IT systems and spend

FOI request reference: CAS-87798
Publication date: July 2022

Request

On-premises systems

1. Does the Authority retain any systems hosted on-premises (i.e. vs. those based on cloud infrastructure)?
2. If answering yes to the above, please advise approximately how many systems remain on-premises.
3. If answering yes to (1), with respect to the Cloud First policy, would the Authority be willing to provide commentary as to why the system (s) remains on premises?

Budget/spend

1. What is the Authority’s total non-salary expenditure budget for this financial year?
2. What was the Authority’s non-salary expenditure total budget in the previous financial year?
3. What is the Authority’s total non-salary budget for information and communications (ICT) in this financial year?
4. What was the Authority’s total non-salary budget for ICT in the previous financial year?
5. Can the Authority please confirm its top 5 ICT suppliers by annual spend and note the requirement fulfilled by the supplier?

ICT contracts

1. How many live agreements does the Authority currently have under the G Cloud 12 framework (RM1557.12)?
2. What is the total annual committed spend for the Authority’s live agreements under the G Cloud 12 framework (RM1557.12)?

Microsoft Limited

1. Is the Authority a user of Microsoft’s Office 365 / O365 suite of products?
2. If answering yes to the above, is this hosted in:
a. Microsoft Azure
b. Amazon Web Services
c. Google Cloud
d. Another service
3. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2017-2018?
4. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2018-2019?
5. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2019-2020?
6. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2020-2021?
7. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2021-2022?

GOOGLE CLOUD EMEA LIMITED

1. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2017-2018?
2. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2018-2019?
3. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2019-2020?
4. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2020-2021?
5. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2021-2022?

AMAZON WEB SERVICES EMEA SARL, UK BRANCH

1. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2017-2018?
2. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2018-2019?
3. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2019-2020?
4. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2020-2021?
5. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2021-2022?
6. Does the Authority hold an agreement with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) under AWS Marketplace – BYOL offering (Service ID# 510212267409362) on G Cloud 12 (RM1557.12)?
a. If answering yes:
i. What is the start date for the Call Off Contract?
ii. What is the end date for the Call Off Contract?
iii. What is the Authority’s total contract value for the Call Off Contract?
iv. What is the Authority’s total expenditure under the Call Off Contract to the end of financial year 2021-2022?
7. Has the Authority obtained any training from AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) under the One Government Value Agreement (OGVA) digital skills fund?

Other services

1. Can the Authority please confirm if it contracts for a cloud-based version of Adobe?
2. Can the Authority please confirm if it contracts for a cloud-based version of SAP?
3. Can the Authority please confirm if it contracts for a cloud-based version of Salesforce?

Outcome

Some information provided.

Response

On-premises systems

1. Does the Authority retain any systems hosted on-premises (i.e. vs. those based on cloud infrastructure)?

This information is covered by the exemption at section 21 of the FOIA and is contained in a previous FOI response and published on our website. Please use the following link to access our previous response:

The National Archives’ cloud strategy – Freedom of Information

2. If answering yes to the above, please advise approximately how many systems remain on-premises.

This information is covered by the exemption at section 21 of the FOIA and is contained in a previous FOI response and published on our website. Please use the following link to access our previous response:

The National Archives’ cloud strategy – Freedom of Information

3. If answering yes to (1), with respect to the Cloud First policy, would the Authority be willing to provide commentary as to why the system (s) remains on premises?

We do not hold this information.

Budget/spend

1. What is the Authority’s total non-salary expenditure budget for this financial year?

The total non-salary expenditure budget is £28,169,000.

2. What was the Authority’s non-salary expenditure total budget in the previous financial year?

The total non-salary expenditure budget was £27,668,000.

3. What is the Authority’s total non-salary budget for information and communications (ICT) in this financial year?

The total non-salary budget is £1,571,402.

4. What was the Authority’s total non-salary budget for ICT in the previous financial year?

The total non-salary budget was £1,793,171.

5. Can the Authority please confirm its top 5 ICT suppliers by annual spend and note the requirement fulfilled by the supplier?

The National Archives’ top 5 ICT Suppliers by annual spend in 2021-2022:
1. Bechtle Direct Ltd – various requirements
2. Phoenix Software– various requirements
3. Centerprise International – various requirements
4. Camwey Technology – various requirements
5. Core Azure – various requirements

ICT contracts

1. How many live agreements does the Authority currently have under the G Cloud 12 framework (RM1557.12)?

We have 7 live agreements under the G Cloud 12 Framework (RM1557.12).

2. What is the total annual committed spend for the Authority’s live agreements under the G Cloud 12 framework (RM1557.12)?

The total annual committed spend under the G Cloud 12 Framework (RM1557.12) is £147,325.70.

Microsoft Limited

1. Is the Authority a user of Microsoft’s Office 365 / O365 suite of products?

Disclosing software and hardware brands may reveal information that would prejudice the prevention or detection of crime and is exempt under section 31 (1) (a) of the FOI Act.

2. If answering yes to the above, is this hosted in:
a. Microsoft Azure
b. Amazon Web Services
c. Google Cloud
d. Another service

Disclosing software and hardware brands may reveal information that would prejudice the prevention or detection of crime and is exempt under section 31 (1) (a) of the FOI Act.

3. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2017-2018?

We spent £0.00 with MICROSOFT LIMITED (Company number 01624297) during the financial year 2017-2018.

4. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2018-2019?

We spent £0.00 with MICROSOFT LIMITED (Company number 01624297) during the financial year 2018-2019.

5. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2019-2020?

