A person uses the ArriveCan app in 2024. On Oct. 22, Auditor-General Karen Hogan announced an audit of GCStrategies, the main contractor on the ArriveCan app.Laura Proctor/The Globe and Mail
Auditor-General Karen Hogan is launching a new audit focused specifically on spending and contracts tied to GCStrategies, the two-person IT company that was the primary contractor on the ArriveCan app.
Ms. Hogan confirmed the audit in a letter to House of Commons Speaker Greg Fergus, pointing to the fact that the House of Commons unanimously approved a report last month by the government operations committee asking her to conduct such work.
“We wish to inform the House that we will conduct a performance audit,” she wrote, according to a copy of the letter obtained by The Globe and Mail. “We are in the process of gathering information that will allow us to properly scope and plan the audit based on our mandate and available resources. Our scope may be affected by document retention policies, as some relevant information may no longer be available.”
Opinion: McKinsey, ArriveCan are just the tip of a rotten iceberg of government outsourcing
Meanwhile Canada Border Services Agency President Erin O’Gorman sent a letter to the government operations committee stating that some deleted emails of the agency’s former vice-president Minh Doan, a key figure in the ArriveCan saga, cannot be retrieved.
The Auditor-General released a report in February that found a glaring disregard for basic management practices with respect to the government app for cross-border travellers launched at the onset of the pandemic.
The original version of the app cost of $80,000 but the Auditor-General said the price grew over time to $59.5-million.
The federal government relied heavily on outsourcing for the project and GCStrategies has said they then subcontracted all of the IT work to others – sometimes including large multinational companies – while collecting a commission of between 15 and 30 per cent of the contract values.
The government’s relationship with GCStrategies was singled out for criticism in that report, saying the company was awarded the initial ArriveCan contract through a non-competitive process and then later won a much larger contract that included some ArriveCan work after being involved in the development of the government’s contracting requirements.
Members of Parliament on two committees have been probing the events related to ArriveCan for months and have yet to receive a definitive answer as to who specifically in government made the decision to select GCStrategies.
Former senior officials at the CBSA, which led the app project, have repeatedly pointed fingers at each other in Parliamentary hearings.
Former CBSA vice-president Minh Doan has maintained that he selected from two high level options: selecting a mix of in-house and outsourced workers over a fully-outsourced plan proposed by Deloitte. Mr. Doan said his team selected GCStrategies.
Two former CBSA officials who worked under Mr. Doan, Cameron MacDonald and Antonio Utano, have told MPs that it was Mr. Doan who selected GCStrategies.
Mr. MacDonald and Mr. Utano are currently suspended with pay. They are the subject of an internal investigation that documents show is focused on their interactions with GCStrategies managing partner Kristian Firth.
Mr. Doan told MPs in June that some of his emails were corrupted when he attempted to move files from an old laptop to a new laptop. He said all of his emails are backed up on Shared Services Canada servers.
The government operations committee then asked the CBSA to provide all back-up copies of Mr. Doan’s deleted emails from his time at the agency, as well as all text messages between Mr. MacDonald and Mr. Doan, from 2018 to present.
In an Oct. 18 letter to the government operations committee, the CBSA president said Mr. Doan’s email account was deleted after he left the CBSA to joint the Treasury Board.
The letter says Mr. Doan and Mr. MacDonald’s phones were both wiped of all data when they left the agency, in line with federal policies.
CBSA spokesperson Guillaume Bérubé said the letter only refers to deleted emails. The agency said many of Mr. Doan’s emails have already been shared with the committee and more will be sent once they are translated.
“Deleted email backups are only kept on the server for 30 days,” he said.
Conservative and Treasury Board critic MP Stephanie Kusie, who is a member of the government operations committee, said she’s grateful the Auditor-General has agreed to conduct an audit focused on GCStrategies.
Ms. Kusie also expressed concern with the CBSA’s position that Mr. Doan’s deleted emails cannot be retrieved.
“It doesn’t make sense to us,” she said.
