IT Network and Security 2020
Dear Loughborough University,
Under the Freedom of Information Act 2000 may I kindly request the following information about the Universities IT Infrastructure Information. The information needed is as follows:
IT COMPLIANT ROUTE TO PURCHASE - NETWORKING AND SECURITY:
What Frameworks are currently used for any IT Supply/Services/Support Procurement? (ie. SSSNA, NEUPC, Janet, CCS, CPC etc)?
What framework will the University be using for any future Storage, Network/Security supply/support/services renewal contract?
Does the University carry out any form of pre-market engagement with different technology partners in order to determine that the University (and the Tax payer) is getting “Value for Money” ?
NETWORK:
Who is current Network vendor?
Who is the current network support supplier? Were they assigned via any market engagement / framework tender?
If you use Cisco, do you currently use Smart Collector which is registered with Cisco?
How many switches, routers on network?
How many wireless controllers/ AP’s?
Network contract start date?
Date current Network Support ends / is refreshed (for switches, routers, core etc)
What framework will the University be using for any new/renewal network support contract?
Value of existing Network support contract ?
SECURITY / CYBERSECURITY:
IT Security vendors used?
IT Security Support renewal date?
Do you use 2FA?
What web and email filtering is used?
What DLP is in place?
What SIEM solution is used?
Current firewall vendor / When is current support contract renewal due?
Current Endpoint security vendor? When is Endpoint security support contract renewal?
What Intrusion prevention is used?
When is Intrusion support contract renewal?
Does the University do regular Penetration Testing across the University network ?
How many man days does this Penetration Test cycle take?
ICO - breaches:
How many cyber security breaches has the University had over the past 3 yrs?
Were they reported to the ICO?
CAMPUS SAFETY - EMERGENCY MASS NOTIFICATION
Does the University have a Mass Emergency Notification system in place? (for both staff and students)
What system is used?
When does the current support expire/renew?
Thank you and I look forward to receiving your reply within the allotted timescales detailed in the Act.
Regards
Francois Charles
Dear Loughborough University,
Please could you provide me with an update as to when I may expect a reply to my FOI? By law, this should have been submitted by 10th Agust 2020.
Thank you
Francois Charles
Catherine Smethurst
Freedom of Information Officer
Rutland Building, Loughborough University, Leics., LE11 3TU
Web: https://www.lboro.ac.uk/data-privacy/foi/
27 September 2020
Name: Francois Charles
Address: By email
Ref: FOI2115
Dear Mr Charles,
I am writing in response to your Freedom of Information request. Please accept my apologies for the delay in replying. Responsibility for FOI requests sit within the Student Records team at the University and unfortunately the Covid-19 pandemic has brought us a huge amount of additional work this summer in order to ensure the normal functioning of the University so that our students were able to undertake assessments and obtain their degrees and so that our new intake is able to commence study.
Please find below the information requested.
IT COMPLIANT ROUTE TO PURCHASE - NETWORKING AND SECURITY:
What Frameworks are currently used for any IT Supply/Services/Support Procurement? (ie. SSSNA, NEUPC, Janet, CCS, CPC etc)?
What framework will the University be using for any future Storage, Network/Security supply/support/services renewal contract?
Does the University carry out any form of pre-market engagement with different technology partners in order to determine that the University (and the Tax payer) is getting “Value for Money” ?
NETWORK:
Who is current Network vendor?
Logicalis
Who is the current network support supplier?
Cisco Smartnet
Were they assigned via any market engagement / framework tender?
Yes
If you use Cisco, do you currently use Smart Collector which is registered with Cisco?
Yes
How many switches, routers on network?
891
How many wireless controllers/ AP’s?
4x controllers and circa 5,100 APs.
Network contract start date?
01/08/2019
01/04/2020
Date current Network Support ends / is refreshed (for switches, routers, core etc)
5 Year contract until 31/07/2024
5 Year contract until 31/03/2025
What framework will the University be using for any new/renewal network support contract?
Networking - HE, Supply & Services (HENSS)
Value of existing Network support contract ?
£929,583.62 over five years
SECURITY / CYBERSECURITY:
IT Security vendors used?
Palo Alto Networks
Tenable
Nessus
PortSwigger
Switch.ch
Jisc
Splunk
Microsoft
IT Security Support renewal date?
All IT Security Support is in-house, therefore no renewal date
Do you use 2FA?
Yes (staff only not students)
What web and email filtering is used?
No web filtering
Email filtering using Office 365 technologies
What DLP is in place?
NO DLP solution in place
What SIEM solution is used?
Splunk
Current firewall vendor / When is current support contract renewal due?
Palo Alto Networks - Support until Dec 2023 Current Endpoint security vendor? When is Endpoint security support contract renewal?
Microsoft - Support until July 2023
What Intrusion prevention is used?
Provided as part of firewall technologies
When is Intrusion support contract renewal?
N/A as this is part of the firewall
Does the University do regular Penetration Testing across the University network ?
Yes
How many man days does this Penetration Test cycle take?
Between 25-30 per year
ICO - breaches:
How many cyber security breaches has the University had over the past 3 yrs?
0
Were they reported to the ICO?
N/a
CAMPUS SAFETY - EMERGENCY MASS NOTIFICATION
Does the University have a Mass Emergency Notification system in place? (for both staff and students) What system is used?
We do not have an emergency mass notification system
When does the current support expire/renew?
N/a
I hope this information is useful. If, for any reason, you are dissatisfied with the way in which your request for information has been handled, you may invoke the following complaints procedure: http://www.lboro.ac.uk/admin/ar/policy/f....
Yours sincerely,
Catherine Smethurst
Dear Catherine
Thank you for supplying the information pertaining to my FOI request.
Have a great day and stay safe.
Yours sincerely,
Francois Charles
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now