Dear Brunel University,

Under the Freedom of Information Act 2000 may I kindly request the following information about the Universities IT Infrastructure Information. The information needed is as follows:

IT COMPLIANT ROUTE TO PURCHASE - NETWORKING AND SECURITY:
What Frameworks are currently used for any IT Procurement? (ie. SSSNA, NEUPC, Janet, CCS, CPC)?
What framework will the University be using for any future network/security support/services renewal contract?
Has any pre-market engagement been carried out with different technology partners in order to determine that the University (and the Tax payer) is getting “Value for Money” ? Which vendors were approached and was this an open invitation to vendors or closed competition?
Has the University used any VEAT notices in the last few years (for IT Related services, support and supply)

NETWORK:
Who is current Network vendor?
Who is the current network support supplier? Were they assigned via any market engagement / framework tender?
If you use Cisco, do you currently use Smart Collector which is registered with Cisco?
How many switches, routers on network?
How many wireless controllers/ AP’s?
Network contract start date?
Date current Network Support ends / is refreshed (for switches, routers, core etc)
What framework will the University be using for any new/renewal network support contract?
Value of existing Network support contract ?

SECURITY / CYBERSECURITY:
IT Security vendors used?
IT Security Support renewal date?
Do you use 2FA?
What web and email filtering is used?
What DLP is in place?
What SIEM solution is used?
Current firewall vendor / When is current support contract renewal due?
Current Endpoint security vendor? When is Endpoint security support contract renewal?
What Intrusion prevention is used?
When is Intrusion support contract renewal?
Does the University do regular Penetration Testing across the University network ?
How many man days does this Penetration Test cycle take?

ICO - breaches:
How many cyber security breaches has the University had over the past 3 yrs?
Were they reported to the ICO?

CAMPUS SAFETY - EMERGENCY MASS NOTIFICATION
Does the University have a Mass Emergency Notification system in place? (for both staff and students)
What system is used?
When does the current support expire?

Thank you and I look forward to receiving your reply within the allotted timescales detailed in the Act.
Regards
Francois Charles