@ Adam Foxton
Absolutely agree. This situation has been enabled by the total lack of oversight from government management. In any proper company, whether you outsource or not, you have a list of your sytems, who has access to them and IT must have a list of all servers and the admin credentials to them.
Not having that list is just complete and utter incompetence.