Navigating VPS Silver Review Reforms 12 min read Supporting Victorian public sector leaders through restructures, leadership transitions and Clause 11 changeThe Silver Review has moved from policy to practice. As departments deliver restructures, absorb a new Cabinet and prepare for a November election, assurance can feel like one more burden. This paper demonstrates the opposite. Done well, assurance is what lets leaders move through reform faster, and more safely. Topics Internal Audit and Corporate Governance IT Management, Applications and Transformation Risk Management and Regulatory Compliance Business Performance Data, Analytics and Business Intelligence Digital Transformation Technology Enablement Artificial Intelligence From policy to practiceThe Silver Review was more than a cost-cutting exercise. Its outcomes represent a system-wide reset of how the Victorian Public Service (VPS) is structured, governed and funded. Twelve months on, the reform is moving decisively from policy to practice. What were once recommendations are now live programs of work impacting people, structures and accountabilities across government.The scale is significant. The Government has committed to more than $4 billion in savings over four years, the removal of around 1,000 roles, including roughly 330 senior executive and specialist positions, and the consolidation of 29 entities into core departments. The Independent Review’s own analysis points to a rebalancing of VPS5 and VPS6 roles, some 536 FTE from entity consolidation, and a further 197 from accelerated digitisation. These are not abstract targets; they translate into restructures, redeployments and separations in every department.Two developments have sharpened the picture since our original series. First, the August 2026 Cabinet reshuffle under Premier Ben Carroll consolidated portfolios, reduced the ministry from 22 to 20, abolished several standalone portfolios and created new ones such as Artificial Intelligence and Digital Economy. Second, the Implementing Budget Reprioritisations in the VPS policy took effect on 1 July 2026, formalising how departments give effect to workforce change, including the use of the Clause 11 major-change process, through to 30 June 2027.And there is more change on the horizon. With a state election due on 28 November 2026, leaders are planning for the very real prospect of a further wave of machinery-of-government restructures, changed ministerial priorities and departmental realignments in the new year, regardless of the outcome. The pre-election caretaker period commencing 3 November 2026 is fast approaching, meaning the time to enact change and make key decisions will soon be put on hold. For many leaders, assurance can feel like one more burden at the worst possible moment. However, done well, assurance is precisely what allows leaders to move through reform with confidence that transformation risk is surfaced and managed early, employee wellbeing is protected, and services to Victorians are maintained.The perfect storm: three overlapping pressuresFor VPS leaders, multiple changes are compounding at the same time.Structural change. Departments are resetting spans of control and layers of hierarchy, consolidating entities and migrating functions into shared services; reshaping who does what, and who is accountable for it.Leadership transition. The Cabinet reshuffle has reassigned portfolios and abolished others, creating discontinuity in sponsorship, priorities and accountability at the very top. That churn cascades: as ministerial priorities shift and, potentially, shift again after November, secretaries and executives must maintain delivery through changing mandates.Workforce reduction through Clause 11. The separation process is now live. Under the reprioritisation policy, departments must first consider internal mobility, then develop a proposal for major change and commence the Clause 11 process in consultation with unions and employees, before matching staff to the new structure or inviting affected employees to apply to depart the VPS. These provisions flow from the VPS Enterprise Agreement 2024.These pressures form a portfolio of concurrent change programs, each with its own governance, dependencies and delivery risks that compound where they intersect. Individually, each is manageable. However, with overlapping and compounding change such as this, and a State election looming that will bring yet more change, the risk exposure intensifies.The hidden risks that surface during restructuresWhen leaders are focused on hitting savings targets and delivering the mechanics of change, a set of quieter risks tends to go unmanaged.Loss of corporate knowledge and control ownership as experienced staff depart at pace, leaving controls orphaned and processes undocumented. The question “who owns this now?” too often goes unanswered until something fails.Control gaps during redeployment and matching: redeployment and changed reporting lines can quietly erode segregation of duties and leave system access misaligned to new responsibilities.Separation and payroll accuracy risk: Clause 11 entitlement calculations, separation packages and continuous-service treatment processed at volume and speed, where error and overpayment risk rise.People risk: morale, burnout and heavier workloads for remaining staff (a concern unions have raised directly), plus heightened fraud and misconduct exposure during disruption.Change fatigue undermining delivery: weak change governance, thin communication and poor benefits tracking that quietly derail benefits realisation and the savings case itself.These are the familiar signatures of major transformation risk: governance gaps, change-readiness issues, and inconsistent benefits tracking, surfacing in a distinctly public-sector form.Why assurance often arrives too late to helpIn a reform, assurance usually arrives after the moment it could have made a difference. Restructures move at pace: decisions on structures, roles, matching and separations are taken in weeks, not the months a traditional audit cycle assumes. By the time an activity is scoped, fieldwork completed and a report tabled, the decisions have been made, the people have moved and the controls have already shifted. Assurance that lands at this point can only confirm what went wrong. It cannot help shape what goes right.The timing problem hollows out the value of assurance and carries a real human cost. Reform is delivered by the same teams being restructured around while maintaining day-to-day operations, so a poorly-timed review lands as another demand on people already stretched. Asked for documents and evidence in the middle of this, they experience assurance as a burden at the worst possible moment. That reaction is understandable: heavy, retrospective work takes energy from people delivering the change without giving anything back in time to help.