Dear Mr Schneider

Re: Freedom of Information Act 2000 - FOIA1161

Thank you for your recent request which has been dealt with under the Freedom of Information Act 2000 (FOIA). You requested the following information:

Provide, name, address and telephone number for the following

people:

All located at Scarborough Borough Council, Town Hall, St Nicholas Street, Scarbough, YO11 2HG.

There are no posts with the following titles, however I have indicated who has responsibility for each of these roles as appropriate.

• Senior Information Risk Owner

Mr Ian Anderson, Head of Legal Service, 01723 232348

• Governance Manager

Mr Ian Anderson, Head of Legal Service, 01723 232348

Data Protection Officer, Mr Jonathan Learoyd, ICT Manager, 01723 232404.

Freedom of Information Officer, Mr David Kitson, Senior solicitor, 01723 384319

• Information Security Officer/Manager

Mr Jonathan Learoyd ICT Manager, 01723 232404

• Information Technology Security Officer/Manager

Mr Stephen Ford, ICT Technical Manager, 01723 233019

• Caldecott Guardian

Not Applicable

PCI-DSS

Does your organisation process electronic payment cards? Yes, through face to face, telephone and Internet.

How much money is processed from electronic payment cards per

annum? £4,500,000 on average

How many electronic payment card transactions are processed per

annum? 45000 on average

Are you PCI-DSS compliant? Partial, some areas to be addressed by moving to a

hosted solution for card payments.

ISO 27001

Are you or have you considered becoming ISO 27001 compliant or certified?

Considered and working towards.

Government Connect

Are you connected and operationally utilising the Government Connect network? Yes

If not have you considered connecting to Government Connect and why was the

decision made not to connect? N/A

Do you meet the Government Connect version three requirements? Yes

Please supply your latest CLAS consultant annual Government Connect

assessment/audit report, blanking out any statements which could contravene a security

concern from a third party reading it.

As below

Do you meet the Government Connect version four requirements? Yes

Please supply the latest internal report for the Government Connect

version four Audit/Assessment, blanking out any statements which

could contravene a security concern from a third party reading it.

Please find attached statement from Government Connect, I have redacted the areas

highlighted to ensure network integrity is maintained.

Criminal Justice Network

Are you connected to and operationally utilising the Criminal Justice Network? If not

have you considered connecting to the Criminal Justice Network and why was the

decision made not to connect?

No requirement to connect, but do use secure email supplied by CJIT now transferring

to Government Connect secure email.

Please supply your latest annual assessment/audit report, blanking out any statements

which could contravene a security concern from a third party reading it.

N/A

NHS N3 Network

Are you connected to and operationally utilising the NHS N3 Network? If not have you

considered connecting to the NHS N3 network and why was the decision made not to

connect?

No

Please supply your latest N3 Connection assessment/audit report, blanking out any

statements which could contravene a security concern from a third party reading it.

N/A

Do both schools and the Council share the same physical network responsible for voice

and data communications?

N/A

If you are unhappy with the service you have received in relation to your request and wish to make a complaint or request a review of our decision, you should write to David Kitson, Senior Solicitor, Legal and Support Services, Town Hall, St Nicholas Street, Scarborough, North Yorkshire, YO11 2HG or email [email address].

If you are not content with the outcome your complaint, you may apply directly to the Information Commissioner for a decision. Generally, the Information Commissioner's Office cannot make a decision unless you have exhausted the complaints procedure provided by Scarborough Borough Council. The Information Commissioner can be contacted at: The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 01625 545745 Fax: 01625 524510 Web: www.ico.gov.uk.

Yours sincerely

Mr J Learoyd

ICT Manager