Dear Lewisham Borough Council,

Under the freedom of information act 2000. I write to obtain the following information about the organisations information technology infrastructure equipment:

1. What is your annual IT Budget for 2018 & 2019?
2. Do you outsource your ICT Function and if so to which vendor(s)?
3. When does you Outsource contract expire?

Storage Related
1. What storage vendor(s) and models do you currently use?
2. What is the raw capacity of the storage data in TB & how much of this is utilised?
3. What were the installation dates of the above storage vendor(s)? (Month/Year)
4. When is your planned (or estimated) storage refresh date? (Month/Year)?
5. Do you have any extended warranties, if so, with which supplier?
6. What is your estimated budget for the storage refresh?

Server Related
1. What server vendor(s) and models do you currently use?
2. How many physical and how many virtual servers do you have?
3. What hyper-visor(s) do you currently use?
4. What were the installation dates of the above server vendor(s)? (Month/Year)
5. When is your planned (or estimated) server refresh date? (Month/Year)
6. What is your estimated budget for the server refresh?
7. Do you have any extended warranties, if so, with which supplier?
8. Which operating systems are used?
9. Do you use VDI?
10. Which vendor(s) do you use for VDI? (Citrix, VMware, Microsoft)

Network & Security Related
1. What network vendor(s) and models do you currently use?
2. What are the quantities of the Edge, Core and MP used in your network?
3. What network architecture is currently used?
4. What security solutions are being utilised?
5. What were the installation dates of the above network vendor(s)? (Month/Year)
6. When is your planned (or estimated) Network refresh date? (Month/Year)?
7. What is your estimated budget for the Network refresh?
8. What WI-FI vendor(s) and models to you currently use?
9. What were the installation dates of the above WI-FI vendor(s)? (Month/Year)
10. When is your planned (or estimated) WI-FI refresh date? (Month/Year)?
11. What is your estimated budget for the WI-FI refresh?
12. Do you use two-factor authentication?
13. What vendor(s) supply your two-factor authentication?

End User Device Related
1. How many desktops/laptops are deployed by the Council?
2. What vendor(s) supply your desktops/Laptops?
3. How many mobile devices [Phones & tablets etc] are deployed by the council?
4. What were the installation dates of the above desktop/laptops?
5. When is your planned (or estimated) desktop/laptop refresh date? (Month/Year)

Backup, DR and BC:
1. What device/system do you use for your daily backups (e.g tape or disk)
2. What backup software do you use?
3. How much data do you backup, in TB?
4. Do you use a third party to provide a Business Continuity service (e.g. office workplace recovery or infrastructure ship-to-site solutions)?
5. Does your current recovery solution meet your stakeholder’s expectations?
6. Do you already backup into the cloud?
7. Do you have a documented disaster recovery & business continuity plan in place?

Cloud
1. Do you have a cloud strategy if so what is it?
2. Do you use Azure or Amazon Web Services?
3. Do you use or are you planning to use MS O365?
4. Are you actively moving any applications/infrastructure into a cloud environment? If so who is responsible for this?

Systems Management & Monitoring
1. What systems management tools / software do you currently use?
2. What was the costs of the systems management tools / software you use?
3. What were the installation of the systems management tools / software (Month/Year)
4. What warranty / support contract do you have for your systems management tools / software and when does this end / expire (Month /Year)

Yours faithfully,

Andrew Mercer

Foi, Customer, Lewisham Borough Council

Dear Mr Mercer,

Re: Freedom of Information Act 2000
Environmental Information Regulations 2004
Reference No: 447466

Thank you for your recent request for information from the London Borough of Lewisham. Your request is being handled under either the Freedom of Information Act 2000 or the Environmental Information Regulations 2004.

Your request is being considered and you will receive a response within the statutory timescale of 20 working days, subject to the application of any exemptions/exceptions. Where consideration is being given to exemptions/exceptions, the 20 working day timescale may be extended to a period considered reasonable depending on the nature and circumstances of your request. In such cases you will be notified and, where possible, a revised time-scale will be indicated. In all cases we shall attempt to deal with your request at the earliest opportunity.

There may be a fee payable for the retrieval, collation and provision of the information requested where the request exceeds the statutory limit or where disbursements exceed £10. In such cases you will be informed in writing and your request will be suspended until we receive payment from you or your request is modified and/or reduced.

Your request may require either full or partial transfer to another public authority. You will be informed if your request is transferred. If we are unable to provide you with the information requested we will notify you of this together with the reason(s) why and details of how you may appeal (if appropriate). Please note that the directorate team may contact you for further information where we believe that the request is not significantly clear for us to respond fully.

