IT data on internet connectivity and infrastructure
Freedom of information request reference no: 01.FOI.24.034996
I note you seek access to the following information:
Who provides your WAN and internet connectivity and the annual spend on each Have you , or do you plan to deploy SD Wan services?
Have you got SIP trunks? if so who from and confirm annual spend?
Please confirm who provides your LAN, WIFI and Security infrastructure and can you please confirm your annual spend on each?
Please confirm your data centre switching and security infrastructure and have you deployed cloud-based security and threat management?
Can you provide contact details for your procurement lead / category manager for these services?
Can you provide names and contact details for the following people within your organisation?
• CIO / IT Director
• Head of IT
• Head of Digital Transformation
• Head of Infrastructure
• Head of Networking
• Information/Cyber Security Manager
Decision
I have today decided to disclose some of the requested information. Some data has been withheld as it is exempt from disclosure and therefore this response serves as a Refusal Notice under Section 17 of the Freedom of Information Act 2000 (the Act) by virtue of the following exemptions:
Section 31(1)(a) – Law Enforcement
Section 40(2)(3) – Personal Information
Reason for decision
You have requested information in relation to individuals responsible for certain roles in the MPS including contact details. Although the response below in relation to this, apart from one role, is that the positions don’t exist due to them not being an exact match to the positions in this unit, this information would be exempt from disclosure as it is considered personal information. In addition, the email and phone numbers are also exempt from disclosure and I will explain this further below.
You have also requested information in relation to our data centre switching and security infrastructure, this information is also exempt from disclosure as this could possibly lead to individuals with motive to cause disruption to the MPS’s security and threat management.
Section 31(1)(a) – Law Enforcement - I have claimed this exemption in that the release and publication of the contact details of individuals, would provide persons intent on disrupting the work of the MPS, with information that would assist them in this endeavour.
The release and publication of the telephone numbers and email addresses of these individuals, would provide persons intent on disrupting the work of these officers, with information that would assist them to do so. In this regard, a person with this intent would be likely to use this information to make inappropriate contact or send them vast amounts of unsolicited correspondence. This would tie up the resources of these individuals and cause disruption to the work of the MPS.
When considering whether the release of information is in the public interest, I have to consider whether the public interest is in favour of releasing information into the public domain or whether there is sufficient reason to support withholding the requested information. Having considered your request, I accept that there is a public interest in transparency when any request is made for police information. The public interest favouring release must be balanced against any associated risk and/or prejudice that would be caused by disclosure. Having carefully considered this, I have found that the public release and publication of contact details of these individuals, would provide persons intent on disrupting the work of the MPS, with information that would assist them in this endeavour. Given this I have found that the release of this information is not in the public interest.
Section 40(2)(3)(a)(b) - Personal Information - of the Act provides that any information to which a request for information relates, is exempt information if the first condition of Section 40(3A)(a) is satisfied. The first condition of Section 40(3A)(a) states that personal information is exempt if its disclosure would contravene any of the data protection principles. If the disclosure of the requested personal data would not contravene the data protection principles, the disclosure must also not contravene Sections 3A(b) and 3B of the Act.
There are six principles that are set out in Article 5(1)(a) of the General Data Protection Regulations (GDPR) that dictate when the processing of personal data is lawful. The first principle requires that any processing of personal data must be lawful, fair and transparent. Under Article 6(1)(f) of the GDPR, the disclosure of personal data is considered to be lawful if:
a. There is a legitimate interest in the disclosure of that personal data.
b. The disclosure of the personal data is necessary to meet that legitimate interest.
c. The disclosure would not cause unwarranted harm to the data subject.
The names of these individuals, do not hold roles where they would reasonably expect their names to be published in response to a Freedom of Information Act request. I have not therefore identified a legitimate interest that would be satisfied in disclosing their personal data in response to this request for information.
Disclosure
Who provides your WAN and internet connectivity and the annual spend on each Have you , or do you plan to deploy SD Wan services?
Capgemini
WAN revenue budget 24/25: £5.7m
Internet (Gateways): revenue budget £2.3m. (This includes internet circuits and all associated gateway controls).
SD WAN Services are a roadmap item – no timeframe has been committed.
Have you got SIP trunks? if so who from and confirm annual spend?
BT
CRA Network Services – Circuits revenue budget 24/25: £282k (This includes SIP and Legacy ISDN30)
Please confirm who provides your LAN, WIFI and Security infrastructure and can you please confirm your annual spend on each?
Capgemini
LAN revenue budget 24/25:£1.2m
WIFI (WLAN) revenue budget 24/25: £380k
The LAN, WAN, security and internet connectivity is provided by Capgemini under the MPS Infrastructure Contract which commenced in 2022 with a total contract value of £575m and the SIP trunks are provided by BT under the Call Routing Agreement 2 which commenced in June 2022 with total contract value of £27m.
Please confirm your data centre switching and security infrastructure and have you deployed cloud-based security and threat management?
This information is exempt from disclosure.
Can you provide contact details for your procurement lead / category manager for these services?
This information is exempt from disclosure.
Can you provide names and contact details for the following people within your organisation?
• CIO / IT Director – Darren Scates
• Head of IT – Position does not exists
• Head of Digital Transformation – Position does not exist
• Head of Infrastructure – Position does not exist
• Head of Networking – Position does no exist
• Information/Cyber Security Manager – Position does not exist