Audit Commission Firewall;

Dear Mr John, thank you for your request.

This has been logged as reference RFI 1440. We're now looking for the information you've asked for and will respond as soon as we can. Under the Freedom of Information Act, we must respond no later than 8 November.

Yours sincerely

Rob Mauler
Public Enquiries

show quoted sections

Dear Mr John
 
Thank you for request for information of 11 October 2011.
Your request was:
Please could you disclose any network security advice given to the Audit
Commission by the UK Government's National Technical Authority for
Information Assurance - CESG - concerning the security of the Audit
Commission email system and MX handling.
In response to your request I can tell you that we do not hold any network
security advice from CESG regarding the email system. By way of
explanation I would make the following points:

* The Commission does not form part of the national critical
infrastructure and would not normally receive direct advice from CESG.
Internal email and data for confidential business applications are not
routed via MessageLabs.
* Only external internet mail is routed through MessageLabs. Our policy
is that sensitive information (either personal data or protective
marked information) should not be sent over the internet as it is
insecure. In those exceptional circumstances where the only route for
sensitive information is by external internet email the information
should be encrypted. So, in short, no sensitive material should be
readable by the MessageLabs servers.
* We use MessageLabs to screen our internet traffic and they provide
routing to do this to data centres across the EU to improve resilience
and reliability. Given that these emails don’t contain sensitive
information we do not see any issue with this.
* We would also note that we probably would not have grounds to refuse a
supplier operating within the EU, on data privacy grounds, under EU
procurement law.

I hope this resolves your enquiry; however, if you are unhappy with this
response, or the way your request has been handled, you can raise a
complaint under the Audit Commission's Access to Information Complaints
Procedure. Please find it via this link:
[1]http://www.audit-commission.gov.uk/legal...
 
 
Yours sincerely
 
 
Diane Skinner
 
 
Diane Skinner
Information Standards and Quality Manager
[2]Information Management
Corporate Services ([3]Business Information Services)
 
Audit Commission
Westward House
Lime Kiln Close
Stoke Gifford
Bristol BS34 8SR
 
Direct Dial:     + 44 (0) 844 798 6262
E-Mail:         [4][email address]
 
For Freedom of Information (FOI) requests please email
[5][Audit Commission request email]
Please consider the environment before printing this email and associated
attachments
 
 
 
 
 
 

show quoted sections