External IT service provider/Managed Service Provider (MSP)

The request was successful.

Dear Stoke on Trent City Council,

1) Do you use an external IT service provider/Managed Service Provider (MSP)?

Yes

No

2) Does your provider/MSP serve as a processor of your Personally Identifiable Information (PII)?

Yes

No

If No, thank you for your time.

If Yes, please see below

3) If yes, does your contract/service level agreement (SLA) with the provider(s) have clear provisions for the allocation of responsibilities in the event of a data breach?

Yes

No

4) Have you revisited your original contract(s) to ensure compliance with the General Data Protection Regulation (GDPR)?

Yes

No

5) Does the contract/SLA define the time frame in which a security breach at the provider must reported to you?

Yes

No

6) Do you have policies in place for privileged account management?

Yes

No

7) Has your organisation/service provider/MSP suffered a data breach involving your organisation’s PII in the last 12 months?

Yes

No

8)If yes, how long did it take for them to notify you?

<30 mins

31 mins – 1 day

1 – 2 days

2 – 3 days

More than 3 days

Yours faithfully,

Barry Salmon

FOI, Stoke on Trent City Council

Dear Mr Salmon

 

Your request for information ref. SOT70266

 

Thank you for your request for information about external IT service
providers used by the city council.  Your request was received by the
Information Rights Team on 16 July 2018.  This is being dealt with under
the terms of the appropriate Information Rights legislation.

 

In some circumstances we may charge for information.  If there is a charge
we will let you know, as you will have to pay it before we deal with your
request.

 

Some information does not have to be released under this legislation.  We
will check the information you have asked for and send you as much as
possible.  If another person or organisation is named in the information,
we may have to ask their opinion before we decide what we can give you.

 

You should expect to receive a response to your request on or before 13
August 2018 in line with the legislation's 20 working day statutory
deadline.

 

For your information we may publish the response to your request on our
City Council's website, which can be found at the following address:
[1]www.stoke.gov.uk.

 

If you have any queries about this email please do not hesitate to contact
us.

 

You can find details of how we handle your personal information by
visiting [2]www.stoke.gov.uk/dataprotection.

 

Yours sincerely

 

Information Rights Team

 

Information Rights

Floor 2 Civic Centre Glebe Street

Stoke-on-Trent ST4 1HH

City of Stoke-on-Trent 

t 01782 232853, 01782 233020, 01782 233732, 01782 235965

e [3][Stoke on Trent City Council request email]

 

 

 

 

 

Keep up-to-date with events in the city, job vacancies, news from the city
council and details about services which can help you by signing up to our
email updates at [4]www.stoke.gov.uk/stayconnected

Save time, go online; pay your council tax, manage your benefits, book a
housing repair and report a pothole at a time and place that’s convenient
for you at www.stoke.gov.uk 

**********************************************************************

This message and any attachments are intended for the sole use of the
addressee and may contain information which is privileged, confidential or
classified up to OFFICIAL-SENSITIVE and it must be handled accordingly.
Unless you are the named addressee (or authorised to receive it for the
addressee) you may not copy or use this email or disclose it to anyone
else. If you have received this transmission in error please notify the
sender immediately.

The views and opinions given may not reflect those of the City Council.
Unless this message states it, nothing in its contents should be taken as
an offer or acceptance, forming any contractual obligations.

We accept no liability for any damages, loss or costs resulting from any
reliance placed on the contents of this message.

All email traffic, whether sent via public or private networks, is subject
to appropriate recording and monitoring in accordance with relevant
legislation. We monitor and store email messages and in some cases we are
required by law to disclose details of them.

 Although we have taken every reasonable anti-virus measure, we give no
warranty that this e-mail, or any attachment, is virus free and we
recommend that you scan any attachments for malware and check any links
before opening.

 To find out more about how we use your personal data visit
stoke.gov.uk/dataprotection.

 

********************************************************************** 

References

Visible links
1. http://www.stoke.gov.uk/
2. file:///C:\Users\Kelly005l\AppData\Local\Microsoft\Windows\Temporary%20Internet%20Files\Content.Outlook\434O2OF9\www.stoke.gov.uk\dataprotection
3. mailto:[Stoke on Trent City Council request email]
4. http://www.stoke.gov.uk/stayconnected

hide quoted sections

FOI, Stoke on Trent City Council

Dear Mr Salmon

 

Your request for information ref. SOT70266 about any external IT service
provider used by the city council.

 

We have now considered your request and a copy of the information is
enclosed below.

 

The information supplied may be used for domestic or journalistic
purposes.  Its use for commercial gain including issuing to the public,
social media or computer blogs may be subject to the issue of a licence
under the Reuse of Public Sector Information Regulations 2015.

