Suppliers and Vendors (Cyber)

The request was successful.

Dear Aberdeenshire Council,

Under the freedom of information act 2000. I write to obtain the following details:

1) Name and role for IT Manager(s) / Officer(s) primarily responsible for cyber security

2) Names of all cyber security providers you work with and buy from

3) Names of all cyber security vendor(s) you use

3b) Renewal date for the above vendor(s)

3c) Cost and duration for the above contract(s)/license(s)

3d) For what purpose do you use the vendor
(E.g. Firewalls E.g.2 Anti-virus E.g.3 Vulnerability scanning E.g.4 PCI)

4) Number of websites the council is responsible for securing

Many thanks,

Tom Collins

Acknowledge email, Aberdeenshire Council

Dear Sir/Madam,

Thank you for your information request.

If you are making a request for information under FOI(S)A we will respond
within the statutory timeframe of 20 working days.

If you are making a request for environmental information under EIRs we
will aim to respond within 20 working days. However for requests of a
complex nature it could take us up to 40 working days. If so we will write
and tell you this within 5 working days of receipt.
If you are making a request for information under DPA we will respond
within the statutory timeframe of 40 calendar days, following receipt of
the necessary fee.

Regards,
Aberdeenshire Information Enquiries

Aberdeenshire Council

Dear Mr Collins

Freedom of Information (Scotland) Act 2002 (“The Act”)

We refer to your request dated 05/09/2017, for the following information FOI: Cyber Security - Vendors & Suppliers; Manager Details.

We confirm that the Council holds the following information, which we believe satisfies your request:

1) Name and role for IT Manager(s) / Officer(s) primarily responsible for cyber security
Nicola Graham, Head of Service (ICT)

2) Names of all cyber security providers you work with and buy from
1. NTS; 2. Microsoft; 3. IT BUS; 4. Tenable

3) Names of all cyber security vendor(s) you use
1. NTS; 2. Microsoft; 3. IT BUS; 4. Tenable

3b) Renewal date for the above vendor(s)
1. 22/9/18; 2. 31/3/19; 3. 1/11/17; 4. 31/3/18

3c) Cost and duration for the above contract(s)/license(s)
1. £316,860 – 4 years; 2. £2,290259 – 3 years (note this cost is for our Microsoft Enterprise Agreement – cyber security is only one part of this cost); 3. £18,300 – 1 year; 4. £1,733 – 1 year

3d) For what purpose do you use the vendor
1. Firewall and Web Filtering; 2. Anti-virus, Mobile Device Management (inc. BYoD); 3. Anti-virus (schools only); 4. Vulnerability scanning

4) Number of websites the council is responsible for securing
Approximately 200

Please contact me as the officer responsible for responding to your request if you have any further queries.

If, for any reason, you are not satisfied with this response, please refer to the further information attached.

Yours faithfully

Freedom of Information Co-ordinator
Business Services - ICT

Further Information:
Aberdeenshire Council’s Review Procedure under the Freedom of Information (Scotland) Act 2002 and the Environmental Information (Scotland) Regulations 2004 can be accessed at the following link:
http://www.aberdeenshire.gov.uk/council-...