FOI Request

Dave Schneider made this Freedom of Information request to East Hampshire District Council

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was partially successful.

Sir/Madam,

I wish to make a request under the Freedom of Information Act. The
following questions and information I wish to have sent to me are
as follows:

Provide, name, address and telephone number for the following
people:
• Senior Information Risk Owner
• Governance Manager
• Information Security Officer/Manager
• Information Technology Security Officer/Manager
• Caldecott Guardian

PCI-DSS
Does your organisation process electronic payment cards?
How much money is processed from electronic payment cards per
annum?
How many electronic payment card transactions are processed per
annum?
Are you PCI-DSS compliant?

ISO 27001
Are you or have you considered becoming ISO 27001 compliant or
certified?

Government Connect
Are you connected and operationally utilising the Government
Connect network? If not have you considered connecting to
Government Connect and why was the decision made not to connect?
Do you meet the Government Connect version three requirements?
Please supply your latest CLAS consultant annual Government Connect
assessment/audit report, blanking out any statements which could
contravene a security concern from a third party reading it.
Do you meet the Government Connect version four requirements?
Please supply the latest internal report for the Government Connect
version four Audit/Assessment, blanking out any statements which
could contravene a security concern from a third party reading it.

Criminal Justice Network
Are you connected to and operationally utilising the Criminal
Justice Network? If not have you considered connecting to the
Criminal Justice Network and why was the decision made not to
connect?
Please supply your latest annual assessment/audit report, blanking
out any statements which could contravene a security concern from a
third party reading it.

NHS N3 Network
Are you connected to and operationally utilising the NHS N3
Network? If not have you considered connecting to the NHS N3
network and why was the decision made not to connect?
Please supply your latest N3 Connection assessment/audit report,
blanking out any statements which could contravene a security
concern from a third party reading it.
Do both schools and the Council share the same physical network
responsible for voice and data communications?

Yours faithfully,

Dave Schneider

East Hampshire District Council

Ref: FOI 14493
Dear Mr Schneider
Thank you for your request for information in relation to providing
information on PCI-DSS, ISO 27001, Government Connect, Criminal Justice
Network, NHS N3 Network
Your request is being dealt with under the terms of the Freedom of
Information Act 2000 and will be answered within twenty working days.

If you have any queries about this request do not hesitate to contact me.
Please remember to quote the reference number above in any future
communications.

Yours sincerely

Jo Tarrant - Legal Assistant
East Hampshire District Council
Penns Place Petersfield GU31 4EX
Direct Tel: 01730 234069 Direct Fax: 01730 233935

Think before you print! Save energy and paper! Do you really need to print
this email? Could you print it double sided?

Our mission - Improving People's Lives

Information in this message is confidential and may be
privileged. It is intended solely for the person to whom
it is addressed. If you are not the intended recipient, please
notify the sender, and please delete the message from your
system immediately.

East Hampshire District Council

2 Attachments

Dear Mr Schneider

I have attached our response to your request.

If you have any Queries, please let me know.

Thanks

..Howard

Howard Puddy - IT Services Manager
East Hampshire District Council
Penns Place Petersfield GU31 4EX
Direct Tel: 01730 234051
Email: [1][email address]

Think before you print! Save energy and paper! Do you really need to print
this email?
Could you print it double sided?

Information in this message is confidential and may be
privileged. It is intended solely for the person to whom
it is addressed. If you are not the intended recipient, please
notify the sender, and please delete the message from your
system immediately.

References

Visible links
1. mailto:[email address]

Ben Gidley left an annotation ()

This is one of several for this information. This is the only one I have seen so far that has supplied the GSX code of connection spreadsheet. Others councils have refused saying it is exempt.