The Australian Government CTO's blog post (on finance.gov.au - where else?): http://www.finance.gov.au/blog/2014/05/07/seeking-industry-comment-on-govcms-draft-

The Australian Government CTO's blog post (on finance.gov.au - where else?): http://www.finance.gov.au/blog/2014/05/07/seeking-industry-comment-on-govcms-draft-statement-of-requirements/ http://www.finance.gov.au/blog/2014/05/07/seeking-industry-c... The draft Statement of Requirements for GovCMS: http://www.finance.gov.au/sites/default/files/GovCMS%20Statement%20of%20Requirements%20and%20Vendor%20Questions%20%28for%20public%20release%29%20-%205%200.pdf http://www.finance.gov.au/sites/default/files/GovCMS%20State... Some notable tidbits: - No analysis seems to have been done on the approach of hiring their own developers to develop a custom-yet-cohesive solution, a la Gov.uk. - The CTO says "Drupal appears to offer the best enterprise-level as shown by our previous extensive analysis". Can someone refer me to this extensive analysis? Have they considered the security risks of standardizing on a single platform? http://www.cvedetails.com/vulnerability-list.php?vendor_id=1367&product_id=&version_id=&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&month=0&cweid=0&order=3&trc=251&sha=5baca71f3e0155964df6d2b1f631f68053857320 http://www.cvedetails.com/vulnerability-list.php?vendor_id=1... - "A solution hosted offshore would not be excluded from consideration" So, putting Australian Government infrastructure in the US is OK. Subject to US laws. Fantastic. - Does anyone know if the government intends to contribute to Drupal development? They say that they expect some "feature rich" sites to require custom modules, but what about Drupal itself?