External IT service provider/Managed Service Provider (MSP)

Barry Salmon made this Freedom of Information request to Hampshire County Council

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was successful.

Dear Hampshire County Council,

1) Do you use an external IT service provider/Managed Service Provider (MSP)?

Yes

No

2) Does your provider/MSP serve as a processor of your Personally Identifiable Information (PII)?

Yes

No

If No, thank you for your time.

If Yes, please see below

3) If yes, does your contract/service level agreement (SLA) with the provider(s) have clear provisions for the allocation of responsibilities in the event of a data breach?

Yes

No

4) Have you revisited your original contract(s) to ensure compliance with the General Data Protection Regulation (GDPR)?

Yes

No

5) Does the contract/SLA define the time frame in which a security breach at the provider must reported to you?

Yes

No

6) Do you have policies in place for privileged account management?

Yes

No

7) Has your organisation/service provider/MSP suffered a data breach involving your organisation’s PII in the last 12 months?

Yes

No

8)If yes, how long did it take for them to notify you?

<30 mins

31 mins – 1 day

1 – 2 days

2 – 3 days

More than 3 days

Yours faithfully,

Barry Salmon

Freedom of Information, Hampshire County Council

Dear Mr Salmon

With reference to your email dated 16 July 2018 in which you are seeking the following information:

1) Do you use an external IT service provider/Managed Service Provider (MSP)?

Yes
No

2) Does your provider/MSP serve as a processor of your Personally Identifiable Information (PII)?

Yes
No

If No, thank you for your time.
If Yes, please see below

3) If yes, does your contract/service level agreement (SLA) with the provider(s) have clear provisions for the allocation of responsibilities in the event of a data breach?

Yes
No

4) Have you revisited your original contract(s) to ensure compliance with the General Data Protection Regulation (GDPR)?

Yes
No

5) Does the contract/SLA define the time frame in which a security breach at the provider must reported to you?

Yes

No

6) Do you have policies in place for privileged account management?

Yes
No

7) Has your organisation/service provider/MSP suffered a data breach involving your organisation’s PII in the last 12 months?

Yes
No

8)If yes, how long did it take for them to notify you?

<30 mins
31 mins – 1 day
1 – 2 days
2 – 3 days
More than 3 days

Your request is being dealt with under the terms of the Freedom of Information Act 2000 and will be answered within twenty working days.

If you have any queries regarding your request please do not hesitate to contact us quoting the reference number above.

Yours sincerely

Amanda Godridge

Amanda Godridge
Senior Information Governance Officer
Corporate Services – Policy/Governance
Hampshire County Council The Castle
Winchester
SO23 8UJ
Telephone: 01962 847374
HPSN2: 847374
www.hants.gov.uk
This email, and any attachments, is strictly confidential and may be legally privileged. It is intended only for the addressee. If you are not the intended recipient, any disclosure, copying, distribution or other use of this communication is strictly prohibited. If you have received this message in error, please contact the sender.
Any request for disclosure of this document under the Data Protection Act 1998 or Freedom of Information Act 2000 should be referred to the sender.

Freedom of Information, Hampshire County Council

1 Attachment

Dear Mr Salmon

Please find attached Hampshire County Council response to your information request.

Yours sincerely
Amanda Godridge

Amanda Godridge
Senior Information Governance Officer
Corporate Services – Policy/Governance
Hampshire County Council The Castle
Winchester
SO23 8UJ
Telephone: 01962 847374
HPSN2: 847374
www.hants.gov.uk
This email, and any attachments, is strictly confidential and may be legally privileged. It is intended only for the addressee. If you are not the intended recipient, any disclosure, copying, distribution or other use of this communication is strictly prohibited. If you have received this message in error, please contact the sender.
Any request for disclosure of this document under the Data Protection Act 1998 or Freedom of Information Act 2000 should be referred to the sender.

Dear Freedom of Information,

There was no answers in your attachment - please can you reattach with the answers?

Yours sincerely,

Barry Salmon

Freedom of Information, Hampshire County Council

1 Attachment

Dear Mr Salmon

Please find attached a revised response highlighting our response to you.

Yours sincerely
Amanda Godridge

Amanda Godridge
Senior Information Governance Officer
Corporate Services – Policy/Governance
Hampshire County Council The Castle
Winchester
SO23 8UJ
Telephone: 01962 847374
HPSN2: 847374
www.hants.gov.uk
This email, and any attachments, is strictly confidential and may be legally privileged. It is intended only for the addressee. If you are not the intended recipient, any disclosure, copying, distribution or other use of this communication is strictly prohibited. If you have received this message in error, please contact the sender.
Any request for disclosure of this document under the Data Protection Act 1998 or Freedom of Information Act 2000 should be referred to the sender.

show quoted sections