IT Devices, Systems & Technologies

Request Number: FOI/14670

Category: Finance and Procurement - Software Contracts & Procurement

Subject: IT Devices, Systems & Technologies

Request and Answer: 

Your request for information has now been considered. In respect of Section 1(1)(a) of the Act we can confirm that the Police Service of Northern Ireland does hold some information to which your request relates and this is being provided to you.
We consider some of the information you seek in Request 1 exempt by virtue of Section 31 of FOIA and have detailed our rationale as to why this exemption applies. We have also provided you with links to guidance issued by the Information Commissioner’s Office which we have followed in responding to your request.

Request 1

Answer 1
PSNI have made the decision to exempt the figures for ‘Networking Infrastructure’ and ‘Security Infrastructure’ and the rationale for this exemption is detailed below. Furthermore, please find below a table which includes the data sought in the remainder of this request.

Section 17(1) of the Freedom of Information Act 2000 requires the Police Service of Northern Ireland, when refusing to provide such information (because the information is exempt) to provide you the applicant with a notice which:

   a. states that fact,

   b. specifies the exemption in question and

   c. states (if not otherwise apparent) why the exemption applies.

The exemption, as well as the factors the Department considered when deciding where the public interest lies, is listed below:

Section 31(1) (a) (b) - Law Enforcement – Information would be likely to prejudice (a) the  prevention or detection of crime (b) the apprehension or prosecution of offenders.

The full text of exemptions can be found at www.legislation.gov.uk and further guidance on how they operate can be located on the Information Commissioners Office website www.ico.org.uk.

Section 31 is a prejudice-based, qualified exemptions which means the public authority must
demonstrate the harm in confirming or denying that the information exists and carry out a Public
Interest Test.

Harm
Releasing these details would allow criminals and anyone intent on hampering police lawnforcement. Systems utilised by PSNI are considered an important part of police methodology and release of software and sever details could impact on the law enforcement role of the PSNI.

Public Interest Test

Factors Favouring Release – Section 31
Procuring equipment is always of public interest. PSNI must be accountable and ensure they can demonstrate that public funds are not used unnecessarily or unwisely. Release of networking infrastructure (for example: Switches, Routers, Interfaces, Wireless Access Points) and security infrastructure (for example: Firewalls, Intrusion Detection Systems (IDS), Virus Monitoring Tools)
details would better inform the public, demonstrating the use of public funds.

Factors Favouring Retention – Section 31
Disclosing information in relation to networking infrastructure (for example: Switches, Routers, Interfaces, Wireless Access Points) and security infrastructure (for example: Firewalls, Intrusion Detection Systems (IDS), Virus Monitoring Tools) would enhance an attacker’s ability to research attack vectors. Release of this detail could potentially leave PSNI systems vulnerable, impacting on the law enforcement role of police.

Balancing Test/Decision
While there may be a public interest in releasing the information requested, the PSNI must ensure that its law enforcement capability is not adversely affected by the release of software and sever details. The PSNI will not release details that may hinder the detection or prevention of crime through the release of information which may be of assistance to criminals and this information has the potential to be inappropriately used or maliciously attacked.

A release of information under FOI is a release into the public domain and not just to the individual requesting the information. Once information is disclosed by FOI there is no control or limits as to how the information is shared with other individuals, therefore a release under FOI is considered a release to the world in general.

The Police Service is charged with enforcing the law, preventing and detecting crime and protecting the communities we serve. Whilst there is a public interest in the transparency of policing and providing assurance that the Police Service is appropriately and effectively engaging with the threat of criminals there is also a very strong public interest in safeguarding PSNI systems and the law enforcement role of police.

It is acknowledged that wherever possible policing must be transparent and accountable. However, police need to make balanced judgements which justify why some information needs to remain exempt and unpublished. Disclosure of information into the public domain would not be in the public interest and such information has the potential to assist terrorists and those criminal elements seeking to carry out attacks against PSNI systems. Taking all of these factors into consideration, we are satisfied that the exemptions outlined above are applicable.

Request 2

Answer 2

Request 3

Answer 3