“Assurance = confidence in your delivery.”When assurance keeps pace with the decisions being made, and is light on the teams delivering them, honest conversations become possible while there is still time to act. The fix is to change when and how assurance shows up. By delivering assurance at key lifecycle points, stage-gate, and in-flight reviews rather than after the fact, and drawing on information leaders already hold, assurance stops being a backward-looking report and becomes a delivery-confidence check. Run concurrently with reform, it is a transformation accelerant.Practical, low-burden assurance activitiesThe most useful thing leaders can do is match the intensity of assurance to the moment, favouring light-touch, high-value activities that build confidence without draining capacity. Six options are worth prioritising:Portfolio-level change risk mapping: a rapid, one-off view of where the greatest delivery and control risks sit across the reform program, so effort is directed where it matters most.Targeted assurance over the Clause 11 process: a focused check that the major-change steps, consultation, matching business rules and separation accuracy are being followed correctly and consistently.Change-management effectiveness reviews: change-readiness health-checks over governance, communication and people-risk, not full audits, giving leaders early warning where change is faltering.Integrated assurance planning: coordinating internal audit, risk, finance, ICT, HR and safety so coverage is deliberate rather than duplicated, reducing the total burden while giving one coherent view of reform risk.Control continuity checks during redeployment: a short, sharp sweep of system access, segregation of duties and control ownership as roles move, closing gaps before they are exploited.Live continuous control monitoring: aligned with the digital agenda of the reform, using analytics and AI to monitor key controls in near-real time, flagging anomalies as they arise so issues are caught and fixed during the reform, not at next year's audit.The low-burden assurance menuOptimising effort for confidence gained Assurance activityEffortConfidencePortfolio-level change risk mappingRapid one-off view of where delivery and control risk concentrate across reform agendas. LowHighTargeted Clause 11 process assuranceChecks consultation, matching rules and separation accuracy. Low-MedHighChange-management effectiveness reviewHealth-check of governance, communication and people-risk.Low-MedHighIntegrated assurance planningCoordinates assurance activity across IA, risk, finance, ICT, HR & safety. Cuts duplication.LowHighControl continuity checksShort sweep of access, SoD and control ownership during redeployment.LowMed-HighLive continuous control monitoringFlags anomalies as they arise during reform. Runs off system data, not staff timeLowHighPrioritise activities that are low in effort yet high in confidence gained.The unifying principle is effort versus confidence gained. Each activity is designed to be proportionate. Modest in effort and impact to the reform agenda at hand, but meaningful in the assurance it provides. This simple menu lets VPS leaders dial assurance up or down as the reform, and the political environment, evolves.How Protiviti can helpNo two VPS entities are experiencing this reform the same way. Each has a different risk profile, reform portfolio and assurance need. A generic approach will not give leaders or their communities the confidence they require. Our public sector specialists tailor transformation-focused assurance to each organisation’s context, and we bring directly relevant experience across the VPS and the broader Australian public sector. We have:Supported numerous VPS and APS entities to navigate machinery of government change including major portfolio changeExtensive experience providing assurance over the establishment and expansion of shared services across public sector and commercial entitiesHuman resource and change management expertise embedded in our delivery teams This is what it means to be a genuine transformation assurance partner: combining independence with lived experience of guiding organisations through restructures, mergers and workforce transitions.Backed by our Program & Project Assurance capabilityThese activities draw on Protiviti’s specialist Program & Project Assurance practice where we provide independent reviews that surface risks early and strengthen governance at each stage of change. Grounded in established methodologies (PMBOK, PRINCE2, SAFe, ISO 21500) and enabled by AI and analytics that cut traditional review time by 40%, our approach proves that low-burden need not mean low-rigour.Your VPS specialist team — Elly Maddy, Daniel Agosta and Lauren Brown — is backed by Protiviti’s national Program Assurance specialists.Confidence as a leadership assetReform on this scale is difficult, and the pace is unlikely to ease. The 28 November election may well usher in a further round of machinery-of-government change in 2027. In that environment, assurance is not a compliance overhead to be minimised. It is a leadership asset: the means by which executives protect service quality, workforce capability and public trust while still