We spent £0.00 with MICROSOFT LIMITED (Company number 01624297) during the financial year 2019-2020.

6. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2020-2021?

We spent £0.00 with MICROSOFT LIMITED (Company number 01624297) during the financial year 2020-2021.

7. Can the Authority please confirm its expenditure with MICROSOFT LIMITED (Company number 01624297) for financial year 2021-2022?

We spent £27,324.00 with MICROSOFT LIMITED (Company number 01624297) for financial year 2021-2022.

GOOGLE CLOUD EMEA LIMITED

1. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2017-2018?

We spent £614.37 with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) in financial year 2017-2018.

2. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2018-2019?

We spent £842.73 with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) in financial year 2018-2019.

3. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2019-2020?

We spent £1,1711.36 with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) in financial year 2018-2019.

4. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2020-2021?

We spent £2,303.65 with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) in financial year 2019-2020.

5. Can the Authority please confirm its expenditure with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) for financial year 2021-2022?

We spent £2,712.01 with GOOGLE CLOUD EMEA LIMITED (DUNS 985760329) in financial year 2021-2022.

AMAZON WEB SERVICES EMEA SARL, UK BRANCH

1. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2017-2018?

We spent £0.00 with AMAZON WEB SERVICES EMEA SARL, UK BRAND (UK establishment number BR019315) in financial year 2017-2018.

2. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2018-2019?

We spent £0.00 with AMAZON WEB SERVICES EMEA SARL, UK BRAND (UK establishment number BR019315) in financial year 2018-2019.

3. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2019-2020?

We spent £0.00 with AMAZON WEB SERVICES EMEA SARL, UK BRAND (UK establishment number BR019315) in financial year 2019-2020.

4. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2020-2021?

We spent £0.00 with AMAZON WEB SERVICES EMEA SARL, UK BRAND (UK establishment number BR019315) in financial year 2020-2021.

5. Can the Authority please confirm its expenditure with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) for financial year 2021-2022?

We spent £0.00 with AMAZON WEB SERVICES EMEA SARL, UK BRAND (UK establishment number BR019315) in financial year 2021-2022.

6. Does the Authority hold an agreement with AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) under AWS Marketplace – BYOL offering (Service ID# 510212267409362) on G Cloud 12 (RM1557.12)?
a. If answering yes:
i. What is the start date for the Call Off Contract?
ii. What is the end date for the Call Off Contract?
iii. What is the Authority’s total contract value for the Call Off Contract?

iv. What is the Authority’s total expenditure under the Call Off Contract to the end of financial year 2021-2022?

We do not hold an agreement with Amazon Web Services EMEA SARL, UK Branch (UK establishment number BR019315) under AWS Marketplace – BYOL offering (Service ID #510212267409362) on G Cloud 12 (RM1557.12).

7. Has the Authority obtained any training from AMAZON WEB SERVICES EMEA SARL, UK BRANCH (UK establishment number BR019315) under the One Government Value Agreement (OGVA) digital skills fund?

We do not hold this information.

Other services

1. Can the Authority please confirm if it contracts for a cloud-based version of Adobe?

Disclosing software and hardware brands may reveal information that would prejudice the prevention or detection of crime and is exempt under section 31 (1) (a) of the FOI Act.

2. Can the Authority please confirm if it contracts for a cloud-based version of SAP?

Disclosing software and hardware brands may reveal information that would prejudice the prevention or detection of crime and is exempt under section 31 (1) (a) of the FOI Act.

3. Can the Authority please confirm if it contracts for a cloud-based version of Salesforce?

Disclosing software and hardware brands may reveal information that would prejudice the prevention or detection of crime and is exempt under section 31 (1) (a) of the FOI Act.

Exemptions applied

Section 21: Information readily available to the applicant by other means

Section 21 of the Freedom of Information Act 2000 (FOIA) does not oblige a public authority to provide information if it is already reasonably accessible by other means. In this case the exemption applies because the information is already available.

Further guidance on section 21 can be found at:
Section 21 – Information readily available to the applicant by other means (ICO.org.uk).

Section 31: Law Enforcement

We are unable to provide you with information regarding software brands and specific contract start/end dates because this information is exempt from disclosure under section 31(1)(a) of the FOI Act. Section 31(1)(a) exempts information if its disclosure would or would be likely to prejudice the prevention or detection of crime.

Section 31 is a qualified exemption and we are required to conduct a public interest test when applying any qualified exemption. This means that after it has been decided that the exemption is engaged, the public interest in releasing the information must be considered. If the public interest in disclosing the information outweighs the public interest in withholding it then the exemption does not apply and the information must be released. In the FOI Act there is a presumption that information should be released unless there are compelling reasons to withhold it.

The public interest has now been concluded and the balance of the public interest has been found to fall in favour of withholding information covered by the section 31(1)(a) exemption. Considerations in favour of the release of the information included the principle that there is a public interest in transparency and accountability in disclosing information about government cyber security. However, release of this information would make The National Archives more vulnerable to crime. The crime in question here would be a malicious attack on The National Archives’ computer systems. As such release of this information would be seen to prejudice the prevention or detection of crime by making The National Archives’ computer system more vulnerable to hacking. There is an overwhelming public interest in keeping government computer systems secure which would be served by non-disclosure. This would outweigh any benefits of release. It has therefore been decided that the balance of the public interest lies clearly in favour of withholding the material on this occasion.

Further guidance on section 31 can be found at:
https://ico.org.uk/media/for-organisations/documents/1207/law-enforcement-foi-section-31.pdf.