Dear Bury College,

I am getting in touch to ask which company supplies the door access card readers on buildings around Bury College (used for contact-less access on student/staff ID cards).

Please give all information relating to:
- The make and model of readers used
- The company which manufactures/distributes the readers
- Any third-party installers/channel partners used to purchase the readers
- The software used to manage the door controllers and readers.
- Approximate quantity of access control readers on site
- Name of the individual(s) responsible for these systems at the college

Additionally, if the college uses readers from multiple suppliers, please give a list of all suppliers.

Thank you in advance.

Yours faithfully,

K York

FOI, Bury College

5 Attachments

Our Ref. FOIA2024-132

Dear K York

Thank you for your freedom of information request. This is to acknowledge
receipt. We will respond within 20 working days.

Kind Regards

Sofia Carroll LLM, PC.dp
Information Governance Manager

Naomi Korn Associates
Bury (Data Protection & FOI Service
College Provider)

Woodbury Centre | Market Street |
Bury | BL9 0DS
[1]www.burycollege.ac.uk
Skills for Jobs - Skills for Life
[2]Facebook[3]Instagram[4]Twitter

From: K York <[FOI #1169523 email]>
Sent: 02 September 2024 11:46
To: FOI <[email address]>
Subject: Freedom of Information request - Access control systems

CAUTION: This email originated from outside of Bury College. DO NOT click
on any links or open attachments unless you recognise the sender and know
the content is safe.

Dear Bury College,

I am getting in touch to ask which company supplies the door access card
readers on buildings around Bury College (used for contact-less access on
student/staff ID cards).

Please give all information relating to:
- The make and model of readers used
- The company which manufactures/distributes the readers
- Any third-party installers/channel partners used to purchase the readers
- The software used to manage the door controllers and readers.
- Approximate quantity of access control readers on site
- Name of the individual(s) responsible for these systems at the college

Additionally, if the college uses readers from multiple suppliers, please
give a list of all suppliers.

Thank you in advance.

Yours faithfully,

K York

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[5][FOI #1169523 email]

Is [6][Bury College request email] the wrong address for Freedom of
Information requests to Bury College? If so, please contact us using this
form:
[7]https://www.whatdotheyknow.com/change_re...

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[8]https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[9]https://www.whatdotheyknow.com/help/ico-...
[10]https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

show quoted sections

FOI, Bury College

5 Attachments

Our Ref. FOIA2024-132

Dear K York

Further to your freedom of information request, I can confirm that we are
withholding all information you asked for under section 31(1)(a) of the
Freedom of Information Act. This is because disclosure would prejudice the
prevention or detection of crime.

The College acknowledges that there is a public interest in the measure
undertaken to secure its buildings and prevent unauthorised access.
However, as disclosure of information under FOI is to the world at large,
such disclosure would be valuable to criminals and those wishing to gain
unauthorised access to College buildings, and those who access its campus.
We would make ourselves vulnerable to these activities, which would not be
in the public interest. On balance, the public interest favours
withholding the information.

I hope that we have responded satisfactorily to your request but if you
wish to have the matter reviewed your request can be referred to Tracy
Pullein. If, following an internal review you are not satisfied with the
outcome you may apply directly to the Information Commissioner for a
decision. They can be contacted at: The Information Commissioner’s Office,
Wycliffe House, Water Lane, Wilmslow, Cheshire SK95AF, ico.org.uk.

If you have any queries about this request do not hesitate to contact me.

Kind Regards

Information Governance Team

Naomi Korn Associates
Bury (Data Protection & FOI Service
College Provider)

Woodbury Centre | Market Street |
Bury | BL9 0DS
[1]www.burycollege.ac.uk
Skills for Jobs - Skills for Life
[2]Facebook[3]Instagram[4]Twitter

From: FOI <[email address]>
Sent: 02 September 2024 12:54
To: K York <[FOI #1169523 email]>
Cc: FOI <[email address]>
Subject: RE: Freedom of Information request - Access control systems

Our Ref. FOIA2024-132

Dear K York

Thank you for your freedom of information request. This is to acknowledge
receipt. We will respond within 20 working days.

