to interact with the helpdesks for inter-agency applications and CA staff. Based on experience at The Treasury, this work might be expected to take about 15 minutes per employee per year, however initially this work is likely to be over intense short periods of time, as new requests for digital certificates coincide with new application deployments.

4.4.7 As more applications make use of the S.E.E. PKI for authentication, existing staff will require less training, due to the common look and feel of the authentication mechanism.