1. How many computers on your IT network are operating on Windows 7 or Windows XP?
Devon County Council can neither confirm nor deny that the requested information is held. To do so, would reveal information that is exempt from disclosure under Section 31(1)(a) of the Freedom of Information Act 2000.
The council considers confirming or denying that the requested information is held, would likely reveal information about the council’s IT infrastructure. This could be used by a cyber threat actor to improve the chances of them targeting a successful cyber-attack against Devon County Council.
We recognise there is a public interest in openness and transparency however, there is a stronger public interest in the council maintaining the confidentiality, integrity, and availability of its IT infrastructure. In light of the current cyber security threat landscape facing local government organisations currently, we consider the balance of public interest is best served by us refusing to confirm or deny that the requested information is held at this time.