Kind Regards

Information Governance Team

Naomi Korn Associates
Bury (Data Protection & FOI Service
College Provider)

Woodbury Centre | Market Street |
Bury | BL9 0DS
[5]www.burycollege.ac.uk
Skills for Jobs - Skills for Life
[6]Facebook[7]Instagram[8]Twitter

From: K York <[9][FOI #1169523 email]>
Sent: 02 September 2024 11:46
To: FOI <[10][email address]>
Subject: Freedom of Information request - Access control systems

CAUTION: This email originated from outside of Bury College. DO NOT click
on any links or open attachments unless you recognise the sender and know
the content is safe.

Dear Bury College,

I am getting in touch to ask which company supplies the door access card
readers on buildings around Bury College (used for contact-less access on
student/staff ID cards).

Please give all information relating to:
- The make and model of readers used
- The company which manufactures/distributes the readers
- Any third-party installers/channel partners used to purchase the readers
- The software used to manage the door controllers and readers.
- Approximate quantity of access control readers on site
- Name of the individual(s) responsible for these systems at the college

Additionally, if the college uses readers from multiple suppliers, please
give a list of all suppliers.

Thank you in advance.

Yours faithfully,

K York

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[11][FOI #1169523 email]

Is [12][Bury College request email] the wrong address for Freedom of
Information requests to Bury College? If so, please contact us using this
form:
[13]https://www.whatdotheyknow.com/change_re...

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[14]https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[15]https://www.whatdotheyknow.com/help/ico-...
[16]https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

show quoted sections

Dear Bury College,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Bury College's handling of my FOI request 'Access control systems'.

My FOI request has been refused on grounds of Section 31: 'Criminal Activity' as it was deemed that releasing the requested information would create a vulnerability for the college when it comes to protecting against criminal activity.

Whilst I would challenge this assessment, I can appreciate that protecting the security of the college is of paramount importance. I would therefore simplify my request to ask for information which shouldn't be considered in breach of Section 31:

- What brand of access control readers does the College use? (this shouldn't be considered sensitive information as the branding is displayed on the readers themselves which the public have access to)
- How many access control readers are there on site?
- Who is responsible for these systems at the college?

Thanks in advance.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/a...

Yours faithfully,

K York

FOI, Bury College

5 Attachments

Thank you for your response, we will review your request in line with our
policy and get back to you as soon as possible.

Kind Regards

Sofia Carroll LLM, PC.dp
Information Governance Manager

Naomi Korn Associates
Bury (Data Protection & FOI Service
College Provider)

Woodbury Centre | Market Street |
Bury | BL9 0DS
[1]www.burycollege.ac.uk
Skills for Jobs - Skills for Life
[2]Facebook[3]Instagram[4]Twitter

From: K York <[FOI #1169523 email]>
Sent: 04 September 2024 13:55
To: FOI <[email address]>
Subject: Internal review of Freedom of Information request - Access
control systems

CAUTION: This email originated from outside of Bury College. DO NOT click
on any links or open attachments unless you recognise the sender and know
the content is safe.

Dear Bury College,

Please pass this on to the person who conducts Freedom of Information
reviews.

I am writing to request an internal review of Bury College's handling of
my FOI request 'Access control systems'.

My FOI request has been refused on grounds of Section 31: 'Criminal
Activity' as it was deemed that releasing the requested information would
create a vulnerability for the college when it comes to protecting against
criminal activity.

Whilst I would challenge this assessment, I can appreciate that protecting
the security of the college is of paramount importance. I would therefore
simplify my request to ask for information which shouldn't be considered
in breach of Section 31:

- What brand of access control readers does the College use? (this
shouldn't be considered sensitive information as the branding is displayed
on the readers themselves which the public have access to)
- How many access control readers are there on site?
- Who is responsible for these systems at the college?

Thanks in advance.

A full history of my FOI request and all correspondence is available on
the Internet at this address:
[5]https://www.whatdotheyknow.com/request/a...

