Modernizing Legacy Government Information Systems: A Framework for Systems Integration, Process Automation, and Regulatory Compliance

Abstract

Government agencies at all levels continue to operate legacy information systems that were designed prior to interoperability‚ automation‚ and audit requirements of modern public administration. Modernization efforts often treat systems integration‚ business process automation‚ and regulatory compliance as separate workstreams with their own discipline-specific body of practice and respective implementation timelines to address the shortcomings of legacy information systems. Isolating these three concerns leads to some friction, as integrations are built on an unstable layer, and compliance controls added later to the integrated automation will likely not cover every use case during an audit. To address these issues, this paper proposes a three-layer architecture to handle these concerns as coupled design tracks, instead of the legacy modernization approach of treating each concern as a sequential phase: Integration Layer, Automation Layer, and Compliance Layer. The integration layer allows older and new systems to work together according to the approach of incremental decomposition and centralized mediation. The automation layer builds upon this layer and brings together robotic process automation and business process management orchestration, emitting structured event logs at each step in the workflow. These event logs feed the Compliance Layer's control-to-component traceability matrix, creating documented technical mechanisms in lieu of just redoing the reconciliations for an audit. The implementation methodology is by phases, such that only one bounded business function is worked on at a time. The completed phase is handed over to operations staff. The state-level licensing and permitting function case study shows the joint benefits of interface consolidation, workflow automation, and audit-traceability enhancement and also demonstrates bona fides that the model does not require regulatory changes or an all-or-nothing replacement of legacy systems. This approach makes it appropriate for agencies that have rigid procurement cycles or continuity requirements. The paper concludes with implications for modernization practice and the need to test measured outcomes of deployments that operating agencies have undertaken.