Request for information surrounding data loss

Response to this request is long overdue. By law, under all circumstances, West Midlands Combined Authority should have responded by now (details). You can complain by requesting an internal review.

Dear West Midlands Combined Authority,

I would like to know to what extent you have implemented data encryption and cyber insurance policies and losses that you have incurred specifically covering the following;

1. How many laptops, mobile, tablet or USB devices have been lost or stolen from your organisation in the past year (Sept 2021-Sept 2022)? Please specify numbers of each device type.

2. How many of these devices were encrypted? Please specify numbers of each device type.

3. Have you had to disclose or inform the ICO of a data breach as a result of any of these devices being lost or stolen in the past year (Sept 2021-Sept 2022)?

4. Have you had to disclose or inform the ICO of a data breach for any other reason e.g., cloud breach, supply chain breach...

5. How many data breaches (information has been lost, stolen or taken from a system without the knowledge or authorisation of the department/organisation) have you experienced within your organisation (department) within the past year (Sept 2021-Sept 2022)?

6. Do you have an existing cyber insurance policy in place, and how long have you had it? If not, do you plan to invest in cyber insurance in the coming year?

7. Have you had to claim on an existing cyber insurance policy in the past year (Sept 2021-Sept 2022) - if so, what was the reason for this i.e. ransomware attack, phishing scam...

Yours faithfully,

Alicia Broadest

Informationofficer, West Midlands Combined Authority

Thank you for your Freedom of Information request. This is an automated response to acknowledge that your email has been received.
If this is an initial request for information under the Freedom of Information Act, we will respond to your request within 20 working days. Should your email be received outside of normal office working hours, then 20 day period will begin from the next working day.
Should we need further clarification regarding your request we will contact you as soon as possible.
Regards
Information Officer
Website: www.wmca.org.uk<http://www.wmca.org.uk>
16 Summer Lane. Birmingham, B19 3SD
Please consider the environment before printing this email