Computer operating systems

The request was partially successful.

Res ipsa Loquitor

Dear Essex Police,

I am interested to know

- how many computers (desktops, laptops, tablets) are in the Force estate for use by officers and staff?
- which is the prevalent computer operating system across the constabulary (for example Microsoft Windows XP, WIndows7, Windows 10, iOS (Apple), Chrome or other);
- which version of that system is the default;
- regardless which system is the current default, whether there is an intention to move to Windows 10 and if so when and at what estimated cost.

If the force has commenced this move to Windows 10, what approximate proportion of devices are using Windows 10.

I am not seeking any personal information of any kind.

Yours faithfully,

Res ipsa Loquitor (Brian Speedwell)

Info Rights Freedom Essex,

1 Attachment

Thank you for your enquiry which has been logged under the reference
13204. 

Under the Freedom of Information Act we are required to reply within 20
working days.  The Act does not specify a limit to the number of
information requests a public authority may receive or the number of
requests or questions an applicant may submit.  However, there are
exemptions in the Act that can apply and these include where the cost of
complying with the request would extend beyond the reasonable cost limit,
(currently 18 hours or £450), or if the request is otherwise manifestly
unreasonable in its scope or nature. 

 

Requests that ask a great many questions, or a number of detailed requests
submitted at the same time, may make it necessary for Essex Police to
refuse the requests wholly or in part. The exemption at s14 may be engaged
if the burden on the authority is increased through multiple requests on
differing subjects

 

The Information Commissioner’s Office (ICO) has responsibility for
providing oversight and guidance for the legislation and they have
produced advice for applicants on submitting effective requests.  Further
information can be found on the Commissioner’s website at
[1]www.ico.gov.uk specific information relating to submitting a request
can be found at:
[2]https://ico.org.uk/for-the-public/offici...

                                                      

While we process your request, please take the time to consider the ICO’s
advice and whether you feel it may be beneficial to amend or refine your
request. Our team is happy to discuss your request with you and will be
able to provide advice as to what kind of information will be available
from Essex Police.

 

 

Kind Regards

 

 

Information Rights | Information Management | Strategic Change Directorate
| Essex Police

Telephone 01245 452 647
Address: Information Management, Information Rights, Essex Police HQ, PO
Box 2, Chelmsford CM2 6DA 

General email address [3][Essex Police request email]  Please use this
email address for general enquiries for the Information Rights Team.

For specific requests use the relevant email address below.  Further help
and guidance can be access on the Essex Police website “Request
Information” Freedom of Information
[4][email address]

[5]cid:image001.png@01D4EA0F.18BBB1F0

Please note, if you require further information or wish to resubmit a
request please refer to the information found on the Commissioner’s
website regarding submission of effective requests
[6]https://www.ico.org.uk/for_the_public/of...

 

Your right to complain

 

If you feel your request has not been properly handled, or you are
otherwise dissatisfied with the outcome of your request you have the right
to complain.

 

Complaints should be submitted within 20 working days from the date of
this response and should be addressed to the Senior Information Officer at
the above address or by email to:
[7][email address]

 

We will conduct a review to investigate your complaint and endeavour to
reply within 20 working days.

 

Please explain which aspect of the reply you are not satisfied with, and
if your complaint concerns the decision to apply an exemption it would
assist the review if you would outline why you believe the exemption does
not apply.

 

If you are still dissatisfied following our review, you have the right
under Section 50 of the Act to complain directly to the Information
Commissioner. Before considering your complaint, the Information
Commissioner would normally expect you to have exhausted the complaints
procedures provided by Essex Police

 

The Information Commissioner can be contacted at: Information
Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9
5AF or via [8]https://ico.org.uk/

 

 

show quoted sections

Info Rights Freedom Essex,

2 Attachments

Thank you for your enquiry which has been logged under the above
reference.

 

Section 1 of the Freedom of Information Act 2000 (FOIA) places two duties
on public authorities.  Unless exemptions apply, the first duty at Section
1(1)(a) is to confirm or deny whether the information specified in a
request is held.  The second duty at Section 1(1)(b) is to disclose
information that has been confirmed as being held.  Where exemptions are
relied upon Section 17 of FOIA requires that we provide the applicant with
a notice which: a) states that fact b) specifies the exemption(s) in
question and c) states (if that would not otherwise be apparent) why the
exemption applies.

 

In respect of your enquiry:

 

I am interested to know

 

- how many computers (desktops, laptops, tablets) are in the Force estate
for use by officers and staff?

- which is the prevalent computer operating system across the constabulary
(for example Microsoft Windows XP, WIndows7, Windows 10, iOS (Apple),
Chrome or other);

- which version of that system is the default;

- regardless which system is the current default, whether there is an
intention to move to Windows 10 and if so when and at what estimated cost.

 

If the force has commenced this move to Windows 10, what approximate
proportion of devices are using Windows 10.

