IT Patch Management Strategy

David Blades made this Freedom of Information request to New College Lanarkshire

This request has been closed to new correspondence. Contact us if you think it should be reopened.

The request was successful.

Dear Coatbridge College,

IT security is a concern to all of us, in particular in an Educational establishment. I would like to know;

a) What patch management solution, if any, is in place?
b) What was the cost of purchasing and installing this solution?
c) What is the cost of annual maintenance or subscription fee for
this service?
d) When is this service due for renewal?
e) Who is responsible for your Patch Management strategy?

Yours faithfully,

David Blades

Dear Coatbridge College,

By law, you are required to have have responded to my FOI request promptly and by 27 April 2011. I await the requested information, at your earliest convenience.
Yours faithfully,

David Blades

Lorraine Gunn,

Dear Mr Blades

I can find no record of your FOI request to Coatbridge College. Can you please let me have a copy of your request so that I can facilitate in a reply.

Many thanks.

Lorraine Sutherland
Freedom of Information Officer

show quoted sections

Dear Lorraine,

Dear Coatbridge College,

IT security is a concern to all of us, in particular in an
Educational establishment. I would like to know;

a) What patch management solution, if any, is in place?
b) What was the cost of purchasing and installing this solution?
c) What is the cost of annual maintenance or subscription fee
for
this service?
d) When is this service due for renewal?
e) Who is responsible for your Patch Management strategy?

Yours faithfully,

David Blades

Yours sincerely,

David Blades

Dear Lorraine Gunn,

IT Patch Management Strategy

IT security is a concern to all of us, in particular in an Educational establishment. I would like to know;

a) What patch management solution, if any, is in place?
b) What was the cost of purchasing and installing this solution?
c) What is the cost of annual maintenance or subscription fee for
this service?
d) When is this service due for renewal?
e) Who is responsible for your Patch Management strategy?

Yours sincerely,

David Blades

Lorraine Gunn,

Dear Mr Blades

Thank you for your letter of 23 May 2011 making a Freedom of Information request in relation to patch management. The response to your questions is as follows:

Q: What patch management solution, if any, is in place?

A: The College operates an in-house patch management system. As I am sure you will appreciate, the College takes the security of its systems very seriously and does not release detailed information on its systems, since to do so could pose potential risks.

Q: What was the cost of purchasing and installing this solution?

A: Covered within IT operational plan at no additional cost.

Q: What is the cost of annual maintenance or subscription fee for this service.

A: None – the only cost to the organisation is the employment of technical staff who operate the systems but the security aspect of their role is only one aspect of a number of responsibilities.

Q: When is this service due for renewal?

A: N/A – in house provision.

Q: Who is responsible for your Patch Management strategy?

A: Derek Banks, Director of Finance & Facilities

I hope that this addresses your request but if you have any queries, please do not hesitate to get in touch.

In the meantime, if you have any complaints about our procedure in respect of handling your request for information, please address correspondence to Derek Banks, Director of Finance & Facilities, Kildonan Street, Coatbridge, ML5 3LS.

You have a right under FOISA to request a review of this decision. If you wish to exercise this right, you must write to us to request a review within forty working days of receipt of this decision. Your request for a review must be in writing and you must specify your name and address for correspondence. You must also identify the decision that you wish reviewed.

Should you wish to request a review, please address your request to Derek Banks, Director of Finance & Facilities. He will ensure that the review will be undertaken by staff not involved in the original decision making process.

If you are dissatisfied with the outcome of a review, you have a right under FOISA to appeal to the Scottish Information Commissioner. If you wish to do so, you must appeal to the Commissioner within six months following the date of receipt of the review notice. The Commissioner’s contact details are as follows:

The Scottish Information Commissioner
Kinburn Castle
Doubledykes Road
St Andrews
Fife
KY16 9DS
Email: [email address]
Tel: 01334 464610

Yours sincerely

Lorraine Gunn
Head of Organisational Development
(Freedom of Information Officer)

show quoted sections