Skip to main content

Freedom of information request

Network and IT equipment

Freedom of information request reference
CAS-293319
Request resolved

Request

  1. Can you please list the number of devices deployed by your organisation for the following?
    1. Desktop PCs (Mini PC, PC, Chromebox, NUC)
    2. Laptops (Standard, 2-in-1)
    3. Mobile Phones (Smartphones)
    4. Printers (Label printers)
    5. Multi Functional Devices (MFDs)
    6. Tablets (iPad's, all tablets)
    7. Physical Servers
    8. Storage Devices (for example: NAS, SAN)
    9. Networking Infrastructure (for example: Switches, Routers, Interfaces, Wireless Access Points)
      Security Infrastructure (for example: Firewalls, Intrusion Detection Systems (IDS), Virus Monitoring Tools)
  2. Does your organisation have plans to procure any of the below services, if yes then please provide information in the below format. This is for the 2025/26, 2026/27, 2027/28 and 2028/2029 business years.
    1. Cloud computing
    2. Software as a Service (SaaS)
    3. Platform as a Service (PaaS)
    4. Infrastructure as a Service (IaaS)
    5. Anything as a Service (Xaas)
  3. Does your organisation have any plans to procure the below services, if yes then please provide required information in the below format. This is for the 2025/26, 2026/27, 2027/28 and 2028/2029 business years.
    1. Network Security
    2. Cloud Security
    3. Endpoint Security
    4. Mobile Security
    5. IoT Security
    6. Application Security
  4. Does your organisation have any plans to procure below services, if yes then please provide information in the below format. This is for the 2025/26, 2026/27, 2027/28 and 2028/2029 business years.
    1. Data and Analytics
    2. AI and Automation
    3. Digital Transformation
    4. ERP Systems
  5. Has your organisation implemented any form of AI or Automation services, and if not, what is the reason for not implementing?

Outcome

Some information provided.

Response

Question one response

  • Desktop PCs (Mini PC, PC,
  • Chromebox, NUC): 301
  • Laptops (Standard, 2-in-1): 754
  • Mobile Phones (Smartphones): 102
  • Printers (Label printers): 32
  • Multi Functional Devices (MFDs): 25
  • Tablets (iPad's, all tablets): 70
  • Physical Servers: 99
  • Storage Devices (for example: NAS, SAN): 15
  • Networking Infrastructure (for example: Switches, Routers, Interfaces, Wireless Access Points): 356
  • Security Infrastructure (for example: Firewalls, Intrusion Detection Systems (IDS), Virus Monitoring Tools): This information is exempt under Section 31(1)(a) of the Act

Other questions

Question two: We do not hold information about any future procurement plans for these services.

Question three: We do not hold information about any future procurement plans for these services.

Question four: We do not hold information about any future procurement plans for these services.

Question five: We have not implemented any form of AI or Automation services due to no agreed business case, as well as due to the cost.

Annexe

Exemptions applied

Section 31: Law enforcement

We are unable to provide you with information regarding software brands because this information is exempt from disclosure under section 31(1) (a) of the FOI Act. Section 31(1) (a) exempts information if its disclosure would or would be likely to prejudice the prevention or detection of crime.

Section 31 is a qualified exemption and we are required to conduct a public interest test when applying any qualified exemption. This means that after it has been decided that the exemption is engaged, the public interest in releasing the information must be considered.

If the public interest in disclosing the information outweighs the public interest in withholding it then the exemption does not apply and the information must be released. In the FOI Act there is a presumption that information should be released unless there are compelling reasons to withhold it.

The public interest has now been concluded and the balance of the public interest has been found to fall in favour of withholding information covered by the section 31(1)(a) exemption.

Considerations in favour of the release of the information included the principle that there is a public interest in transparency and accountability in disclosing information about government network and IT equipment.

However, release of this information would make The National Archives more vulnerable to crime. The crime in question here would be a malicious attack on The National Archives’ computer systems. As such release of this information would be seen to prejudice the prevention or detection of crime by making The National Archives’ computer system more vulnerable to hacking.

There is an overwhelming public interest in keeping government computer systems secure which would be served by non-disclosure. This would outweigh any benefits of release. It has therefore been decided that the balance of the public interest lies clearly in favour of withholding the material on this occasion.

Further guidance on section 31 can be found on the ICO website.

Back to top