 

Having completed enquiries within Essex Police in respect of Section
1(1)(a), Essex Police does hold information relating to your request,
Essex Police can confirm in respect of Section 1(1)(b) the following data:

 

How many computers (desktops, laptops, tablets) are in the Force estate
for use by officers and staff?

 

Workstations 3344

Laptops 1980

Tablets 80

 

Essex Police can neither confirm nor deny that any other information is
held by virtue of the following exemptions:

 

Section 24(2) National Security

 

Section 31(3) Law Enforcement

 

Sections 24 and 31 being prejudice based qualified exemptions, both
evidence of harm and public interest considerations need to be articulated
to the applicant.

 

Harm in Confirming or Denying that Information is held

 

Policing is an information-led activity, and information assurance (which
includes information security) is fundamental to how the Police Service
manages the challenges faced.  In order to comply with statutory
requirements, the College of Policing Authorised Professional Practice for
Information Assurance has been put in place to ensure the delivery of core
operational policing by providing appropriate and consistent protection
for the information assets of member organisations, see below link:

 

[1]https://www.app.college.police.uk/app-co...

 

To confirm or deny whether Essex Police uses a certain operating system
would identify vulnerable computer systems and provide actual knowledge,
or not, that this software is used within individual force areas.  In
addition, this would have a huge impact on the effective delivery of
operational law enforcement as it would leave forces open to cyberattack
which could render computer devices obsolete.

 

This type of information would be extremely beneficial to offenders,
including terrorists and terrorist organisations.  It is vitally important
that information sharing takes place with other police forces and security
bodies within the UK to support counter-terrorism measures in the fight to
deprive terrorist networks of their ability to commit crime.

 

To confirm or deny whether or not Essex Police relies on a certain
operating system would be extremely useful to those involved in terrorist
activity as it would enable them to map vulnerable information security
databases.

 

Public Interest Considerations

 

Section 24(2) National Security

 

Factors favour complying with Section 1(1)(a) confirming that information
is held

 

The public are entitled to know how public funds are spent and how
resources are distributed within an area of policing.  To confirm whether
Essex Police utilises Windows 10 would enable the general public to hold
Essex Police to account by highlighting forces who use out of date
software.  In the current financial climate of cuts and with the call for
transparency of public spending this would enable improved public debate
into this subject.

 

Factors against complying with Section 1(1)(a) confirming or denying that
information is held

 

Security measures are put in place to protect the community we serve.  As
evidenced within the harm to confirm information is held would highlight
to terrorists and individuals intent on carrying out criminal activity
vulnerabilities within Essex Police.

 

Taking into account the current security climate within the United
Kingdom, no information (such as the citing of an exemption which confirms
information pertinent to this request is held, or conversely, stating ‘no
information is held’) which may aid a terrorist should be disclosed.  To
what extent this information may aid a terrorist is unknown, but it is
clear that it will have an impact on a force’s ability to monitor
terrorist activity.

 

Irrespective of what information is or is not held, the public entrust the
Police Service to make appropriate decisions with regard to their safety
and protection and the only way of reducing risk is to be cautious with
what is placed into the public domain.

 

The cumulative effect of terrorists gathering information from various
sources would be even more impactive when linked to other information
gathered from various sources about terrorism.  The more information
disclosed over time will give a more detailed account of the tactical
infrastructure of not only a force area, but also the country as a whole.

 

Any incident that results from such a disclosure would, by default, affect
National Security.

 

Section 31(3) Law Enforcement

 

Factors favouring complying with Section 1(1)(a) confirming that
information is held

 

Confirming that information exists relevant to this request would lead to
a better informed public which may encourage individuals to provide
intelligence in order to reduce the risk of police networks being hacked.

 

Factors against complying with Section 1(1)(a) neither confirming nor
denying that information is held

 

Confirmation or denial that information is held in this case would suggest
Essex Police take their responsibility to protect information and
information systems from unauthorised access, destruction, etc.,
dismissively and inappropriately.

 

Balancing Test

 

The points above highlight the merits of confirming or denying the
requested information exists.  The Police Service is charged with
enforcing the law, preventing and detecting crime and protecting the
communities we serve.  As part of that policing purpose, information is
gathered which can be highly sensitive relating to high profile
investigative activity.

 

Weakening the mechanisms used to monitor any type of criminal activity,
and specifically terrorist activity would place the security of the
country at an increased level of danger.

 

In order to comply with statutory requirements and to meet NPCC
expectation of the Police Service with regard to the management of
information security a national policy approved by the College of Policing
titled National Policing Community Security Policy has been put in place. 
This policy has been constructed to ensure the delivery of core
operational policing by providing appropriate and consistent protection
for the information assets of member organisations.  A copy of this can be
found at the below link:

 

[2]http://library.college.police.uk/docs/AP...