delivering the savings the State requires. Leaders who treat assurance as confidence, not compliance, will be the ones who move through change with the fewest surprises, and the most credibility.Test your reform readiness: Five questions leaders should be asking nowThe fastest way to test whether reform is being delivered safely is to ask the right questions. These five are designed for VPS leaders to work through as reform gathers pace. If any answer is unclear, it points to where confidence is thinnest, and where assurance would go a long way.Confident: we have this covered and could evidence it Partly: some of this is in place, but there are gaps or it's untested Not sure: we don't have a clear viewDo we have a single, current view of where our biggest reform risks sit? Confident means: we could name our top reform risks today and show they're being actively managed.Are our Clause 11 separations accurate, consistent and defensible? Confident means: entitlement calculations, consultation and continuous-service treatment are controlled, checked and would withstand scrutiny.As roles move, do we know who owns our critical controls, and can we prove it? Confident means: control ownership, system access and segregation of duties are keeping pace with the restructure, not lagging it.Are our savings genuine, or are we shifting cost and risk elsewhere? Confident means: we can show the benefits are real and tracked, not offset by lower service quality or cost transferred elsewhere.Is our assurance effort coordinated across the organisation? Confident means: internal audit, risk, finance, ICT, HR and safety are aligned, so there's no duplication and no blind spots.Let’s talkTo discuss how Protiviti can support your organisation through the reforms ahead, get in touch with Elly Maddy, Daniel Agosta or Lauren Brown. How the results mapMostly confident — four or five "Confident", no "Not sure"Mixed — a spread of answers, or two to three "Partly"Several gaps — two or more "Not sure", or mostly "Partly / Not sure" Tier 1 — Mostly confident You're well placed for the reform aheadYour responses suggest reform is being managed with real discipline, and that confidence is well founded. The value now is in holding that position as change compounds. Even strong programs can drift when roles move quickly and priorities shift, so the areas worth watching are the ones that erode quietly: control ownership during redeployment, and whether savings stay genuine over time.One light-touch check on your thinnest area is often enough to keep confidence where it is.Happy to be a sounding board as the reform progresses. Get in touch with Elly Maddy, Daniel Agosta or Lauren Brown. Tier 2 — Mixed A solid base, with a few areas worth a closer lookYour responses show good foundations, with some areas that are less certain or untested. That's a common and realistic position as restructures, leadership change and Clause 11 separations land together. The value here is in acting early on the soft spots, before they become issues that are harder and costlier to unwind.Based on your answers, the areas flagged as "partly" or "not sure" are where a small, targeted piece of assurance would give you the most confidence for the least effort.If you'd like to talk through where to focus first, we're happy to help. Get in touch with Elly Maddy, Daniel Agosta or Lauren Brown. Tier 3 — Several gaps Several areas would benefit from attention nowYour responses suggest confidence is thin across a few important areas. That's understandable when this much change arrives at once, and it's better to see it clearly now than to discover it after decisions are locked in. The point isn't to do everything; it's to prioritise the one or two areas where the exposure is greatest.On your answers, Clause 11 accuracy and control continuity are usually the places to start, because that's where financial, legal and service risk concentrate during change.A short, focused conversation is often enough to map the priorities and a low-burden way forward. Get in touch with Elly Maddy, Daniel Agosta or Lauren Brown. Leadership Elly Maddy Elly is a director at Protiviti Australia and provides internal audit services to Federal and State government departments and agencies. Elly is known for her innovative problem-solving approach and for providing her clients with new approaches to their operational ... Learn More Daniel Agosta Daniel is an associate director at Protiviti Australia and delivers internal audit, risk management, and compliance services to public sector, corporate, healthcare, and medical research clients. Known for his client-centric solutions and analytical approach, Daniel ... Learn More Lauren Brown Lauren is the country lead for Protiviti Australia. With over 14 years' experience in governance, risk, and internal control, she specialises across multiple industries including health, higher education, government, consumer products, and energy. She is an active ... Learn More Rita Gatt As managing director, technology and cybersecurity at Protiviti, Rita leads a dedicated team focused on solving complex organisational challenges, with a particular emphasis on leveraging data, AI and technology to do so. With over 20 years of experience navigating ... Learn More Featured insights Protiviti's Perspectives on the Silver Review BLOGS 5 min read Resetting the Victorian Public Service: What the Silver Review Means for VPS Leaders BLOGS 9 min read Digitising the VPS: Shared Platforms, AI and the Responsibilities of Technology Leaders BLOGS 10 min read Silver Review Implications for VPS Financial Decision Makers: Guardrails, Savings and Financial Stewardship BLOGS 10 min read Assuring the Silver Review Reforms – The Critical Role of Risk Management and Assurance BLOGS 10 min read AP Transformation: The Hidden Opportunity in Workday Implementations BLOGS 5 min read Public Sector Insights: Setting the 2026 Audit Committee Agenda WHITEPAPER 19 min read From Threats to Transformation: The Key Risks and Opportunities Shaping the Government Sector SURVEY 5 min read