Cyber security contracts

1. Standard Firewall (Network) – Firewall service protects your corporate Network from unauthorised access and other Internet security threats

1.Who is the existing supplier for this contract?

We consider that the disclosure of this information into the public domain could be used in conjunction with other information already available to increase the chances of a successful cyber-attack against the authority. Therefore, we consider this information is exempt under Section 31(1)(a) of the Freedom of Information Act 2000 (prejudice to the prevention or detection of crime). This exemption is qualified, meaning, we have an obligation to carry out a public interest test to balance the public interest in disclosure against the public interest in protecting the Authority from the consequences of cyber attacks, including the threat to sensitive personal data. On balance we consider that the public interest in the protection of personal data outweighs the public interest in disclosure, therefore this information is exempt.

2. What does the organisation spend for each of contract?

2018 – 2019 Forecast is £24,694.40

3. What is the description of the services provided for each contract?

We consider that the disclosure of this information into the public domain could be used in conjunction with other information already available to increase the chances of a successful cyber-attack against the authority. Therefore, we consider that this information is exempt from disclosure under Section 31(1)(a) of the Freedom of Information Act 2000 (prejudice to the prevention or detection of crime). This exemption is qualified, meaning, we have an obligation to carry out a public interest test to balance the public interest in disclosure against the public interest in protecting the Authority from the consequences of cyber attacks, including the threat to sensitive personal data. On balance we consider that the public interest in the protection of personal data outweighs the public interest in disclosure, therefore this information is exempt.

4. Primary Brand (ONLY APPLIES TO CONTRACT 1&2)

We consider that the disclosure of this information into the public domain could be used in conjunction with other information already available to increase the chances of a successful cyber-attack against the authority. Therefore, we consider that this information is exempt from disclosure under Section 31(1)(a) of the Freedom of Information Act 2000 (prejudice to the prevention or detection of crime). This exemption is qualified, meaning, we have an obligation to carry out a public interest test to balance the public interest in disclosure against the public interest in protecting the Authority from the consequences of cyber attacks, including the threat to sensitive personal data. On balance we consider that the public interest in the protection of personal data outweighs the public interest in disclosure, therefore this information is exempt.

5. What is the expiry date of each contract?

March 2019

6. What is the start date of each contract?

March 2012

7. What is the contract duration of contract?

Five plus 1 plus 1 years

2. Anti-virus Software Application – Anti-virus software is a program or set of programs that are designed to prevent, search for, detect, and remove software viruses, and other malicious software like worms, trojans, adware, and more.

1.Who is the existing supplier for this contract?

We consider that the disclosure of this information into the public domain could be used in conjunction with other information already available to increase the chances of a successful cyber-attack against the authority, and is therefore  exempt from disclosure under Section 31(1)(a) of the Freedom of Information Act 2000 (prejudice to the prevention or detection of crime). This exemption is qualified, meaning, we have an obligation to carry out a public interest test to balance the public interest in disclosure against the public interest in protecting the Authority from the consequences of cyber attacks, including the threat to sensitive personal data. On balance we consider that the public interest in the protection of personal data outweighs the public interest in disclosure, therefore this information is exempt.

2. What does the organisation spend for each of contract? 

Spend on this is included in wider Windows 10 Operating System licence spend and we do not hold a specific figure.

3. What is the description of the services provided for each contract?

We consider that the disclosure of this information into the public domain could be used in conjunction with other information already available to increase the chances of a successful cyber-attack against the authority, and is therefore  exempt from disclosure under Section 31(1)(a) of the Freedom of Information Act 2000 (prejudice to the prevention or detection of crime). This exemption is qualified, meaning, we have an obligation to carry out a public interest test to balance the public interest in disclosure against the public interest in protecting the Authority from the consequences of cyber attacks, including the threat to sensitive personal data. On balance we consider that the public interest in the protection of personal data outweighs the public interest in disclosure, therefore this information is exempt.

4. Primary Brand (ONLY APPLIES TO CONTRACT 1&2)

We consider that the disclosure of this information into the public domain could be used in conjunction with other information already available to increase the chances of a successful cyber-attack against the authority, and is therefore  exempt from disclosure under Section 31(1)(a) of the Freedom of Information Act 2000 (prejudice to the prevention or detection of crime). This exemption is qualified, meaning, we have an obligation to carry out a public interest test to balance the public interest in disclosure against the public interest in protecting the Authority from the consequences of cyber attacks, including the threat to sensitive personal data. On balance we consider that the public interest in the protection of personal data outweighs the public interest in disclosure, therefore this information is exempt.

5. What is the expiry date of each contract?

We do not hold this information for the reason given in the response to Q2.

6. What is the start date of each contract?

We do not hold this information for the reason given in the response to Q2.

7. What is the contract duration of contract?

Ongoing.

3. Microsoft Enterprise Agreement – is a volume licensing package offered by Microsoft.

1. Who is the existing supplier for this contract? –

Software Box Limited

2. What does the organisation spend for each of contract? –

£1,530,143.35

3. What is the description of the services provided for each contract?

Microsoft desktop and Office365 licensing

4. Primary Brand (ONLY APPLIES TO CONTRACT 1&2)

We do not hold this information.

5. What is the expiry date of each contract?

31st August 2021

6. What is the start date of each contract?

1st September 2018

7. What is the contract duration of contract?

3 years

8. The responsible contract officer for each of the contracts above? Full name, job title, contact number and direct email address. 

a. Standard firewall = Adrian Fry, SCOMIS Information Security and Compliance Lead, telephone 01392 383000 – ask for by name, email = adrian.fry@devon.gov.uk

b. Anti virus software =Adrian Fry, SCOMIS Information Security and Compliance Lead,telephone 01392 383000 – ask for by name, email = adrian.fry@devon.gov.uk

c. Microsoft Enterprise Agreement =David Lerew, Supplier Relationship Manager, telephone 01392 383000 -ask for by name, email = david.lerew@devon.gov.uk

9. Number of License (ONLY APPLIES TO CONTRACT 3)

5,124