Disclosure Log

Message from Nottinghamshire County Council - 28 March 2025

Dear ***** *****,

FREEDOM OF INFORMATION ACT 2000 – REQUEST FOR INFORMATION REFERENCE FOI/5558

Thank you for your request for information relating to IT Service Management Contracts.

We are now able to provide the following information:

1. Current IT Service Management (ITSM) Provider(s) Exempt (see exemption below)

* Name of the supplier(s) providing ITSM software and/or services. Exempt (see exemption below)

2. Contract Details – Exempt (see exemption below)

* Contract start date
* Contract end date
* Details of any contract extensions (if applicable)
* Total annual cost of the contract(s)

3. ITSM Tools & Software in Use

* Name of the ITSM tool(s) used by the council (e.g., ServiceNow, Jira Service Management, BMC Remedy, etc.). Exempt (see exemption below)

4. Procurement & Renewal

* Contract renewal date
* Procurement framework or tendering process used (e.g., G-Cloud, CCS Framework, Open Tender, etc.) Exempt (see exemption below)

5. Contact Information

* Name and job title of the person(s) responsible for ITSM contract management and procurement (if available under FOI). ITSM and Procurement – Head of Service Delivery, Governance and Standards – emails to [email protected]
* Contact email or phone number (if permissible under FOI

This request for information is exempt from disclosure pursuant to S31(1)(a) of the Freedom of Information Act 2000: "Information ... is exempt information if its disclosure under this Act would, or would be likely to prejudice ... the prevention or detection of crime."

Any information that could be used by hackers, scammers and other malicious actors to compromise the Councils ICT systems and cyber security should not be disclosed to external organisations, partners or members of the public. Examples of this include the number of incidents/breaches and the type/nature of such incidents/breaches. Information relating to the Councils ICT systems and technical and operational security measures, if provided to the public at large, could pose a risk to the operations and assets of the Council via exposure to malicious actors.

Examples of information which could be used by malicious actors, particularly if comprised of details relating to short time periods of less than a year, include:

* Use of external cyber/online security contractors, firms; and details of ICT and cyber security systems, procedures, policies and contracts particular to the Council.

S31 attracts the public interest test and the Council asserts that the public interest in transparency, scrutiny and accountability of the Council is outweighed by the public interest in ensuring the risks to operations and assets are not exposed to malicious actors.
 

We trust this now satisfies your request and that you find this information to be helpful, however if you are unhappy with the way in which your request has been handled, then please email us at [email protected] quoting the reference FOI/5558 and we will be happy to review your request

For future reference, Nottinghamshire County Council regularly publishes previous FOI requests and answers on its website, under Disclosure logs, that may provide details relating to your query. (see link) Your privacy: we use your personal information such as name and address so that we can comply with our legal obligations to respond to FOI requests.  For further details about the use of information about you, please see the information handling privacy notice on our website at https://www.nottinghamshire.gov.uk/media/4323566/informationgovernanceandinformationrightsprivacynotice.pdf

If you are dissatisfied with the handling of your request, you have the right to ask for an internal review.   Requests should be submitted within 40 working days of the date of receipt of the response to your original request and should be addressed to: Complaints and Information Team, Nottinghamshire County Council, County Hall, Loughborough Road, West Bridgford, NOTTINGHAM, NG2 7QP or [email protected].

Please remember to quote the reference number above in any future communications.

If you are not content with the outcome of the internal review, you have the right to apply directly to the Information Commissioner for a decision.  The Information Commissioner can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, WILMSLOW, SK9 5AF or