Use of Windows 7 operating system (FOI)

Request

On Tuesday 14 January, Microsoft withdrew support for its Windows 7 operating system leaving it vulnerable to malware attacks. Please could you provide:

A

How many computers across the Government of Jersey are still running Windows 7 or older after Microsoft has withdrawn support?

Please break this down by software version (Windows 7, Vista, XP and so on)

B

In total, how many computers does the Government of Jersey operate on its networks.

C

What the Government of Jersey's IT security policy is for regularly upgrading or replacing hardware to stay secure.

Response

This request has been refused and Article 42 (Law Enforcement) of the Freedom of Information (Jersey) Law 2011 has been applied.

Article applied

Article 42 Law enforcement

Information is qualified exempt information if its disclosure would, or would be likely to, prejudice –

(a) the prevention, detection or investigation of crime, whether in Jersey or elsewhere;

(b) the apprehension or prosecution of offenders, whether in respect of offences committed in Jersey or elsewhere;

(c) the administration of justice, whether in Jersey or elsewhere;

(d) the assessment or collection of a tax or duty or of an imposition of a similar nature;

(e) the operation of immigration controls, whether in Jersey or elsewhere;

(f) the maintenance of security and good order in prisons or in other institutions where persons are lawfully detained;

(g) the proper supervision or regulation of financial services; or

(h) the exercise, by the Jersey Financial Services Commission, of any function imposed on it by any enactment.

Public Interest Test

It is recognised that there is a public interest in providing information in a transparent manner, however this public interest is not considered to outweigh the interests of the government in preventing cyber-crime. It is considered that release of this information may increase risks, particularly in view of major cyber-attacks that have occurred in other jurisdictions in recent years.

The Government of Jersey continuously assesses risk to its network and technical infrastructure and manages a risk treatment plan to ensure every effort is made to maintain a secure and reliable service for its staff and users of its services.