Computer systems used by States of Jersey (FOI)Computer systems used by States of Jersey (FOI)
Produced by the Freedom of Information officeAuthored by States of Jersey and published on
24 September 2018.Request
A
How many server computers operated by the States are running any edition of:
B
How many desktop and laptop computers operated by the States are running:
C
How many of the above laptop computers have:
internal hard drives encrypted with the operating system’s built-in encryption technology (eg Microsoft BitLocker or Apple FileVault)
internal hard drives encrypted with a third-party encryption mechanism
internal hard drives encrypted with some other mechanism
none of the above (ie no drive-level encryption)
D
With regard to the network switches and routers in the States’ IT infrastructure:
how many devices are past their formal end-of-support date (i.e. operating software updates are no longer produced)
of the above, how many are more than 12 months past their formal end-of-support date
how many devices are running operating software / firmware versions that were released 12 to 24 months ago, where a more recent software / firmware version is available
how many devices are running operating software / firmware versions that were released more than 24 months ago, where a more recent software / firmware version is available
E
With regard to the “edge” routers and firewalls in the States’ IT infrastructure (ie where the States network connects to the Internet):
how many devices are past their formal end-of-support date (ie the manufacturer no longer produces updates for their operating software)
of the above, how many are more than 12 months past their formal end-of-support date
how many devices are running operating software / firmware versions that were released 12 to 24 months ago, where a more recent version is available
how many devices are running operating software / firmware versions that were released more than 24 months ago, where a more recent version is available
Response
A to E
This request has been refused and Article 42 of the Freedom of Information (Jersey) Law 2011 has been applied.
Article applied
Article 42 Law enforcement
Information is qualified exempt information if its disclosure would, or would be likely to, prejudice –
a) the prevention, detection or investigation of crime, whether in Jersey or elsewhere;
It is recognised that there is a public interest in providing information in a transparent manner, however this public interest is not considered to outweigh the interests of the government in preventing cyber-crime. It is considered that release of this information may increase risks, particularly in view of major cyber-attacks that have occurred in other jurisdictions in recent years.
The States of Jersey continuously assesses risk to its network and technical infrastructure and manages a risk treatment plan to ensure every effort is made to maintain a secure and reliable service for its staff and users of its services.
gov.je