14^th November 2008

Dear Richard

RE: 10485428

I am writing to confirm that the Central Office of Information has now completed the Internal Review that you have requested.

After due consideration I must still uphold the decision not to release any information relating to our IT systems as detailed within the Security Audit as referenced in the minutes of the .gov.uk Naming and Approvals Committee minutes of 26^th September 2007. This is covered under the exemption of the Freedom of Information Act - section 31 for the reasons as previously stated and I do not believe its release would be in the public interest.

Whilst you correctly point out that this audit took place over a year ago, any disclosure of information contained within our IT systems may still result in unnecessary disruption or harm to COI, suppliers or individuals.

However, I am able to provide the name of the company that carried out the audit, this was Securetest. A redacted copy of the audit without the information detailed above can also be provided if needed.

If you are not content with the outcome of the internal review, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

If you have any queries about this letter, please contact me. Please remember to quote the reference number above in any future communications.

Yours sincerely

Emma Lochhead

Hercules House

Hercules Road

London SE1 7DU

Switchboard 020 7928 2345

T 020 7261 8253

F 020 7261 0942

___