As part of its efforts to modernize how the federal government manages its information technology infrastructure, Shared Services Canada (SSC) initiated a comprehensive Government of Canada-wide business transformation hinging on six core infrastructure programs. These programs entail greater complexity and magnitude than typical programs, and as such, they were identified and recommended to be reviewed as a suite of system under development (SUD) audits by SSC’s Departmental Audit Committee. To support SSC in managing this complex transformation, the Office of Audit and Evaluation conducted quarterly SUD audit programs of SSC’s Information Technology (IT) infrastructure programs in 2016-17 and 2017-18. This report provides a summary of three of the four 2017-18 SUD audits on the topics of project management; activities vs projects, data centre consolidation; data centre closures, cyber and IT security; IT security requirements in procurements.