IT service provider/Managed Service Provider (MSP)

Barry Salmon made this Freedom of Information request to Gloucester City Council

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was successful.

Dear Gloucester City Council,

1) Do you use an external IT service provider/Managed Service Provider (MSP)?

Yes

No

2) Does your provider/MSP serve as a processor of your Personally Identifiable Information (PII)?

Yes

No

If No, thank you for your time.

If Yes, please see below

3) If yes, does your contract/service level agreement (SLA) with the provider(s) have clear provisions for the allocation of responsibilities in the event of a data breach?

Yes

No

4) Have you revisited your original contract(s) to ensure compliance with the General Data Protection Regulation (GDPR)?

Yes

No

5) Does the contract/SLA define the time frame in which a security breach at the provider must reported to you?

Yes

No

6) Do you have policies in place for privileged account management?

Yes

No

7) Has your organisation/service provider/MSP suffered a data breach involving your organisation’s PII in the last 12 months?

Yes

No

8)If yes, how long did it take for them to notify you?

<30 mins

31 mins – 1 day

1 – 2 days

2 – 3 days

More than 3 days

Yours faithfully,

Barry Salmon

FOI, Gloucester City Council

1 Attachment

Good morning,

I am writing to acknowledge receipt of your Freedom Of Information (FOI)
request made to Gloucester City Council. 

In accordance with the Freedom of Information Act 2000 (FOIA), we
anticipate to respond to your request for information within 20 working
days.  If this is not the case, we will be in touch to discuss an
extension to this deadline.

For further information on making an FOI request, or to view our online
Publication Scheme, go to our website on [1]www.gloucester.gov.uk.

Kind regards,

Hannah

 

Freedom of Information Officer

Democratic and Electoral Services             [email address]
Gloucester City Council                              01452 396204
Herbert Warehouse
The Docks
Gloucester, GL1 2EQ

References

Visible links
1. http://www.gloucester.gov.uk/

FOI, Gloucester City Council

1 Attachment

Dear Barry Salmon

Re: Freedom of Information request

 

Thank you for your request for information received on 16/07/18

 

Your request is being handled under the Freedom of Information Act 2000
(FOIA).

 

Q.1. Do you use an external IT service provider/Managed Service Provider
(MSP)?
 
Yes/No
A.1.
Yes
 
 
Q.2.
Does your provider/MSP serve as a processor of your Personally
  Identifiable Information (PII)?

  Yes/No

A.2. No

   

If No, thank you for your time.

 

If Yes, please see below

3) If yes, does your contract/service level agreement (SLA) with the
provider(s) have clear provisions for the allocation of
responsibilities in the event of a data breach?

Yes/No

4) Have you revisited your original contract(s) to ensure compliance
with the General Data Protection Regulation (GDPR)?

Yes/No

5) Does the contract/SLA define the time frame in which a security
breach at the provider must reported to you?

Yes/No

6) Do you have policies in place for privileged account management?

Yes/No

7) Has your organisation/service provider/MSP suffered a data breach
involving your organisation’s PII in the last 12 months?

Yes/No

8)If yes, how long did it take for them to notify you?

30 mins

31 mins – 1 day

1 – 2 days

2 – 3 days

More than 3 days

 
A. N/A

 

If you are unhappy with the way your request for information has been
handled, you can request a review by contacting the Council at:

 

 

* E-mail [Gloucester City Council request email]
( Telephone 01452 396 514
+ Post Freedom of Information

Gloucester City Council

Herbert Warehouse

The Docks

Gloucester

GL1 2EQ

 

If you remain dissatisfied with the handling of your request or complaint,
you have a right to appeal to the Information Commissioner at: