Design Review Transformation Project

What happened in September? 

• In September, the project team continued advancing the next planned release, for delegated technology reviews completing development of vendor compliance sections and business criticality updates while progressing work on privacy and data sharing agreement components.  

• The timeline for the next planned release plan was reassessed during the month due to delays with design, development and test preparation milestones. The current planned release date is Nov. 24, with development and supporting training materials on the critical path. The planned release date will be closely monitored to ensure all functionality is ready for agency use.  

• The team also made progress on the future Non-Delegated Technology Review (NDTR) process. An approach for an early release of the NDTR was identified, draft workflows are under  development, and potential candidates are being identified. Work to define NDR criteria and prepare for agency participation is starting and more information will be provided as soon as it is available .  

• Organizational readiness activities advanced as well. The team completed a change readiness assessment and training plan, updated the OCM plan, and began developing the user guide, decision tree and checklist needed to support testing and implementation.  

Why this matters 

• The work completed in September moves the project closer to a more unified and predictable Technology Review process that brings architecture, privacy, security and other review considerations into a coordinated workflow; the future-state direction highlighted in the August report.  

• The revised Next Release schedule gives the team additional time to complete development, training and testing activities before implementation and ensure we are ready. At the same time, development of the NDTR Early Release approach creates an opportunity to validate the future process with agencies, gather feedback and refine the process based on agency experience. Input from the early release process will inform the functionality of Service Now for a broader deployment. 

• Improvements to project management and readiness activities are also helping the team better manage dependencies as work becomes more interconnected. Sprint-based tracking in Azure DevOps provides greater visibility into critical-path activities, while training and OCM work will help prepare internal teams and agencies for upcoming changes. 

What’s next 

In October, the project will continue preparing for the next release of the delegated technology review and advance the non-delegated technology review by: 

• Completing new Privacy section for delegated reviews and advancing the remaining development. 

• Finalizing the testing approach and preparing test materials for upcoming  test activities. 

• Developing agency training materials, including the user guide, decision tree, and checklist and updated FAQs. 

• Finalizing criteria for when a non-delegated technology review is required. 

• Refining workflows and preparations for the non-delegated technology review process. 

• Continuing agency engagement and identifying participants for an early release of the non-delegated technology review process. 

• Closely tracking development and other critical-path dependencies toward the Nov. 24 release go-live target. 
   

How to stay informed

Sign up to receive updates on the DRT project via GovDelivery. 

Design Review Transformation Project | WaTech (Opens in new window)

Project Overview

The Design Review Transformation project modernizes how WaTech and state agencies work together on technology design reviews. The project replaces fragmented processes with a single, customer centered service that supports faster, more predictable decisions.

Key changes:

Unified intake and workflow
All new SaaS design review requests for supported use cases will come through a single ServiceNow entry point. This will reduce confusion, increase visibility, and provide a consistent experience.

Agency Performed Reviews (APR)
Agencies will take on more responsibility for low and medium complexity reviews, with WaTech in an advisory and partner role. This approach reduces the number of full WaTech led reviews and shortens review times.

Technology areas included in review
The design review process covers key domains to support safe, secure, and effective solutions:

• Security
• Architecture
• Privacy
• AI

Data-driven oversight and improvement
The project will collect structured data on submissions, cycle times, and outcomes. Dashboards will track performance, including review timelines, percentage of Agency Performed Reviews, backlog, and satisfaction scores.

Cultural shift from gatekeeper to partner
The new model encourages shared ownership. WaTech provides patterns, templates, training, and advisory support so agencies can feel prepared and confident in their own reviews.

Overall, DRT supports agencies by making design reviews clearer, faster, and more aligned to mission outcomes, while still meeting enterprise policy, security, and risk management needs.

Goals and Vision

Vision

Create a simple, unified, and transparent design review experience that helps agencies move faster, meet requirements, and deliver secure, effective technology solutions. Strengthen trust and collaboration between WaTech and agencies by shifting from a gatekeeping model to a customer centered partnership.

Goals

• Provide agencies with clear, consistent guidance that supports confident self-service through Agency Performed Reviews.
• Reduce the number of full WaTech reviews by 50 to 75 percent for supported SaaS use cases.
• Improve review cycle times through unified intake, automated workflow, and streamlined handoffs.
• Strengthen decision quality through coordinated review across Security, Architecture, Privacy, and AI.
• Increase satisfaction for agencies submitting design reviews.
• Deliver dashboards that track cycle time, backlog, APR percentages, and other key performance indicators.
• Support adoption through training, communication, and advisory services.

These goals align with the project charter and guide every major decision as the project moves through each release.

Timeline

The project is using a phased approach so WaTech and agencies can learn from pilots and expand with confidence.

Discovery and Reset (2024 – mid 2025)

• Gathered feedback from agencies on pain points and improvement ideas
• Documented current processes and issues
• Paused work during internal transitions
• Relaunched with a new project team, updated charter, and guiding principles

Release 1 – Q1-Q2 2026 - Focus: Low complexity SaaS use case (limited pilot audience)

• Configure and test ServiceNow intake and workflow
• Validate roles and process steps across Security, Architecture, Privacy, and AI
• Conduct training and support for pilot agencies
• Share early findings, including benefits and issues to address

Release 2 – Q2-Q3 2026 - Focus: Expanded SaaS Use Cases 1 and 2

• Extend ServiceNow based process to a broader set of agencies
• Refine Agency Performed Review criteria and guidance
• Deliver broader training and updated support materials
• Begin regular dashboard reporting on key performance indicators

Post Release 2 – Q3 2026 and beyond - Focus: Full model and continuous improvement

• Plan future releases for high complexity solutions and additional hosting models
• Advance audit workflows and potential integrations with other tools
• Use performance data and feedback to refine policies, guidance, and training
• Maintain regular communication on improvements, successes, and upcoming changes

This page will update as the project moves through each phase and more details become available for agencies and stakeholders.

Related Links

• Guiding principles
• Monthly Progress Reports Archive
• Project brief (PDF) Updated April 2026