Yours faithfully,

K York

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[6][FOI #1169523 email]

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[7]https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[8]https://www.whatdotheyknow.com/help/ico-...
[9]https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

show quoted sections

FOI, Bury College

5 Attachments

Our Ref. FOI2024-132

Dear K York

You requested an internal review of our handling of your information
request, which we received on 4 September.

This internal review is specific to your information request. We’ve
reviewed the response to see if we have met the requirements of the
Freedom of Information Act (FOIA).

The Vice Principal – Finance and Corporate Resources was the member of
staff who reviewed your appeal. They have not been involved in the
handling of your request before performing this review.

You accepted some of our reasoning following an exemption and requested a
review, providing simplified questions.

Having considered our handling of your request, we have found that that
our decision remains. Specifically:

• We are not providing details on the brand used because it is likely to
be very small/something you’d have to look out for and wouldn’t always
notice without close examination; it would arouse suspicion if someone
was looking at them intently.
• If we provided the number of access control readers on sire, this
could identify if any doors didn’t have access control and so are
vulnerable.
• If we provided the name of the person responsible for these systems,
there would be a risk of phishing/targeted cyber-attacks to access
credentials.

I appreciate that this may not be the result that you were hoping for, but
we are satisfied that our response meets the requirements of the FOIA.

If you still feel that we have not responded appropriately to your
information request, you can complain to the Information Commissioner’s
Office (ICO). You should make complaints to the ICO within six weeks of
receiving the outcome of an internal review. The easiest way to lodge a
complaint is through their website: [1]www.ico.org.uk/foicomplaints.

Kind Regards

Information Governance Manager

Naomi Korn Associates
Bury (Data Protection & FOI Service
College Provider)

Woodbury Centre | Market Street |
Bury | BL9 0DS
[2]www.burycollege.ac.uk
Skills for Jobs - Skills for Life
[3]Facebook[4]Instagram[5]Twitter

From: FOI <[email address]>
Sent: 10 September 2024 09:59
To: K York <[FOI #1169523 email]>
Cc: FOI <[email address]>
Subject: RE: Internal review of Freedom of Information request - Access
control systems

Thank you for your response, we will review your request in line with our
policy and get back to you as soon as possible.

Kind Regards

Sofia Carroll LLM, PC.dp
Information Governance Manager

Naomi Korn Associates
Bury (Data Protection & FOI Service
College Provider)

Woodbury Centre | Market Street |
Bury | BL9 0DS
[6]www.burycollege.ac.uk
Skills for Jobs - Skills for Life
[7]Facebook[8]Instagram[9]Twitter

From: K York <[10][FOI #1169523 email]>
Sent: 04 September 2024 13:55
To: FOI <[11][email address]>
Subject: Internal review of Freedom of Information request - Access
control systems

CAUTION: This email originated from outside of Bury College. DO NOT click
on any links or open attachments unless you recognise the sender and know
the content is safe.

Dear Bury College,

Please pass this on to the person who conducts Freedom of Information
reviews.

I am writing to request an internal review of Bury College's handling of
my FOI request 'Access control systems'.

My FOI request has been refused on grounds of Section 31: 'Criminal
Activity' as it was deemed that releasing the requested information would
create a vulnerability for the college when it comes to protecting against
criminal activity.

Whilst I would challenge this assessment, I can appreciate that protecting
the security of the college is of paramount importance. I would therefore
simplify my request to ask for information which shouldn't be considered
in breach of Section 31:

- What brand of access control readers does the College use? (this
shouldn't be considered sensitive information as the branding is displayed
on the readers themselves which the public have access to)
- How many access control readers are there on site?
- Who is responsible for these systems at the college?

Thanks in advance.

A full history of my FOI request and all correspondence is available on
the Internet at this address:
[12]https://www.whatdotheyknow.com/request/a...

Yours faithfully,

K York

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[13][FOI #1169523 email]

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[14]https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[15]https://www.whatdotheyknow.com/help/ico-...
[16]https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

show quoted sections