Kind Regards,

Corporate Complaints and Casework Team

show quoted sections

Rahman, Davina, Lewisham Borough Council

Dear Andrew

 

Re: Freedom of Information Act 2000

 

Thank you for your request for information held  by London Borough of
Lewisham. I have included below a copy of your request, followed by the
Council’s response next to each heading.

 

1. What is your annual IT Budget for 2018 & 2019?

 

The Information Management and Technology division’s budget for the
financial year 2018/19 is £4.9m

 

We can confirm that the budget for 2019/20 has not yet been set

 

 

2. Do you outsource your ICT Function and if so to which vendor(s)?

No

 

3. When does you Outsource contract expire?

N/A

 

Storage Related (Shared with London Borough of Brent)

1. What storage vendor(s) and models do you currently use?

Dell Compellent SC8000

 

2. What is the raw capacity of the storage data in TB & how much of this
is utilised?

8PB/1PB

 

3. What were the installation dates of the above storage vendor(s)?
(Month/Year)

2017 (upgrade, original install 2015)

 

4. When is your planned (or estimated) storage refresh date? (Month/Year)?

No planned refresh but do not expect it to be prior to 2022

 

5. Do you have any extended warranties, if so, with which supplier?

No

 

6. What is your estimated budget for the storage refresh?

None

 

 

Server Related (Shared with London Borough of Brent)

1. What server vendor(s) and models do you currently use?

Dell M630, M620, M170, R630, R730, Oracle S2

 

2. How many physical and how many virtual servers do you have?

Approx 150 physical/1200 virtual

 

3. What hyper-visor(s) do you currently use?

VMWare, Microsoft

 

4. What were the installation dates of the above server vendor(s)?
(Month/Year)

Various dates, majority 2015 onwards

 

5. When is your planned (or estimated) server refresh date? (Month/Year)

No planned refresh, individual servers may be replaced as and when
required, overall refresh not expected prior to 2022

 

6. What is your estimated budget for the server refresh?

None

 

7. Do you have any extended warranties, if so, with which supplier?

Yes  we do. These are with Dell

 

8. Which operating systems are used?

Windows, Linux, Solaris

 

9. Do you use VDI?

Yes, but limited, most of our estate is RDS

 

10. Which vendor(s) do you use for VDI? (Citrix, VMware, Microsoft)

Quest vWorkspace

 

Network & Security Related (Shared with London Borough of Brent)

1. What network vendor(s) and models do you currently use?

Juniper, Cisco, HP

 

2. What are the quantities of the Edge, Core and MP used in your network?

14 Core, 350 Edge

 

3. What network architecture is currently used?

We do not share any information that has the potential to expose security
vulnerabilities

 

4. What security solutions are being utilised?

We do not share any information that has the potential to expose security
vulnerabilities

 

 

We apply Section 31 of the Freedom of Information Act 2000, ‘Law
enforcement,‘ to Q3 and Q4 above.

 

Section 31 states:

(1) Information which is not exempt information by virtue of section 30 is
exempt information if its disclosure under this Act would, or would be
likely to, prejudice—

(a) the prevention or detection of crime,

(b) the apprehension or prosecution of offenders,

(c) the administration of justice,

(d) the assessment or collection of any tax or duty or of any imposition
of a similar nature,

(e) the operation of the immigration controls,

(f) the maintenance of security and good order in prisons or in other
institutions where persons are lawfully detained,

(g) the exercise by any public authority of its functions for any of the
purposes specified in subsection (2),

(h) any civil proceedings which are brought by or on behalf of a public
authority and arise out of an investigation conducted, for any of the
purposes specified in subsection (2), by or on behalf of the authority by
virtue of Her Majesty’s prerogative or by virtue of powers conferred by or
under an enactment, or

(i) any inquiry held under the [1976 c. 14.] Fatal Accidents and Sudden
Deaths Inquiries (Scotland) Act 1976 to the extent that the inquiry arises
out of an investigation conducted, for any of the purposes specified in
subsection (2), by or on behalf of the authority by virtue of Her
Majesty’s prerogative or by virtue of powers conferred by or under an
enactment.

(2) The purposes referred to in subsection (1)(g) to (i) are—

(a) the purpose of ascertaining whether any person has failed to comply
with the law,

(b) the purpose of ascertaining whether any person is responsible for any
conduct which is improper,

(c) the purpose of ascertaining whether circumstances which would justify
regulatory action in pursuance of any enactment exist or may arise,

(d) the purpose of ascertaining a person’s fitness or competence in
relation to the management of bodies corporate or in relation to any
profession or other activity which he is, or seeks to become, authorised
to carry on,

(e) the purpose of ascertaining the cause of an accident,

(f) the purpose of protecting charities against misconduct or
mismanagement (whether by trustees or other persons) in their
administration,

(g) the purpose of protecting the property of charities from loss or
misapplication,

(h) the purpose of recovering the property of charities,

(i) the purpose of securing the health, safety and welfare of persons at
work, and

(j) the purpose of protecting persons other than persons at work against
risk to health or safety arising out of or in connection with the actions
of persons at work.

