Cambridgeshire Police/Police and Crime Commissioner IT systems overlap

Simone Barrett-White made this Freedom of Information request to Cambridgeshire Constabulary

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was successful.

Simone Barrett-White

Dear Cambridgeshire Constabulary,

During a recent 'Meet and Greet' session on Cambridge market square, the Police and Crime Commissioner (P&CC) Sir Graham Bright stated his office's IT systems and that of the police are separate: 'The communications systems are totally different.' (Please see http://www.rtaylor.co.uk/graham-bright-i... if the full interview is required for more clarification.)

However, it was also noted that P&CC Bright has a 'police.uk' email address.

To that end, I'd like to know the following:

1. The domain registration of http://www.cambridgeshire-pcc.gov.uk/ shows the owner as 'Cambridgeshire Police Authority' What access do the Police Authority have to this site?
2. Does this site reside on a server that also runs non-P&CC systems (specifically, but not limited to, Police Authority ones)?
3. The P&CC has a 'police.uk' email address. Do messages to this account flow through any Police Authority systems? Are there separate mail servers, that have no connection to each other?
4. Are there any IT staff (systems administrators or otherwise) that have access to both the server where the PCC information is, and Police Authority systems? What level of access do they have?
5. Given the seemingly similar systems in use here, what guarantees are there that confidential information aimed solely at the P&CC will not be intercepted by the Police Authority?
6. Do the Police Authority and P&CC sites share netblocks?
7. If the P&CC IT systems are indeed separate from the Police Authority ones, could you provide a network diagram of them both, demonstrating this? If this means two separate diagrams, please indicate if they are in different racks, or even in separate physical locations. If different physical locations, please indicate the traffic flow inwards and out.

I realise that some of this is slightly more technical in nature, and am happy to clarify anything to ease the progress of this request.

Yours faithfully,

Simone Barrett-White

Freedom of Information,

Dear Simone

 

FREEDOM OF INFORMATION REQUEST REFERENCE NO: 0701/2015

 

We acknowledge receipt of your Freedom of Information (FOI) request which
was received by Cambridgeshire Constabulary on 17/08/2015

 

Your request will now be considered in accordance with the Freedom of
Information Act 2000.  You will receive a response within the statutory
timescale of twenty working days as defined by the Act. In some
circumstances, we may be unable to achieve this deadline. If this is the
case, you will be informed and given a revised time-scale at the earliest
opportunity.

 

If we require any further clarification regarding this request, you will
be notified.

 

We would advise you that the nature of certain requests may involve
payment of a fee.  If this is the case, you will be notified.

 

Should you have any further enquiries concerning this matter, please
telephone on 01480 456 111 asking for the Information Access Office or
email [Cambridgeshire Constabulary request email]

 

Regards

 

Julie Purse

Information Access Office

Cambridgeshire Constabulary

 

-----------------------------------------------------------------------

To visit Cambridgeshire Constabulary's website please follow this link:

http://www.cambs-police.co.uk/index.asp

show quoted sections

Freedom of Information,

1 Attachment

Dear Simone

 

FREEDOM OF INFORMATION REQUEST REFERENCE NO: 0701/15

 

In reply to your request for information under the Freedom of Information
Act 2000, received 17/08/15.

 

The Freedom of Information Act 2000 (The Act) requires us to handle all
requests in a manner that is blind to the identity of the requestor.  Any
information released in response to a request is regarded as being
published, and therefore in the public domain without caveat.

 

Request

 

During a recent 'Meet and Greet' session on Cambridge market square, the
Police and Crime Commissioner (P&CC) Sir Graham Bright stated his office's
IT systems and that of the police are separate: 'The communications
systems are totally different.' (Please see
[1]http://www.rtaylor.co.uk/graham-bright-i... if the full
interview is required for more clarification.)

 

However, it was also noted that P&CC Bright has a 'police.uk' email
address.

 

To that end, I'd like to know the following:

 

1. The domain registration of [2]http://www.cambridgeshire-pcc.gov.uk/
shows the owner as 'Cambridgeshire Police Authority' What access do the
Police Authority have to this site?

2. Does this site reside on a server that also runs non-P&CC systems
(specifically, but not limited to, Police Authority ones)?

3. The P&CC has a 'police.uk' email address. Do messages to this account
flow through any Police Authority systems? Are there separate mail
servers, that have no connection to each other?

4. Are there any IT staff (systems administrators or otherwise) that have
access to both the server where the PCC information is, and Police
Authority systems? What level of access do they have?

5. Given the seemingly similar systems in use here, what guarantees are
there that confidential information aimed solely at the P&CC will not be
intercepted by the Police Authority?

6. Do the Police Authority and P&CC sites share netblocks?

7. If the P&CC IT systems are indeed separate from the Police Authority
ones, could you provide a network diagram of them both, demonstrating
this? If this means two separate diagrams, please indicate if they are in
different racks, or even in separate physical locations. If different
physical locations, please indicate the traffic flow inwards and out.

 

We have completed all searches within Cambridgeshire Constabulary and
hereby enclose your response.

 

Response

 

1. Cambridgeshire Police have no administration privilege over this
domain.

2. It is a hosted service run from non-police premises and infrastructure.

3. No, one single email service provided by Cambridgeshire police.

4. System administrators have full network privileges but as per below.

5. Information is maintained on a need to know basis, with structured
rights management applied across the organisation with full logging and
event management against services, down to network share level.

6. Yes

7. Services are provided by Cambridgeshire Police ICT

 

If you are unhappy with this response, please see the attachment, which
sets out your rights to appeal.

 

Should you have any further enquiries concerning this matter, please
contact the Information Access Office via email, or on telephone number
01480 456 111 extension 2034.

 

Regards

 

Donna Milton

Information Access Office

Cambridgeshire Constabulary

 

-----------------------------------------------------------------------

To visit Cambridgeshire Constabulary's website please follow this link:

http://www.cambs-police.co.uk/index.asp

show quoted sections

References

Visible links
1. http://www.rtaylor.co.uk/graham-bright-i...
2. http://www.cambridgeshire-pcc.gov.uk/