FOI Request

The answers to your FOI request are contained below:

Sir/Madam,

I wish to make a request under the Freedom of Information Act.
The
following questions and information I wish to have sent to me are
as follows:

Provide, name, address and telephone number for the following
people:
● Senior Information Risk Owner
● Governance Manager
● Information Security Officer/Manager
● Information Technology Security Officer/Manager
● Caldecott Guardian

We don't have anyone with the above job titles. Our Head of IT is:

David Gardner
Council Offices
Llangefni
Anglesey
LL77 7TW
01248-752671

PCI-DSS
Does your organisation process electronic payment cards?
How much money is processed from electronic payment cards per
annum?
How many electronic payment card transactions are processed per
annum?
Are you PCI-DSS compliant?

We do process electronic payment cards.

Money processed p.a. £1,952,973

Transactions p.a. 11187

We are not yet PCI-DSS compliant.

ISO 27001
Are you or have you considered becoming ISO 27001 compliant or
certified?

No.

Government Connect
Are you connected and operationally utilising the Government
Connect network? If not have you considered connecting to
Government Connect and why was the decision made not to connect?
Do you meet the Government Connect version three requirements?
Please supply your latest CLAS consultant annual Government
Connect
assessment/audit report, blanking out any statements which could
contravene a security concern from a third party reading it.
Do you meet the Government Connect version four requirements?
Please supply the latest internal report for the Government
Connect
version four Audit/Assessment, blanking out any statements which
could contravene a security concern from a third party reading
it.

We do use the Government Connect Network.

We do meet the version 3 requirements.

The GCSX Code of Connection report is attached.

Criminal Justice Network
Are you connected to and operationally utilising the Criminal
Justice Network? If not have you considered connecting to the
Criminal Justice Network and why was the decision made not to
connect?
Please supply your latest annual assessment/audit report,
blanking
out any statements which could contravene a security concern from
a
third party reading it.

We don't use this.

NHS N3 Network
Are you connected to and operationally utilising the NHS N3
Network? If not have you considered connecting to the NHS N3
network and why was the decision made not to connect?
Please supply your latest N3 Connection assessment/audit report,
blanking out any statements which could contravene a security
concern from a third party reading it.
Do both schools and the Council share the same physical network
responsible for voice and data communications?

We don't use this.

Yours faithfully,

Dave Schneider

show quoted sections