 

1)    Do you use an external IT service provider/Managed Service Provider
(MSP)?

Response: No

 

2)    Does your provider/MSP serve as a processor of your Personally
Identifiable Information (PII)?

 

Response: No

Questions 3 – 8 are not applicable.

 

If you are unhappy with the service you have received in relation to your
request and wish to make a complaint or request a review of our decision,
you should write to: The Information Rights Manager, Information Rights
Team, Stoke-on-Trent City Council, Floor 2, Civic Centre, Glebe Street,
ST4 1HH, or email [1][Stoke on Trent City Council request email].

 

If, after contacting us, you are not content with the outcome, you may ask
the Information Commissioner for a decision.  Before doing this, please
see the following link for guidance from the Information Commissioner
relating to how to use your information rights responsibly and
effectively, to enable you to gain the best outcome from the process -
[2]http://ico.org.uk/for_the_public.

 

Generally, the Information Commissioner cannot make a decision unless you
have already used our internal review procedure. The Information
Commissioner can be contacted at: The Information Commissioner’s Office,
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, tel: 0303 123
1113 or you can visit their website at [3]www.ico.gov.uk/complaints.aspx.

 

You can find details of how we handle your personal information by
visiting [4]www.stoke.gov.uk/dataprotection.

Yours sincerely

 

Information Rights Team

 

Information Rights

City of Stoke-on-Trent

Floor 2  Civic Centre  Glebe Street  Stoke-on-Trent  ST4 1HH

T: 01782 232853, 01782 233020, 01782 233732, 01782 235965

E: [5][Stoke on Trent City Council request email]

 

Request

Dear Stoke on Trent City Council,

1) Do you use an external IT service provider/Managed Service Provider
(MSP)?

Yes

No

2) Does your provider/MSP serve as a processor of your Personally
Identifiable Information (PII)?

Yes

No

If No, thank you for your time.

If Yes, please see below

3) If yes, does your contract/service level agreement (SLA) with the
provider(s) have clear provisions for the allocation of responsibilities
in the event of a data breach?

Yes

No

4) Have you revisited your original contract(s) to ensure compliance with
the General Data Protection Regulation (GDPR)?

Yes

No

5) Does the contract/SLA define the time frame in which a security breach
at the provider must reported to you?

Yes

No

6) Do you have policies in place for privileged account management?

Yes

No

7) Has your organisation/service provider/MSP suffered a data breach
involving your organisation's PII in the last 12 months?

Yes

No

8)If yes, how long did it take for them to notify you?

<30 mins

31 mins - 1 day

1 - 2 days

2 - 3 days

More than 3 days

Yours faithfully,

Barry Salmon

 

 

 

Keep up-to-date with events in the city, job vacancies, news from the city
council and details about services which can help you by signing up to our
email updates at [6]www.stoke.gov.uk/stayconnected

Save time, go online; pay your council tax, manage your benefits, book a
housing repair and report a pothole at a time and place that’s convenient
for you at www.stoke.gov.uk 

**********************************************************************

This message and any attachments are intended for the sole use of the
addressee and may contain information which is privileged, confidential or
classified up to OFFICIAL-SENSITIVE and it must be handled accordingly.
Unless you are the named addressee (or authorised to receive it for the
addressee) you may not copy or use this email or disclose it to anyone
else. If you have received this transmission in error please notify the
sender immediately.

The views and opinions given may not reflect those of the City Council.
Unless this message states it, nothing in its contents should be taken as
an offer or acceptance, forming any contractual obligations.

We accept no liability for any damages, loss or costs resulting from any
reliance placed on the contents of this message.

All email traffic, whether sent via public or private networks, is subject
to appropriate recording and monitoring in accordance with relevant
legislation. We monitor and store email messages and in some cases we are
required by law to disclose details of them.

 Although we have taken every reasonable anti-virus measure, we give no
warranty that this e-mail, or any attachment, is virus free and we
recommend that you scan any attachments for malware and check any links
before opening.

 To find out more about how we use your personal data visit
stoke.gov.uk/dataprotection.

 

********************************************************************** 

References

Visible links
1. mailto:[Stoke on Trent City Council request email]
2. http://ico.org.uk/for_the_public
3. http://www.ico.gov.uk/complaints.aspx
4. file:///C:\Users\Kelly005l\AppData\Local\Microsoft\Windows\Temporary%20Internet%20Files\Content.Outlook\434O2OF9\www.stoke.gov.uk\dataprotection
5. mailto:[Stoke on Trent City Council request email]
6. http://www.stoke.gov.uk/stayconnected

hide quoted sections