FOI reference: FOI/17/01556
Date received: 28 July 2017
Date responded: 9 August 2017
Information on outdated Windows servers in IT infrastructure.
I have concluded that the original decision should be confirmed, with modifications. Our original response did not include a timeline for the completion of any upgrade or remedial work. I have concluded that this can be released to you and attach it at Annex A. A timeline can be released to give context to the legacy servers being actively decommissioned or replaced.
I have considered our application of s30(c) (substantial prejudice to the effective conduct of public affairs) and concluded that it does not apply to some of the information previously withheld. This is because release of that information would not result in any compromise of our systems or data. This information is therefore now being released to you and is attached at Annex A.
In relation to the remainder of the information withheld under s30(c) of FOISA, I have concluded that the exemption was correctly applied and that the public interest test remains in favour of withholding, for the reasons stated in our original response. It is my view that release would continue to place these systems at higher risk of external attack, meaning that the Scottish Government might expose the personal and sensitive data of the public.
Please see the Annex A for fuller detail. Please also note, that in the short timescale of our correspondence, the progress in lowering the overall number of legacy servers has reduced from 39 to 35. Additionally, seven systems have August 2017 resolution dates, with almost all being resolved by end 2017.
The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at http://www.gov.scot/foi-responses
Please quote the FOI reference
Central Enquiry Unit
Phone: 0300 244 4000
The Scottish Government
St Andrew's House