FUJ00155189
FUJ00155189
AUDIT RECORD QUERY (ARQ)
Originator: I Jane Owen : Date: 26/02/2010
Security Team
3°” Floor Clippers Quay ——
Clippers Quay
SALFORD :
M50 3NW ‘
POH-6274D .
Tel: ' TI
Witness Statem ARQ 0910/436-448.
(Yes or No as applicable) NO Ref
’ No: 0910/
Statement number 0910/Not APOP
applicable Ref.
No:
Branch West Byfleet I Cod 126023 Date 1 Dec 06 to
Name: e: Range: I 31 Dec 07
Standard A report of all transactions and events (including
Format. imactivity logout and logon/log off information) for the
Requirement I office including remittances received, transfers between
8 (Not stock units and error notices. Information to be provided
required in Excel 97 format with each category in a separate
for APOP column.
requests):
Column headers as follows - ID, User ID, Stock unit,
date, time, Session & transaction ID, Mode type - i.e.
Serve Customer, Reversal, Rem In etc, Product number,
quantity, Amount fp, entry method.
Also where applicable dependant on date range, please
specify whether an OBCS (& state) of scan accompanied the
transaction.
Additional ‘Requirements:
APOP Voucher information is required for voucher
number (Ss) :
Analyses of hsh call logs (detail period if different NO
from above date range). '
Period:
Confirmation that there was no reported system NO
malfunctions during the date range period.
Barcode information for all remittance pouches NO
(inward & outward) during the period.
Barcode and car licence details for all DVLA related NO
transactions.
PAN or equivalent identifier (i.e. credit / debit YES
card details).
Other (Provide details): Helpdesk calls YES
Signed: VIA E MAIL - Jane M Owen
V4 November 2007
FUJ00155189
FUJ00155189
37
Thomas Penny -
From: john.longman{” 7 *
Sent: e 01 March 2010 08:53
To: « Thomas Penn
Ce: é mark.dinsdale
Subject: RE: West Byfl
Attachments: pic27027 jpg; pic13361.gif; picd0952.gif; pic08496.gif; picO5646.gif; pic! —«: 5.gif;
pic15597.gif; pic11554 gif; pic25032. gif, pic18102.gif
mw) 5] 5 x
\Re =) a heal 5 } }
pic27027.jpg (73 pic13361.gif (2 KB) pic00952.0if (1 KB) picd8496.gif (1 KB) picOS646.gif (1 KB)pic15183.gif (1 KB) pic “7. yif (1 KB)
KB)
. ISNov— iifkec Ob
: — No May - Ie Jun ot
pict 1554.gif (1 KB) pic25032.gif (3 KB) pic18102.gif (22 ,
KB) \WNov - Wwhees)
Hi Penny
A Jan of,
-he legal advice is that logs should be analysed for the whole of the :..°
accounting period. I have been informed that this is from December Ov ix
December 07.
December 07.
(Embedded imageMaoved to file: pic27027. jpg)
(O) 1-Ayeee ob
@ aa
O71
i 1 - 3a jae
© 1 - 30 Nov oJ
26/02/2010 17:10 @) '- 31 Bee O71.
mae
t
Mark/Jon
Of course, I'll help all I can.
are you sure Mu. n
12 months, Jon? It’s not just the retrieving, i’ inalysis
that will take the.tglme (by Gareth) and ‘rankly, I don’t think we will : to
achieve this in ime left o@
Penny
FUJ00155189
FUJ00155189
12028, I
Pork 23308-18 = Vane) .
4 SE 1210 oe "
: Pow 22228-\
ee St 1310
\1-31 OE) eR ad 23 .3A0,
Renu Tier Ty ee
Ror & ares & Barns oy :
Paved DVRs 1) Seg 82,
fs Ska 2. . 33)
ma 28. 3 9. 8 28. ay 10,
> B&wwos % Auw 02 UX aq).
Por 2331B-1Blay my aaah be by
oO :
Be 7.3.10 < $
ER ed 23-38-10,
J 233.10. ‘ —
\ by Apv 07) toy LUO] -
Acc
I ea o1 = a7 Aww 02 I
Av wom a Por aan’ f
Por A QWIW- Sy sb B10
I Qa B10,
se B10 [esi dl ol emg 1c
oo Ayw 2)
wad Sy
ae O12Ww -1Ww ve
Sb 13-10
Qe 22-3:'9,
- a A
Sep Hus, Oct = 4Gub
FUJ00155189
FUJ00155189
Penny ‘homes :
Sécurity Analyst, Customer Services
Fujitsu Servi Group Account Lovelace Road, Bra Berks
RG12 8SN
tel: ff
Mob: i
Fax:
E-Mail:
Web: http? 77ck fujitsy. com
Fujitsu Services Limited, Registered in England no 96056, Registered 0#
Street, London W1U 3BW This E-mail is only for the use of its intended
contents are subject to a duty of confidence and may be privileged. Fuj
does not guarantee that this E-mail has not been intercepted and amende
virus-free. .
