Summary

SAI Brazil assessed the ICT governance and management structures in the Ministry of Health, paying special attention to the Brazilian National Digital Health Strategy 2020-2028. Auditors noted significant progress in the computerization of primary health care, with an increase from 63.6% to 90.7% of computerized teams between 2020 and 2024. However, there are still challenges in the integration of basic medical units into the National Health Data Network. SAI identified six critical violations, including the ineffectiveness of the Internal Governance Committee, the absence of an Institutional Strategic Plan for 2024-2027, the lack of information security (IS) specialists, and the discontinuity of digital governance committees' activity. SAI Brazil recommended that the Ministry of Health provide an evaluation of its governance structure and measures to improve the functioning of the Committee within 30 days, as well as prepare a study on the needs for IS-specialists and implement an information security awareness program.