FOI Request

Dear Mr Schneider

Your Request has been logged as RFI/02354. You may expect a response
within the prescribed 20 working days time period, i.e. by 16 September
2010.

FOI Coordinator, on behalf of Greenwich Council
4th floor, Riverside House, Woolwich High Street, London SE18 6BU
Tel: 020 8921 5084

show quoted sections

Dear Mr Schneider

I write with reference to your Request, shown below. Our response is as
follows.

1. Contacts - Provide, name, address and telephone number for the
following people:
o Senior Information Risk Owner
Shaun Rafferty 4th floor, Riverside House, Woolwich High Street,
London SE18 6BU. Tel: 020 8921 8882
o Governance Manager
This work is completed by the same officer for Information
Security.
o Information Security Officer/Manager
Graeme James, 4th floor, Riverside House, Woolwich High Street,
London SE18 6BU. Tel: 020 8921 5712
o Information Technology Security Officer/Manager
This work is completed by the same officer for Information
Security.
o Caldecott Guardian
David Riley, Room 1, 1st Floor, 147 Powis Street, London SE18 6NL.
Tel: 020 8921 2656

2. Electronic Payments
Does your organisation process electronic payment cards?
The only electronic payment cards we process are Credit and Debit
cards which are methods of payment accepted for the collection of income

How much money is processed from electronic payment cards per annum?
Approximately £22m
How many electronic payment card transactions are processed per
annum?
Approximately 175,000
Are you PCI-DSS compliant?

No, though we are working with our acquiring bank to attain full
compliance by 31st March 2011

3. ISO 27001 - Are you or have you considered becoming ISO 27001
compliant or certified?
ISO 27001 has always been a consideration but has had to be sidelined
due to financial constraints. However, all of the Council's procedures are
modelled on

ISO27001.

4. Government Connect
Are you connected and operationally utilising the Government Connect
network?
Yes
Do you meet the Government Connect version three requirements?
Yes
Please supply your latest CLAS consultant annual Government Connect
assessment/audit report, blanking out any statements which could
contravene a security

concern from a third party reading it.
This document is currently being located, and will be sent on to you
when recovered.
Do you meet the Government Connect version four requirements?
Not necessary until 2011
Please supply the latest internal report for the Government Connect
version four Audit/Assessment, blanking out any statements which could
contravene a security

concern from a third party reading it.
Not available yet

5. Criminal Justice Network
Are you connected to and operationally utilising the Criminal Justice
Network?
Yes
Please supply your latest annual assessment/audit report, blanking
out any statements which could contravene a security concern from a third
party reading it.

This document is currently being located, and will be sent on to you
when recovered.

6. NHS N3 Network
Are you connected to and operationally utilising the NHS N3
Network?
Awaiting connection assessment and confirmation.
Please supply your latest N3 Connection assessment/audit report,
blanking out any statements which could contravene a security concern from
a third party reading

it.
Not applicable

7. Voice and Data Comms
Do both schools and the Council share the same physical network
responsible for voice and data communications?
Schools do not share physical networks with the Council. Schools
voice and data networks are also distinct and organised on a school by
school basis. Schools do

share a common WAN with other London schools provided by London Grid
for Learning.

Alan Soskin
Corporate Information Manager, Greenwich Council
Human Resources & Organisational Improvement
4th floor, Riverside House, Woolwich High Street, London SE18 6BU
Tel: 020 8921 5084

===================================================================================================

show quoted sections