Request
1. Can you please list the number of devices deployed by your organisation for the following?
Desktop PCs
Laptops
Mobile Phones
Printers
Multi-Functional Devices (MFDs)
Tablets
Physical Servers
Storage Devices (for example: NAS, SAN)
Networking Infrastructure (for example: Switches,
Routers, Interfaces, Wireless Access Points)
Security Infrastructure (for example: Firewalls,
Intrusion Detection Systems (IDS), Virus Monitoring Tools)
2. Does your organisation plan to procure any of the below enterprise applications or software, if yes, please provide information in the below format.
Content Management System
Supply Chain Management (SCM)
Inventory Management Software
Enterprise Asset Management (EAM) Software
Business Intelligence Systems
Other software/apps (mention the name of the software)
3. Do you have any plans to procure End user devices (desktop/laptop/tablet/mobile phones etc)? if yes, please provide information in the below format.
Desktops
Laptops
Mobile Phones
Tablets and Others (if Others, please specify)
4. Do you have any plans to procure below services/software? if yes, please provide information in the below format.
Artificial Intelligence (AI)
Cyber Security
Outcome
Some information provided.
Response
1. Can you please list the number of devices deployed by your organisation for the following?
Device Type: Number of Devices
Desktop PCs: 301
Laptops: 648
Mobile Phones: 105
Printers: 26
Multi-Functional Devices (MFDs): 21
Tablets: 68
Physical Servers: 98
Storage Devices (for example: NAS, SAN): 15
Networking Infrastructure (for example: Switches,
Routers, Interfaces, Wireless Access Points): 345
Security Infrastructure (for example: Firewalls,
Intrusion Detection Systems (IDS), Virus Monitoring
Tools): Withheld under Section 31(1)a
2. Does your organisation plan to procure any of the below enterprise applications or software, if yes, please provide information in the below format.
Content Management System: Withheld under Section 43(2), We do not hold this information
Supply Chain Management (SCM): Withheld under Section 43(2), We do not hold this information
Inventory Management Software: Withheld under Section 43(2), We do not hold this information
Enterprise Asset Management (EAM) Software: Withheld under Section 43(2), We do not hold this information
Business Intelligence Systems: Withheld under Section 43(2), We do not hold this information
Other software/apps (mention the name of the software): Withheld under Section 43(2), We do not hold this information
3. Do you have any plans to procure End user devices (desktop/laptop/tablet/mobile phones etc)? if yes, please provide information in the below format.
Desktops: Withheld under Section 43(2), We do not hold this information
Laptops: Withheld under Section 43(2), We do not hold this information
Mobile Phones: Withheld under Section 43(2), We do not hold this information
Tablets and Others (if Others, please specify): Withheld under Section 43(2), We do not hold this information
4. Do you have any plans to procure below services/software? if yes, please provide information in the below format.
Artificial Intelligence (AI): Withheld under Section 43(2), We do not hold this information
Explanatory annexe
Exemptions applied
Section 31(1): Law Enforcement
We are unable to provide you with information regarding software, suppliers and vendors because this information is exempt from disclosure under section 31(1) (a) of the FOI Act. Section 31(1) (a) exempts information if its disclosure would or would be likely to prejudice the prevention or detection of crime.
Section 31 is a qualified exemption, and we are required to conduct a public interest test when applying any qualified exemption. This means that after it has been decided that the exemption is engaged, the public interest in releasing the information must be considered. If the public interest in disclosing the information outweighs the public interest in withholding it then the exemption does not apply and the information must be released. In the FOI Act there is a presumption that information should be released unless there are compelling reasons to withhold it.
The public interest has now been concluded and the balance of the public interest has been found to fall in favour of withholding information covered by the section 31(1)(a) exemption. Considerations in favour of the release of the information included the principle that there is a public interest in transparency and accountability in disclosing information about government cyber security. However, release of this information would make The National Archives more vulnerable to crime. The crime in question here would be a malicious attack on The National Archives’ computer systems. As such release of this information would be seen to prejudice the prevention or detection of crime by making The National Archives’ computer system more vulnerable to hacking. There is an overwhelming public interest in keeping government computer systems secure which would be served by non-disclosure. This would outweigh any benefits of release. It has therefore been decided that the balance of the public interest lies clearly in favour of withholding the material on this occasion.
Further guidance on section 31 can be found here: Law enforcement – section 31 | ICO
Section 43(2): Commercial Interests
This section exempts information whose disclosure would be likely to prejudice the commercial interests of any person. In this case, the exemption applies because release would prejudice the commercial interests of current and potential future suppliers and The National Archives.
Section 43(2) is a qualified exemption, and we are required to conduct a public interest test when applying any qualified exemption. This means that after it has been decided that the exemption is engaged, the public interest in releasing the information must be considered. If the public interest in disclosing the information outweighs the public interest in withholding it then the exemption does not apply and the information must be released. In the FOIA there is a presumption that information should be released unless there are compelling reasons to withhold it.
The public interest test has now been concluded and the balance of the public interest has been found to fall in favour of withholding information covered by the section 43(2) exemption.
Considerations in favour of the release of the information included The National Archives’ commitment to openness and transparency in its commercial activities, to allow public scrutiny and to demonstrate that public funds are being used in an efficient and effective way. Furthermore, private sector companies engaging in commercial activities with the public sector must expect some information about those activities to be disclosed.
Considerations against disclosure included the recognition that disclosure is likely to provide information to direct competitors within the market that would create an imbalance and a commercial advantage to those competitors. Furthermore, disclosure of this information is also likely to affect The National Archives’ ability to negotiate contracts in the future and consequently generate revenue from non-public funds. It is also considered that disclosure would be likely to deter potential bidders for future contracts from competing and sharing commercially sensitive information with us. In this case, the exemption applies because it would be likely to harm or prejudice the commercial interests of our current and potential future suppliers.
As such, release of this information is seen to prejudice the commercial interests of both current and potential future suppliers and The National Archives. This would outweigh any benefits of release. It was therefore decided that the balance of the public interest lies clearly in favour of withholding the material on this occasion.
Further guidance on the application of this exemption cab be found here:
https://ico.org.uk/for-organisations/foi-guidance/section-43-commercial-interests/