 

In addition, anything that places that confidence at risk, no matter how
generic, would undermine any trust or confidence individuals have in the
Police Service.  Therefore, at this moment in time, it is our opinion that
for these issues the balance test favours neither confirming nor denying
that information is held.

 

Thank you for your interest in Essex Police.

 

Kind regards

 

 

Information Rights | Information Management | Strategic Change Directorate
| Essex Police

Telephone 01245 452647 | Email [3][email address]

Address: Information Management, Information Rights, Essex Police HQ, PO
Box 2, Chelmsford CM2 6DA  (for Sat Nav directions, use CM2 6DN for HQ)

[4]cid:image001.png@01D4EA0F.18BBB1F0

Please note, if you require further information or wish to resubmit a
request please refer to the information found on the Commissioner’s
website regarding submission of effective requests: 
[5]https://www.ico.org.uk/for_the_public/of...

 

Your right to complain

 

If you feel your request has not been properly handled, or you are
otherwise dissatisfied with the outcome of your request you have the right
to complain.

 

Complaints should be submitted within 20 working days from the date of
this response and should be addressed to the Senior Information Officer at
the above address or by email to:
 [6][email address]

 

We will conduct a review to investigate your complaint and endeavour to
reply within 20 working days.

 

Please explain which aspect of the reply you are not satisfied with, and
if your complaint concerns the decision to apply an exemption it would
assist the review if you would outline why you believe the exemption does
not apply.

 

If you are still dissatisfied following our review, you have the right
under Section 50 of the Act to complain directly to the Information
Commissioner.  Before considering your complaint, the Information
Commissioner would normally expect you to have exhausted the complaints
procedures provided by Essex Police.

 

The Information Commissioner can be contacted at: Information
Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9
5AF or via [7]https://ico.org.uk/

 

 

 

From: Info Rights Freedom Essex <[email address]>
Sent: 29 May 2019 09:11
To: Res ipsa Loquitor <[FOI #578500 email]>
Subject: FOI - Reference 13204 - Computers & Computer Operating Systems

 

Thank you for your enquiry which has been logged under the reference
13204.

Under the Freedom of Information Act we are required to reply within 20
working days. The Act does not specify a limit to the number of
information requests a public authority may receive or the number of
requests or questions an applicant may submit. However, there are
exemptions in the Act that can apply and these include where the cost of
complying with the request would extend beyond the reasonable cost limit,
(currently 18 hours or £450), or if the request is otherwise manifestly
unreasonable in its scope or nature.

 

Requests that ask a great many questions, or a number of detailed requests
submitted at the same time, may make it necessary for Essex Police to
refuse the requests wholly or in part. The exemption at s14 may be engaged
if the burden on the authority is increased through multiple requests on
differing subjects

 

The Information Commissioner’s Office (ICO) has responsibility for
providing oversight and guidance for the legislation and they have
produced advice for applicants on submitting effective requests. Further
information can be found on the Commissioner’s website at
[8]www.ico.gov.uk specific information relating to submitting a request
can be found at:
[9]https://ico.org.uk/for-the-public/offici...

 

While we process your request, please take the time to consider the ICO’s
advice and whether you feel it may be beneficial to amend or refine your
request. Our team is happy to discuss your request with you and will be
able to provide advice as to what kind of information will be available
from Essex Police.

 

 

Kind Regards

 

 

Information Rights | Information Management | Strategic Change Directorate
| Essex Police

Telephone 01245 452 647
Address: Information Management, Information Rights, Essex Police HQ, PO
Box 2, Chelmsford CM2 6DA

General email address [10][Essex Police request email] Please use
this email address for general enquiries for the Information Rights Team.

For specific requests use the relevant email address below. Further help
and guidance can be access on the Essex Police website “Request
Information” Freedom of Information
[11][email address]

[12]cid:image001.png@01D4EA0F.18BBB1F0

Please note, if you require further information or wish to resubmit a
request please refer to the information found on the Commissioner’s
website regarding submission of effective requests
[13]https://www.ico.org.uk/for_the_public/of...

 

Your right to complain

 

If you feel your request has not been properly handled, or you are
otherwise dissatisfied with the outcome of your request you have the right
to complain.

 

Complaints should be submitted within 20 working days from the date of
this response and should be addressed to the Senior Information Officer at
the above address or by email to:
[14][email address]

 

We will conduct a review to investigate your complaint and endeavour to
reply within 20 working days.

 

Please explain which aspect of the reply you are not satisfied with, and
if your complaint concerns the decision to apply an exemption it would
assist the review if you would outline why you believe the exemption does
not apply.

 

If you are still dissatisfied following our review, you have the right
under Section 50 of the Act to complain directly to the Information
Commissioner. Before considering your complaint, the Information
Commissioner would normally expect you to have exhausted the complaints
procedures provided by Essex Police

 

The Information Commissioner can be contacted at: Information
Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9
5AF or via [15]https://ico.org.uk/

 

 

show quoted sections