IT Network and Security 2020

The request was successful.

Francois Charles

Dear Loughborough University,
Under the Freedom of Information Act 2000 may I kindly request the following information about the Universities IT Infrastructure Information. The information needed is as follows:

IT COMPLIANT ROUTE TO PURCHASE - NETWORKING AND SECURITY:
What Frameworks are currently used for any IT Supply/Services/Support Procurement? (ie. SSSNA, NEUPC, Janet, CCS, CPC etc)?
What framework will the University be using for any future Storage, Network/Security supply/support/services renewal contract?
Does the University carry out any form of pre-market engagement with different technology partners in order to determine that the University (and the Tax payer) is getting “Value for Money” ?

NETWORK:
Who is current Network vendor?
Who is the current network support supplier? Were they assigned via any market engagement / framework tender?
If you use Cisco, do you currently use Smart Collector which is registered with Cisco?
How many switches, routers on network?
How many wireless controllers/ AP’s?
Network contract start date?
Date current Network Support ends / is refreshed (for switches, routers, core etc)
What framework will the University be using for any new/renewal network support contract?
Value of existing Network support contract ?

SECURITY / CYBERSECURITY:
IT Security vendors used?
IT Security Support renewal date?
Do you use 2FA?
What web and email filtering is used?
What DLP is in place?
What SIEM solution is used?
Current firewall vendor / When is current support contract renewal due?
Current Endpoint security vendor? When is Endpoint security support contract renewal?
What Intrusion prevention is used?
When is Intrusion support contract renewal?
Does the University do regular Penetration Testing across the University network ?
How many man days does this Penetration Test cycle take?

ICO - breaches:
How many cyber security breaches has the University had over the past 3 yrs?
Were they reported to the ICO?

CAMPUS SAFETY - EMERGENCY MASS NOTIFICATION
Does the University have a Mass Emergency Notification system in place? (for both staff and students)
What system is used?
When does the current support expire/renew?

Thank you and I look forward to receiving your reply within the allotted timescales detailed in the Act.
Regards
Francois Charles

Dear Loughborough University,

Please could you provide me with an update as to when I may expect a reply to my FOI? By law, this should have been submitted by 10th Agust 2020.

Thank you
Francois Charles

Loughborough University Freedom of Information, Loughborough University

Catherine Smethurst
Freedom of Information Officer
Rutland Building, Loughborough University, Leics., LE11 3TU

Web: https://www.lboro.ac.uk/data-privacy/foi/

27 September 2020

Name: Francois Charles
Address: By email

Ref: FOI2115

Dear Mr Charles,

I am writing in response to your Freedom of Information request. Please accept my apologies for the delay in replying. Responsibility for FOI requests sit within the Student Records team at the University and unfortunately the Covid-19 pandemic has brought us a huge amount of additional work this summer in order to ensure the normal functioning of the University so that our students were able to undertake assessments and obtain their degrees and so that our new intake is able to commence study.

Please find below the information requested.

IT COMPLIANT ROUTE TO PURCHASE - NETWORKING AND SECURITY:
What Frameworks are currently used for any IT Supply/Services/Support Procurement? (ie. SSSNA, NEUPC, Janet, CCS, CPC etc)?
What framework will the University be using for any future Storage, Network/Security supply/support/services renewal contract?
Does the University carry out any form of pre-market engagement with different technology partners in order to determine that the University (and the Tax payer) is getting “Value for Money” ?

NETWORK:
Who is current Network vendor?
Logicalis

Who is the current network support supplier?
Cisco Smartnet

Were they assigned via any market engagement / framework tender?
Yes

If you use Cisco, do you currently use Smart Collector which is registered with Cisco?
Yes

How many switches, routers on network?
891

How many wireless controllers/ AP’s?
4x controllers and circa 5,100 APs.

Network contract start date?
01/08/2019
01/04/2020

Date current Network Support ends / is refreshed (for switches, routers, core etc)
5 Year contract until 31/07/2024
5 Year contract until 31/03/2025

What framework will the University be using for any new/renewal network support contract?
Networking - HE, Supply & Services (HENSS)

Value of existing Network support contract ?
£929,583.62 over five years

SECURITY / CYBERSECURITY:
IT Security vendors used?
Palo Alto Networks
Tenable
Nessus
PortSwigger
Switch.ch
Jisc
Splunk
Microsoft

IT Security Support renewal date?
All IT Security Support is in-house, therefore no renewal date

Do you use 2FA?
Yes (staff only not students)

What web and email filtering is used?
No web filtering
Email filtering using Office 365 technologies

What DLP is in place?
NO DLP solution in place

What SIEM solution is used?
Splunk

Current firewall vendor / When is current support contract renewal due?
Palo Alto Networks - Support until Dec 2023 Current Endpoint security vendor? When is Endpoint security support contract renewal?
Microsoft - Support until July 2023

What Intrusion prevention is used?
Provided as part of firewall technologies

When is Intrusion support contract renewal?
N/A as this is part of the firewall

Does the University do regular Penetration Testing across the University network ?
Yes

How many man days does this Penetration Test cycle take?
Between 25-30 per year

ICO - breaches:
How many cyber security breaches has the University had over the past 3 yrs?
0

Were they reported to the ICO?
N/a

CAMPUS SAFETY - EMERGENCY MASS NOTIFICATION
Does the University have a Mass Emergency Notification system in place? (for both staff and students) What system is used?
We do not have an emergency mass notification system

When does the current support expire/renew?
N/a

I hope this information is useful. If, for any reason, you are dissatisfied with the way in which your request for information has been handled, you may invoke the following complaints procedure: http://www.lboro.ac.uk/admin/ar/policy/f....

Yours sincerely,

Catherine Smethurst

show quoted sections

Dear Catherine
Thank you for supplying the information pertaining to my FOI request.

Have a great day and stay safe.

Yours sincerely,
Francois Charles