As of 21 November 2023 Defra, as a Ministerial Department, has to date identified one red-rated legacy IT system as defined in the Central Digital and Data Office Legacy IT Risk Assessment Framework, but work to continually refine and broaden our use of the risk framework continues. Departments are actively managing their legacy estates and are either seeking to fund or are seeking to exit legacy systems via their existing change plans. The right approach varies: work under way includes upgrades, complete system replacements and migration to public cloud.