Defra told us that it had so far focused on stabilising its legacy applications to reduce the risks of cyber-attack or operational failure and on developing and implementing the IT systems needed for EU Exit, rather than work to reduce reliance on paper forms or to make applications widely available on mobile phones.31 It explained that stabilising applications often involved moving them from older data centres onto modern cloud- based platforms. Once the risks have been diminished, Defra told us it intends to move on to enhancing and transforming its legacy applications. This will involve rebuilding and replacing applications and decommissioning existing legacy IT. Defra expected the full transformation of its business applications to take around 10 years.32 However, Defra told us that it does not a yet have a strategy for transforming its digital services or a plan for enhancing and transforming its legacy applications. It explained that it intended to complete work on developing a vision for digital transformation within a year but was unable to give an indication of what it would achieve in terms of digitising its systems.33