Untitled

I wish to make a request under the Freedom of Information Act. The

following questions and information I wish to have sent to me are

as follows:

Provide, name, address and telephone number for the following

people:

• Senior Information Risk Owner

Martin Dearnley, Civic Centre 1, High Street, Huddersfield, HD1 2NF, 01484 221000

• Governance Manager

No post in the organisation with this title

• Information Security Officer/Manager

Withheld under Section 10 of the Data Protection Act

• Information Technology Security Officer/Manager

Peter Butters, 8 Old Leeds Road, Huddersfield, HD1 1SF, 01484 221000

• Caldecott Guardian

Keith Smith, 30 Market Street, Huddersfield, HD1 2HG, 01484 221000

PCI-DSS

Does your organisation process electronic payment cards? Yes

How much money is processed from electronic payment cards per

annum? In the previous 12 months we processed £18.4m

How many electronic payment card transactions are processed per

annum? Around 171,000

Are you PCI-DSS compliant? yes

ISO 27001

Are you or have you considered becoming ISO 27001 compliant or

certified? The council is not ISO 27001 certified, but uses the standard as reference for its security management systems.

Government Connect

Are you connected and operationally utilising the Government

Connect network? Yes

If not have you considered connecting to Government Connect and why was the decision made not to connect? N/A

Do you meet the Government Connect version three requirements? Yes

Please supply your latest CLAS consultant annual Government Connect assessment/audit report, blanking out any statements which could contravene a security concern from a third party reading it.

Under Exemption 23 of the UK Freedom of Information Act, the council is unable to disclose the requested information because CESG (who are part of the Government Communications Headquarters (GCHQ) which is listed in the Act, Part II Exempt Information, Section 23, (3) (c)), are the primary authors of the underlying document, the GSi Code of Connection.

Do you meet the Government Connect version four requirements? The council is currently undergoing assessment of GSi Code of Connection V4.1.

Please supply the latest internal report for the Government Connect version four Audit/Assessment, blanking out any statements which could contravene a security concern from a third party reading it.

Criminal Justice Network

Are you connected to and operationally utilising the Criminal Justice Network? Yes

If not have you considered connecting to the Criminal Justice Network and why was the decision made not to connect? N/A

Please supply your latest annual assessment/audit report, blanking

out any statements which could contravene a security concern from a

third party reading it. An annual assessment has not been undertaken.

NHS N3 Network

Are you connected to and operationally utilising the NHS N3

Network? No

If not have you considered connecting to the NHS N3 network and why was the decision made not to connect? The council is considering connecting to the NHS N3 network.

Please supply your latest N3 Connection assessment/audit report,

blanking out any statements which could contravene a security

concern from a third party reading it. N/A

Do both schools and the Council share the same physical network

responsible for voice and data communications? No

Yours faithfully,

Dave Schneider

-------------------------------------------------------------------

Disclaimer: This message and any reply that you make will be

published on the internet. Our privacy and copyright policies:

http://www.whatdotheyknow.com/help/about#officers

Please use this email address for all replies to this request:

[FOI #45099 email]

Is [Kirklees Borough Council request email] the wrong address for Freedom of Information

requests to Kirklees Borough Council? If so please contact us using

this form:

http://www.whatdotheyknow.com/help/contact