Connectivity and Network Services:

Dear Philip Mansfield

Thank you for your request for information which Uttlesford District Council received on 14 February 2023. Your request has been allocated the Councils reference of 23-106.

Your request is being dealt with under the Freedom of Information Act / Environmental Information Regulations and will be answered within 20 working days. In the event that your request is considered complex you may be advised at an early stage in the process that an extension of the normal 20 day timeline will be necessary and the reasons for any extension will be explained to you.

Your request will now be forwarded to the Service Area best placed to supply an appropriate response to your request for information and you should expect to receive your response by 14 March 2023 unless you are advised otherwise.

If you have any queries about your request do not hesitate to contact me.

Your privacy:- We use your personal information such as name and email address so that we can comply with our legal obligations to respond to FOI requests. For further details about the use of information by the Council please see our privacy notice on the Councils website https://www.uttlesford.gov.uk/privacy-no....

Yours sincerely,

FOI Team
Uttlesford District Council
Council Offices
London Road
Saffron Walden
Essex CB11 4ER

T: 01799 510510
E: [Uttlesford District Council request email]

www.uttlesford.gov.uk

facebook.com/UttlesfordDC
twitter.com/UttlesfordDC

show quoted sections

Good afternoon

I refer to your request for information made under the Freedom of Information Act 2000.

a. Who provides your WAN and internet connectivity - Capita
c. Who provides your WAN services, is this MPLS, SD WAN or Internet, - Please see below
d. Who provides your LAN infrastructure e. Who provides your WIFI infrastructure - Please see below
f. Please confirm the manufacturer(s) of your wired network core and edge switching - Please see below
g. When was your core network installed? - 2018
h. Has it been updated subsequently? Yes
i. Who maintains your core network? 3rd Party and in house
j. When is the contract renewal date? Annually
k. Please confirm value of the initial project? Approx £100k
l. Please confirm the value of annual support/maintenance services (in £)? Please see our Annual budget report @ www.Uttlesford.gov.uk

The Council does hold information falling within the scope of your request however, it is not willing to disclose it for questions D, E and F the reasons set out below.
Cyber-attacks involve the commission of criminal offences. Disclosure of the information would, in my view, be likely to prejudice the prevention of crime through its potential impact on the effectiveness of cyber-security measures. Release of information regarding manufacturer brands will give attackers insight into which types of attack are successful and in determining the effectiveness of systems in place to detect such attacks. The availability of this information could compromise measures to protect ICT systems, or identify weaknesses, leaving them vulnerable.
It therefore amounts, in my judgment, to “exempt information” under FoI by virtue of section 31(1)(a), Freedom of Information Act, 2005.
The application of the exemption in section 31(1)(a) is subject to a “public interest” test.
In reaching a view on the balance of public interest, I have taken account of the following considerations.
1. In favour of disclosure:
· There is a public interest in transparency to ensure that public bodies are taking effective steps to counter cyber-attacks.
· Release of the information might help members of the public to reach a view about whether they should entrust their personal information to particular bodies.
2. Against disclosure.
· Release of the information could assist in criminal activity if the information was used by malicious parties to conduct future attacks.
· If ICT systems are attacked, this could lead to loss of confidentiality, integrity and availability of Council information and interfere with the delivery of Council services.
· Adverse effects may go beyond the public body releasing the information if it gives insights into ICT vulnerabilities of other organisations.
I recognise that the arguments in favour of disclosure are strong, but so are the arguments against disclosure. The severe effects of successful cyber-attacks have been all too evident in recent months, not least the difficulties faced by the NHS. In my judgment the balance of the public interest lies in withholding the information you have requested.
I understand that this reply may disappoint you but hope that you understand the reasons.
Please do not hesitate to contact me if you have any further queries or concerns.

If you are dissatisfied with the response to your request, please let us know. If we are unable to resolve the matter quickly then you may wish to pursue this through the Councils complaints procedure and request an internal review be undertaken. Internal review requests should be submitted within 40 working days of the date of receipt of the response to your original letter and should be addressed to: [Uttlesford District Council request email].

If you are not content with the outcome of the internal review, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113 or 01625 545 700 Website: www.ico.org.uk.

Alan Mose
ICT Service Delivery Manager

Uttlesford District Council
Council Offices
London Road
Saffron Walden
Essex CB11 4ER

Tel: 01799 510520
Email:[email address]
www.uttlesford.gov.uk
facebook.com/UttlesfordDC
twitter.com/UttlesfordDC

show quoted sections