This is an HTML version of an attachment to the Freedom of Information request 'FOI Request'.

Provide, name, address and telephone number for the following

people:

• Senior Information Risk Owner

• Governance Manager

• Information Security Officer/Manager

• Information Technology Security Officer/Manager

Please contact Philip Jones for all of the above, he is Head of Information Governance. Tel: 01785 27 8364

Address: Access to Information, 1a Bailey Street, Stafford, Staffordshire, ST17 4BG

• Caldecott Guardian

Mark Hewitt. Tel: 01785 27 7110

Address: St Chad's Place, Stafford, ST16 2LR

PCI-DSS

Does your organisation process electronic payment cards?

We have a Purchase card scheme

How much money is processed from electronic payment cards per

annum?

The last financial year generated payments to the value £1,479,719

How many electronic payment card transactions are processed per

annum?

17281

Are you PCI-DSS compliant?

Yes

ISO 27001

Are you or have you considered becoming ISO 27001 compliant or

certified?

Government Connect

Are you connected and operationally utilising the Government

Connect network?

Yes

If not have you considered connecting to

Government Connect and why was the decision made not to connect?

N/A

Do you meet the Government Connect version three requirements?

Please supply your latest CLAS consultant annual Government Connect

assessment/audit report, blanking out any statements which could

contravene a security concern from a third party reading it.

Do you meet the Government Connect version four requirements?

Please supply the latest internal report for the Government Connect

version four Audit/Assessment, blanking out any statements which

could contravene a security concern from a third party reading it.

Subject to Public Interest Test. Will inform you of the outcome in due course.

Criminal Justice Network

Are you connected to and operationally utilising the Criminal

Justice Network?

No

If not have you considered connecting to the

Criminal Justice Network and why was the decision made not to

connect?

We have a secure mail connection in place, there are no current business plans to make a network-to-network connection to CJN.

Please supply your latest annual assessment/audit report, blanking

out any statements which could contravene a security concern from a

third party reading it.

Not Applicable

NHS N3 Network

Are you connected to and operationally utilising the NHS N3

Network?

Yes

If not have you considered connecting to the NHS N3

network and why was the decision made not to connect?

Not Applicable

Please supply your latest N3 Connection assessment/audit report,

blanking out any statements which could contravene a security

concern from a third party reading it.

All available reports are in the public domain at:

https://www.igt.connectingforhealth.nhs.uk/AssessmentReportCriteria.aspx?tk=404124939338706&lnv=6&cb=14%3a52%3a15&sViewOrgId=9560&sDesc=V319AC

Do both schools and the Council share the same physical network

responsible for voice and data communications?

Yes for data and some schools share our current TDM wide area telephone system. There is currently a procurement exercise to replace this with a converged solution.