(3) The duty to confirm or deny does not arise if, or to the extent that,
compliance with section 1(1)(a) would, or would be likely to, prejudice
any of the matters mentioned in subsection (1).

 

This acts as an exemption notice. We have applied this exemption as
section 31(1) (a).  It is important to remember that when information is
released under the Freedom of Information Act 2000, it is considered
released to the wider public. We confirm that  the information is held.

 

This is a qualified exemption and requires the consideration of a public
interest test. In this case we have considered that the public interest
favours non-disclosure. Disclosure of information at this time would
likely prejudice any current or future investigative proceedings in
relation to subsection 2. It is in the wider public interest that the
Council be able to conduct any necessary investigations without prejudice.

 

 

 

5. What were the installation dates of the above network vendor(s)?
(Month/Year)

2017, with some hardware being older, various dates

 

6. When is your planned (or estimated) Network refresh date? (Month/Year)?

Not planned, not expected prior to 2022

 

7. What is your estimated budget for the Network refresh?

None

 

8. What WI-FI vendor(s) and models to you currently use?

Xirrus

 

9. What were the installation dates of the above WI-FI vendor(s)?
(Month/Year)

Various dates, 2012 onwards

 

10. When is your planned (or estimated) WI-FI refresh date? (Month/Year)?

Not planned

 

11. What is your estimated budget for the WI-FI refresh?

None

 

12. Do you use two-factor authentication?

Yes

 

13. What vendor(s) supply your two-factor authentication?

Verisec

 

End User Device Related

1. How many desktops/laptops are deployed by the Council?

Approx 350

 

2. What vendor(s) supply your desktops/Laptops?

Majority is Lenovo

 

3. How many mobile devices [Phones & tablets etc] are deployed by the
council?

Approx 1,250 phones and 500 tablets

 

4. What were the installation dates of the above desktop/laptops?

Various dates over a number of years

 

5. When is your planned (or estimated) desktop/laptop refresh date?
(Month/Year)

Going to market for contract under CCS framework in April 18

 

Backup, DR and BC (Shared with London Borough of Brent)

1. What device/system do you use for your daily backups (e.g tape or disk)

Disk

 

2. What backup software do you use?

Commvault Simpana

 

3. How much data do you backup, in TB?

400TB (full weekly set)

 

4. Do you use a third party to provide a Business Continuity service (e.g.
office workplace recovery or infrastructure ship-to-site solutions)?

No

 

5. Does your current recovery solution meet your stakeholder's
expectations?

Yes

 

6. Do you already backup into the cloud?

No

 

7. Do you have a documented disaster recovery & business continuity plan
in place?

Yes

 

 

Cloud

1. Do you have a cloud strategy if so what is it?

No

 

2. Do you use Azure or Amazon Web Services?

No

 

3. Do you use or are you planning to use MS O365?

Some use, planning to use more extensively

 

4. Are you actively moving any applications/infrastructure into a cloud
environment? If so who is responsible for this?

No

 

 

Systems Management & Monitoring (Shared with London Borough of Brent)

1. What systems management tools / software do you currently use?

SCCM/SCOM

 

2. What was the costs of the systems management tools / software you use?

Licenses are part of our EA costs, implementation in-house over a number
of years. so hard to establish cost

 

3. What were the installation of the systems management tools / software
(Month/Year)

Original installation 10+ years

 

4. What warranty / support contract do you have for your systems
management tools / software and when does this end / expire (Month /Year)

Support is in-house

 

We hope you will find this information helpful.

 

You are free to use the information provided for your own purposes,
including any non-commercial research you are doing and for the purposes
of news reporting. Any other re-use, for example commercial publication,
requires the permission of the copyright holder. You may apply for
permission to re-use this information by submitting a request to
[1][email address]

 

You have a right of appeal against this response which you can exercise by
writing to: Information Governance – 1st floor Town Hall Chambers,
Catford, London. SE6 4RU. Or at: [2][email address]

 

This must be requested within 40 working days of the date of this
response.

 

If you remain dissatisfied after receiving this decision, you then also
have a further right of appeal, which you can make in writing, stating
your reasons to the regulating body, the Information Commissioner's
Office. Contact details are outlined below:

 

[3]https://ico.org.uk/global/contact-us/

 

Telephone: 0303 123 1113.

 

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

 

Yours sincerely

 

Davina

Corporate Complaints

 

 

show quoted sections

Looking for an EU Authority?

You can request documents directly from EU Institutions at our sister site AskTheEU.org . Find out more .

AskTheEU.org