Date of Request
September 23
Request
Freedom of Information Officer
I have been provided with your email to submit a request for information.
The information I require is to do with the organisation’s CCTV maintenance and support contract.
Please can you send me the information stated below:
1. Supplier of the contract for CCTV maintenance and support
2. How much does the Org/s spend annually with the supplier? (if multiple suppliers please list the annual spend for each)
3. What is the renewal date of this contract?
4. What is the duration of the contract?
5. What is the review date of this contract? If possible the likely outcome of this review
6. The primary brand of the CCTV equipment. I don’t require the model just the brand. If there is various brands could you please list?
7. What is the total number of cameras in use/under this contract?
8. The description of the services provided under this contract. Please state if this contract includes more than just CCTV services.
9. Contact details of the employee responsible for the contract between the supplier and the organisation. Can you please provide me with their full contact details
If there is no CCTV maintenance contract in place
1. What is the brand of CCTV cameras in use? if there is variety could you please send me a list? I do not need the serial number or model just the brand.
2. How much is the average annual spend on the in-house maintenance?
3. How many cameras are in use?
4. Is there a plan to review this at any point, if so what would the date be?
5. Who is in charge of overseeing the in-house maintenance?
If there is no maintenance contract or in-house maintenance in place, is there a ad-hoc agreement?
If yes,
1. Who is the supplier? Is this varies could you please list?
2. What is the brand of CCTV cameras in use? if there is variety could you please send me a list? I do not need the serial number or model just the brand.
3. How many cameras are in use?
4. How much is the average annual spend on the ad-hoc agreement?
5. What is the date it is to be reviewed?
I was told that the organisation will send me an acknowledgement stating that they have received my request.
Thanks
Response
Dear X
Thank you for your request for incident information which has been received by Hereford and Worcester Fire and Rescue Service (the Service) and considered under the Freedom of Information Act (FOIA) 2000.
The Service can confirm that the requested information, where available, is below. Other information has been withheld due to security:
Please can you send me the information stated below:
1. Supplier of the contract for CCTV maintenance and support: CVL Security
2. How much does the Org/s spend annually with the supplier? (if multiple suppliers please list the annual spend for each) £66K but this includes Intruder and Access control as is a joint contract as well as call outs
3. What is the renewal date of this contract? Rolling contract
4. What is the duration of the contract? Rolling contract
5. What is the review date of this contract? If possible the likely outcome of this review N/A
6. The primary brand of the CCTV equipment. I don’t require the model just the brand. If there is various brands could you please list? This information is withheld.
7. What is the total number of cameras in use/under this contract? This information is withheld.
8. The description of the services provided under this contract. Please state if this contract includes more than just CCTV services. Maintenance and call out and Intruder and Access Control
9. Contact details of the employee responsible for the contract between the supplier and the organisation. Can you please provide me with their full contact details : The Service does not release staff information.
If there is no CCTV maintenance contract in place: N/A
1. What is the brand of CCTV cameras in use? if there is variety could you please send me a list? I do not need the serial number or model just the brand. N/A
2. How much is the average annual spend on the in-house maintenance? N/A
3. How many cameras are in use? N/A
4. Is there a plan to review this at any point, if so what would the date be? N/A
5. Who is in charge of overseeing the in-house maintenance? N/A
If there is no maintenance contract or in-house maintenance in place, is there a ad-hoc agreement? N/A
Under the Freedom of Information, giving information to one honest requester is the same as publishing it to everyone in the world. If we provide information that tells criminals when we last updated our security software for example, or details about our backup systems they could use that information to exploit any known weaknesses and try to hack our systems.
The Service processes very sensitive data not only personal data but information about emergency response. Emergency operational response information in the wrong hands could make it possible to impede or predict firefighter response. This might assist in the preplanning of a terrorist type attack which might therefore compromise both local and national security in addition to concerns about the health and safety of anyone involved in an incident.
The Service must take all necessary steps to make sure we keep this information properly safe. This means not telling people information that would allow criminals to gain unlawful access to our systems.
The Service has considered these issues carefully and we have decided that we do not release information about what IT security systems and backup systems we have in place, the suppliers and versions of our IT security, how often we update and amend our security, whether we have identified particular issues or vulnerabilities and what we have done to strengthen those. This is because we consider disclosing this information would make us a target of crime. Therefore this information is exempt from disclosure under section 31 and 24 of the Freedom of Information Act 2000.
Section 31(1)(a) and Section 24 (1) say that we do not need to provide information that would be likely to prejudice the functions of law enforcement- the prevention and detection of crime or likely compromise the safeguarding of national security by impeding or predicting firefighter response . The Service believes that releasing this information would increase the likelihood of criminals using the information to target attacks against Service systems and operations. For example knowing when we last updated a security system would allow criminals to know what vulnerabilities existed at that time and target attacks on those.
As both Section 31 and Section 24 are qualified exemptions we need to consider the public interest test. On this occasion we believe that the balance of public interest lies in upholding the exemptions and not releasing the information.
If you are not satisfied with the outcome of the internal review, you may appeal the decision by contacting the Information Commissioner, Wycliffe House, Water Lane, Wilmslow, SK9 5AF, Tel: 0303 123 1113 (alternatively 01625 545745) or E-mail: casework@ico.org.uk
Further information on Hereford & Worcester Fire and Rescue Service may be viewed at the Service’s website: www.hwfire.org.uk
Thank you for your request for information
Information Governance Team