', Baker
bt. Its
vices
ihat it is
From: mark..cir
(mailto:
Sent: 26 February 2010 16:51 ~
To: Thomas
Ce: mauzeen
ubject: Fw
amportance: High
sakes.
Penny, we need a messive favour that I'm sure will cost us quite a few
Is there anything you can do to pull out the stops to provide what Jon
within the timescales. Maureen will provide the necessary paper work o
Thank you for co!
dering this.
IMark Dinsdale, . ’ I
‘Security Proyranne Manager I
Security Te ‘ost Office Ltd I
moved to file:
pic00952.cif)Post Office Ltd, Security
Clippers Quay, Salford, M50 3NW
pic08496.gif
I (Embedded image moved to file
I (preferred contact method)
(Embedded image moved to file: pic05646.giff
I (Embedded ima nved to file: picl5183.gif)F
2
FUJ00155189
FUJ00155189
I (Embedded age moved to file: picl5597.gif)
I--
I (Embedded image imoved to file: pic25032.gif) f
[==
[Confidential Information
AThis email message is for the sole use of the intended recipient (s) and se
contain confidential and privileged information. Any unauthorised review,
Idisclosure or distribution is prohibited. If you are not the inten :
jplease contact me by reply email and destroy all copies of the ori
message. I
John Longinan
To: Mark
Dinsdale /e/POSTOFFICE@ POSTOFFICE .
26/02/2010 16:39 cc: Jarnail A 3
Singh/e/POSTOFFICE@ POSTOFFICE
Subject: West Byfleet - 126023
Mark
Jarnail has just teléphoned me and asked me to get transaction. log
PO from ist December 2006 to 31st December 2007. ‘The logs need to
our current process and then given to Gereth Jenkins at Fujitsu to é
confirm by witness statement whether there are any errors within the Horiz: system
for the transaction log period.
Jarnail would like the statement by Friday 5th March 2010.
(Embedded image moved to file: picl8102.gif)
FR I I I ISI I I III ICICI I ISI I III det teat gh a
Royal Mail Group Limited registered in England and Wales registered ‘nui
4138203 registered office 3rd Floor, 100 Victoria Embankment, London,
This email end eny attachments are confidential and intended for the adere
If you.are not the named recipient, you imust not use, disclose, reprodu
distribute the contents of this communication.
If you have received this in error, please contact the sender and then dej-~« chis
email from your system.
FUJ00155189
FUJ00155189
I 1- s0&po1t —
Auwo2.” bus) 7
Pork& Dawe wets : —
Ste 33 2
ee
Avw rs .,
Poi A. 23398. OX
Se 8,
ead . 223.10. “
TSonover] wr
/ Ss
eee
Bo 22292
ke ¥.3°1'0
Bd. 2% 3-10,
FUJ00155189
FUJ00155189
Page 1 of 4
Thomas Penny
From: Thomas Penny
Sent: 04 March 2010 13:13
To: Jenkins Gareth GI
Subject: RE: ARQ436-490 Witness Statement Support for West Byfleet, 126023
Gareth
See notes against Anne’s comments below.
Penny
Penny Thomas
Security Analyst, Customer Services
Fujitsu Services Retail & Royal Mail Group Account
Lovelace Road, Bracknell, Berks RG12 8SN
Tel: I
Mob: I
Fax: I
EMI eee nsesmnsesmnenn
Web: “hilpiiak Tujtsu‘com
Fujitsu Services Limited, Registered in England no 96056, Registered Office 22, Baker Street, London W1U 38W
This E-mail is only for the use of its intended recipient. Its contents are subject to a duty of confidence and may be privileged. Fujitsu
Services does not guarantee that this E-mail has not been intercepted and amended or that it Is virus-free.
From: Jenkins Gareth GI
Sent: 26 February 2010 08:38
To: Thomas Penny
Cc: Chambers Anne O
Subject: FW: ARQ436-490 Witness Statement Support for West Byfleet, 126023
Penny,
Anne has looked at the event logs.
