First Nations IT/OT Systems Toolkit
Understand, manage and govern the technology that runs your community.
The self-serve version of our IT/OT systems review. Purpose: help your team understand, manage, and govern the technology that powers your community. Most First Nations organizations lack a single, centralized record of the software and hardware they run, or of how their business IT connects to the operational technology controlling physical infrastructure such as water, energy, and community facilities. This toolkit guides your team through a structured systems inventory, maps where IT and OT intersect, and helps identify critical risks and single points of failure. It equips leadership with a clear decision-making framework and council briefing templates to act on findings with confidence.
What’s inside
- Systems and asset inventory template: catalogue hardware, software, licences, and infrastructure in one centralized record.
- IT/OT mapping worksheet: trace where administrative IT networks connect to physical infrastructure systems.
- Risk and single-point-of-failure checklist: pinpoint operational bottlenecks, exposure, and system vulnerabilities.
- Technology governance framework: a clear decision-making guide for leadership and administration.
- Procurement and vendor checklist: vet new technology purchases and hold third-party vendors accountable.
- Council briefing templates: ready-to-use slide and memo formats to present findings and recommendations to leadership.
Who it’s for
Band offices, tribal councils, and administration teams; public works and community infrastructure managers; and any First Nations entity managing internal technology that wants to strengthen governance.
05 · Against the standards
This is the Onake step. We take everything gathered and measure it against recognized frameworks — the yardsticks that turn observations into real findings. In plain terms:
- ISO/IEC 38500 — the international standard for the governance of technology — who decides what, on what basis, and who answers for it.
- Law 25 — Quebec’s private-sector privacy law — what your organization is legally required to do when it handles personal information.
Basic digital package
Payment by invoice or e-transfer. The basic package is delivered by email within two business days.
Facilitated systems review workshop
We discuss scope and pricing together, based on your community’s needs and capacity.
Let’s discuss your needsThese templates are professionally drafted business documents and do not constitute legal advice or engineering design. For legal review, please consult independent counsel.