FOI release

FOI 005 - Contract information for IT networks

Updated 27 October 2021

Our ref: FOI21/22-005

Date: 10 May 2021

Dear

Re: Freedom of Information Act (FOIA) Request

Thank you for your email of 13 April in which you requested from the Insolvency Service:

“I am currently embarking on a research project around Cyber Security and was hoping you could provide me with some contract information relating to following information:

1. Standard Firewall (Network) - Firewall service protects your corporate Network from unauthorised access and other Internet security threats

2. Anti-virus Software Application - Anti-virus software is a program or set of programs that are designed to prevent, search for, detect, and remove software viruses, and other malicious software like worms, trojans, adware, and more.

3. Microsoft Enterprise Agreement - is a volume licensing package offered by Microsoft.

The information I require is around the procurement side and we do not require any specifics (serial numbers, models, location) that could bring threat/harm to the organisation.

For each of the different types of cyber security services can you please provide me with:

Firewall

1. Who is the existing supplier for this contract?

2. What does the organisation annually spend for each of the contracts?

3. What is the description of the services provided for each contract?

4. Primary Brand (ONLY APPLIES TO CONTRACT 1&2)

5. What is the expiry date of each contract?

6. What is the start date of each contract?

7. What is the contract duration of contract?

8. The responsible contract officer for each of the contracts above? Full name, job title, contact number and direct email address.

9. Number of Licenses (ONLY APPLIES TO CONTRACT 3)”

Your request has been dealt with under the Freedom of Information Act (FOIA).

I can confirm the Insolvency Service holds this information however, some of the information is exempt from disclosure under section 21 of the Freedom of Information Act 2000 as it is reasonable accessible to you from the links provided below. Some of this is also exempt information under section 40(2) and undersection 43 of the Freedom of Information Act 2000.

In relation to Anti-Virus software, Thales use the latest versions of anti-virus definitions and software available from an industry accepted anti-virus software vendor.

1. Who is the existing supplier for this contract? Please see contracts finder publication for this contract: Future Operating Model Network Services - Contracts Finder

2. What does the organisation annually spend for each of the contracts? Total Contract Value Awarded can be seen here: Future Operating Model Network Services - Contracts Finder

3. What is the description of the services provided for each contract? Please see contracts finder publication for this contract:Future Operating Model Network Services - Contracts Finder

4. Primary Brand (ONLY APPLIES TO CONTRACT 1&2) – For contract 1, this is outsourced so we are unable to comment. For contract 2, we use the inbuilt AV that is provided as part of windows 10.

5. What is the expiry date of each contract? – Please see contracts finder publication for this contract: Future Operating Model Network Services - Contracts Finder

6. What is the start date of each contract? Please see contracts finder publication for this contract: Future Operating Model Network Services - Contracts Finder

7. What is the contract duration of contract? Please see contracts finder publication for this contract: Future Operating Model Network Services - Contracts Finder

8. The responsible contract officer for each of the contracts above? Full name, job title, contact number and direct email address. – Exempt information under section 40(2)

9. Number of Licenses (ONLY APPLIES TO CONTRACT 3) – N/A

Contract 3:

1. Who is the existing supplier for this contract? Corporate Software Solutions-Case Management System - Contracts Finder

2. What does the organisation annually spend for each of the contracts? The Total Contract Value Awarded which covers the Service in Question can be seen here: Corporate Software Solutions-Case Management System - Contracts Finder. The Insolvency Service are currently managing a Tender process for replacement of these services and as such will withhold detailed information under section 43(2) in order to protect a fair and open competition.

3. What is the description of the services provided for each contract? Please see contracts finder publication for this contract: Corporate Software Solutions-Case Management System - Contracts Finder

4. Primary Brand (ONLY APPLIES TO CONTRACT 1&2)- N/A

5. What is the expiry date of each contract? – Please see contracts finder publication for this contract: Corporate Software Solutions-Case Management System - Contracts Finder

6. What is the start date of each contract? – Please see contracts finder publication for this contract: Corporate Software Solutions-Case Management System - Contracts Finder

7. What is the contract duration of contract? Please see contracts finder publication for this contract: Corporate Software Solutions-Case Management System - Contracts Finder

8. The responsible contract officer for each of the contracts above? Full name, job title, contact number and direct email address. - Exempt under section 40(2).

9. Number of Licenses (ONLY APPLIES TO CONTRACT 3) – Exempt under Section 43(2).

More information about the exemptions that have been applied is provided below.

Section 40(2) of the FOIA, constitutes personal data. Personal data can only be released if to do so would not contravene any of the data protection principles set out in Article 5(1) of the General Data Protection Regulation and Data Protection Act 2018. The release of the requested personal information in this instance would be unlawful, and not be in keeping with data protection principles outlined above. This is an absolute exemption and does not require a public interest test.

Section 43(2) of the Act provides that information is exempt if its disclosure under this Act would, or would be likely to, prejudice the commercial interests of any person (including the public authority holding it).

In this case, disclosure would be likely to prejudice the commercial interests of the Insolvency Service. This is because the relevant contract is due for renewal, and disclosure of the information would give tendering supplies an unfair advantage over the Service in pricing their tender submission quotes.

The factors I have considered in undertaking the public interest test are as below:

Public interest considerations favouring disclosure

• Promoting accountability and transparency about decisions relating to the use of public money within the Insolvency Service.

Public interest considerations favouring withholding the information

• Disclosure of this will prejudice the information of the Insolvency Service because the Service is going out to tender and disclosure can interfere with value and pricing of the contract.

• Publication of cost of contract and end date would potentially affect the price quoted during the tender process, as tendering companies may seek to closely the current value and wouldn’t offer best prices for value.

On balance, I consider the public interest favours withholding the information at this time.

If you are not satisfied with the response we have provided you and would like us to reconsider our decision by way of an internal review (IR), please contact our Information Rights Team at [email protected] or by post at:

Information Rights Team
The Insolvency Service
3rd Floor
Cannon House
18 Priory Queensway
Birmingham
B4 6FD
United Kingdom

You also have the right to contact the Information Commissioner’s Office (ICO) if you wish for them to investigate any complaint you may have regarding our handling of your request. However, please note that the ICO is likely to expect an IR to have been completed in the first instance.

Yours sincerely,

Information Rights Team The Insolvency Service

The Department for Business, Energy and Industrial Strategy, Official receivers and the Adjudicator are Data Controllers in respect of personal data processed by the Insolvency Service. For the details about how personal data is processed by the agency, please see the full Insolvency Service Personal Information Charter here: https://www.gov.uk/government/organisations/insolvency-service/about/personal-information-charter