She's identified a number of things below to check out. ~
Are you able to check out the specific times she has indicated, firstly to see if anyone was Logged on and
secondly against Andy Dunk's Call logs.
If you need some help with the specifics, then please let me know.
Regards
Gareth
Gareth Jenkins
Distinguished Engineer
Applications Architect
Royal Mail Group Account
FUJITSU
Lovelace Road, Bracknell, Berks!
Tel: f
fe, RG12 BSN
(Note new external number -
04/03/2010
FUJ00155189
FUJ00155189
Page 2 of 4
old number will not work after 31/12/2009)
Mobile:
email
Web: http:/uk fujitsu.com
BA Prcase consider the environment - do you really need to print this email?
Fujitsu Services Limited, Registered in England no 96056, Registered Office 22 Baker Street, London, W1U 38W
This e-mail is only for the use of its intended recipient: Its contents are subject to a duty of confidence and may be privileged. Fujitsu
Services does not guarantee that this email has not been intercepted and'amended or that itis virusfree.
From: Chambers Anne O
Sent: 25 February 2010 15:20
To: Jenkins Gareth GI
Subject: RE: ARQ436-490 Witness Statement Support for West Byfleet, 126023
Gareth, sending just to you initially.
I know you have even more on your plate than I do, but my ‘involvement has always been
unofficial and on the basis that I had time to do it. If Ineed to do more detailed analysis on
this (and I'm not sure what I would be able to find, without knowing what their specific
problem was) it will have to be officially agreed with my manager - you can instigate that if
you like, but I don't think I can keep volunteering.
There are several entries on the 1 Sysman 2 126023 tab which require some further
investigation. I've added some highlighting.
Counter 1 on 2/3 May 2006, and 4 Feb 2008. I don't know whether the counter was
replaced, or whether the messagestore was deleted and copied from another counter. The
Powerhelp / TfS calls may illuminate this. Logs not provided for these timeframes.
I don't know if the counter was used while these errors were occurring - it may have been.
If they have any complaints specific to these times, perhaps they should be checked out???
There are some isolated timeout waiting for lock messages, but in general these appear to
be associated with checksums being written. To be on the safe side, it could be checked
whether anyone was logged on
counter 1 or 2, 3-Apr-2007, 20:30
counter 1 — log off 16:36
counter 2 — log off 16:35
counter 2 28-May-2008, 01:33 — Logs not provided for timeframe
counter 1 18-Aug-2008, 11:04 — Logs not provided for timeframe
and if so check the messages to find which processes were in contention.
It is notable that the branch does not have the repeated lock messages which were a
feature of the Callender Square problem.
Error Message: Error in node retrieval for node(s) 1010 - as far as I know this hasn't been
04/03/2010
FUJ00155189
FUJ00155189
Page 3 of 4
investigated but on the other hand no one has complained of a problem linked to it. I'll try
to check it out.
04/03/2010
Anne:
From: Barnes Gerald
Sent: 24 February 2010 10:04
To: Thomas Penny
Cc: Chambers Anne O; Jenkins Gareth GI; Holmes Alan; Mansfield Andrew
Subject: RE: ARQ436-490 Witness Statement Support for West Byfleet, 126023
Penny,
I attach the results of the query.
Note that on the advice of Alan all BAL events are included for the date range. They
are identified by a blank FAD. They may not be relevant for a Horizon counter.
Regards,
Gerald Barnes
From: Thomas Penny
Sent: 22 February 2010 10:57
To: Barnes Gerald
Cc: Chambers Anne O; Jenkins Gareth GI
Subject: ARQ436-490 Witness Statement Support for West Byfleet, 126023
Gerald
Could you please check events for the following:-
126023 - 30 Jun 05 to 31 Dec 09
Kind regards
Penny
Penny Thomas
Security Analyst, Customer Services
Fujitsu Services Retail & Royal Mail Group Account
Lovelace Road, Bracknell, Berks RG12 8SN
Fujitsu Services Limited, Registered in England no 96056, Registered Office 22, Baker Street; London W1U 3BW
This E-mail is only for the use of its intended recipient. Its contents are subject to a duty of confidence and may be
privileged. Fujitsu Services does not guarantee that this E-mail has not been intercepted and amended or that it is
virus-free.
04/03/2010
FUJ00155189
FUJ00155189
Page 4 of 4
FUJ00155189
FUJ00155189
abc 27 ta ae
Sy 42 so
38 ue .
39% US
yor ub
ul 47%
ul