Dear Ibrahim,

In accordance with the provisions of the Freedom of Information Act you
are required to provide a first and last name in order to make a valid
request.

Would you please provide this in order that I can process your request.

Yours Sincerely,

Christopher Munro,

Data Protection & FOI Officer,

Harper Adams University,

Newport,

Shropshire,

TF10 8NB

From: Ibrahim [mailto:[FOI #433509 email]]
Sent: 22 September 2017 12:41
To: FOI <[Harper Adams University request email]>
Subject: Freedom of Information request - IT Incident Response Plan

Dear Harper Adams University,

Please provide a copy of any IT incident response plans created, relating
to IT incidents/outages/faults experienced in the past 5 years.

In addition please provide a copy of any major IT incident mitigation
plans and risk analysis reports.

Yours faithfully,

Ibrahim

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[1][FOI #433509 email]

Is [2][Harper Adams University request email] the wrong address for Freedom of Information
requests to Harper Adams University? If so, please contact us using this
form:
[3]https://www.whatdotheyknow.com/change_re...

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[4]https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[5]https://www.whatdotheyknow.com/help/ico-...

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

Dear Mr Güney,

Thank you for your FOI request.  I have inserted my replies within your
email below.

Yours Sincerely,

Christopher Munro,

Data Protection & FOI Officer,

Harper Adams University,

Newport,

Shropshire,

TF10 8NB

From: Ibrahim [mailto:[FOI #433509 email]]
Sent: 22 September 2017 12:41
To: FOI <[Harper Adams University request email]>
Subject: Freedom of Information request - IT Incident Response Plan

 Dear Harper Adams University,

Please provide a copy of any IT incident response plans created, relating
to IT incidents/outages/faults experienced in the past 5 years.

R. We do not have any IT incident response plans relating to IT incidents
/ outages / faults experienced in the last 5 years. Therefore under
Section 1(1) of FOI Act this information is not held.

In addition please provide a copy of any major IT incident mitigation
plans and risk analysis reports.
R. We have a number of crisis management plans addressing a variety of
issues. I have attached the plan that deals with computer hacking. We also
have a detailed IT emergency response plan. However, we have decided that
it is not appropriate for us to disclose this document as it may harm our
commercial interests in accordance with Section 43 (2) of the Freedom of
Information Act. Disclosing this information would expose our
vulnerabilities and make us more susceptible to an IT attack and may also
prolong any consequences of such an attack and make it more difficult for
the University to recover its systems following such an attack. This
exemption is subject to the Public Interest Test. Although it may be of
public interest to know what plans we have in place, it is our opinion
that it would be significantly easier to disrupt our systems if this
information was in the public arena and we are therefore withholding the
information under Section 43(2).

If you are unhappy with this decision, we have an internal appeals process
in place. A copy of the appeals process is available here under Section 5
– Complaints for FOI
[1]https://www.harper-adams.ac.uk/general/g...

Yours faithfully,

Ibrahim

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[1][FOI #433509 email]

Is [2][Harper Adams University request email] the wrong address for
Freedom of Information
requests to Harper Adams University? If so, please contact us using this
form:
[3][2]https://www.whatdotheyknow.com/change_re...

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[4][3]https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[5][4]https://www.whatdotheyknow.com/help/ico-...

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[5][FOI #433509 email]

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[6]https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
[7]https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.