POL00054371 - Emails between Rob Wilson, Dave M King, Sue Lowther and others on the integrity of the Horizon system

Evidence on official site

POL00054371

POL00054371

Message
From CN=Rob G Witscr
Sent: 08 Mar 2010 16:11:18
To:
cc: t

iain. murphy QE john.m.scott! GRO} mandy.talbot!

rebekah.mantle! Jrod.ismay'” ‘GRO
Subject: Re: Fw: Horizon
Dave,

Thanks for this.

Rob Wilson
Head of Criminal Law

Dave M King
08/03/2010 15:27
cc: Andy Hayward/e, Dave
PosnettI , David X smitl

Murphy /} John M Scott/

Talbot/I Rebekah Mant]

Ismay/el ue Lowther/e/'
Subject: Re: : Horizon disputed cases

Rob
Thanks for you time earlier.

As discussed, I can confirm that we are in no way questioning/investigating the
financial integrity of Horizon, or of the accounting system as a whole. The
Information Security review is to look at the ways in which messages are sent
at a system level and whether there are any additional measures we could put in
place to make it easier to show message integrity at that level (below that of
any reconciliation or accounting) and thus improve the statements/evidence
available.

The intention is to look at the current and past challenges to identify where
common claims are being made enabling the production/adaptation of the
statements produced in support of the system information

Thanks

Dave King
Security Architect

Rob G Wilson
08/03/2010 14:31
To: Sue Lowther/

David X Smith,
John M Scott/e
Rebekah Mant1]

Dave Posnett,
Iain Murphy/
Mandy Talbot
Rod Ismay/e/

Subject: Re: Fw: Horizon disputed cases
Sue,

I note that you wish to examine the integrity of Horizon from an ‘information
security perspective’. what does this mean?

POL-0050850
POL00054371
POL00054371

Rob Wilson
Head of Criminal Law

Te
Mobi

Sue Lowther
08/03/2010 13:50

To: Andy Hayward/:
cc: David X_ smith, John M

Scott/\ Mandy Talbot Rod
Ismay/\ Rebekah Mant IE, Dave M
King/e Dave Posnett/ Rob G
Wilson , Iain Murphy,

Subject: Re: Fw: Horizon disputed cases
All,

As was discussed on the conference call and taking into account Rob's comments,
to confirm that what we are looking at is a ‘general’ due diligence exercise on
the integrity of Horizon, to confirm our belief in the robustness of the
system and thus rebutt any challenges

The Information Security team have looked at the information that has been
forwarded to them, re the above and it seems that the issues raised are mainly
around procedural items and about ‘Accounting’ reconciliation

To enable us to examine the Integrity of Horizon from an Information Security
perspective we need input from a number of areas.

A decription of the accounting process from the business perspective, including
the interfaces between Horizon and POL/FS and the process by which ‘error
notices’ are generated.

The identity of all the offices making allegations, together with a list of
loss declarations from those offices.

A report from Service Delivery of all the problems they have received through
the Live Service Desk, from the offices in 2 above

Rod, could you please arrange for someone to provide item 1

Andy, item 2

Information Security will provide item 3 once we have the complete list of
offices.

Once we have that information, I can then put together a plan of how we will
examine the system ‘integrity’ of Horizon and the resource required to complete
it.

Yours

sue.

Susan L Lowther
Information security

corene Laptop Security -Leash it, don't lose it - its your responsibility! ----

Andy Hayward
26/02/2010 18:01

To: Mandy Talbot/el
Rebekah Mant I-/ TTT Dave M King

Sue owther/ TTT 2 ye Posnett/e
cc: David X Smith/ci——— iS, john M Scott/c is

Subject: Fw: Horizon disputed cases

All,

further to our discussion earlier today, additional information in the attached
pdf article below. As part of the wider review It may well be worthwhile
understanding the ‘outcome’ of each of the case studies referenced, where
applicable (i.e. criminal/civil) and that may assist in our review.

POL-0050850
Cheers,

Andy

os Forwarded by Andy rayward/ a I 26/02/2010 12:15 -----

Graham C ward
25/02/2010 16:10
cc: Sue Lowther/e
Subject: Re: Fw: Horizon disputed cases

Andy
fyi
Regards

Graham

Andrew / Jason

I'm aware of two ongoing cases at West Byfleet (John Longman) & Orford Rd ?
(Lisa Allen) and also some historical cases (which are included on the
attachment below), but as FI's, we wouldn't have Horizon disputed cases other
than those reported by the Investigator’s, who will have far more details on
the issues than us.

I've attached an article from an IT magazine which may have bought this issue
to the fore in the 1st place and which may be of interest to Ian

Regards

Graham

Andy Hayward
25/02/2010 15:48

Coll js I i Graham C ward/e/I
Yc me

cc: Graham Brander,
Subject: Fw: Horizon disputed cases

Andrew,

Thanks for this (should be Graham ward... Graham B, please ignore

When completed can you also fwd. details to Sue Lowther as she is leading on
behalf of Security. Please also send Sue any additional documents or reports
pertinent to specific cases (i.e.Jason the forensic report from John L's case).

with reference to case information, bullet points will suffice, if more is
required we can supply thereafter

Cheers,

Andy

w---- Forwarded by Andy Hayward/ QI on 25/02/2010 15:42 -----

Andrew Daley
25/02/2010 11:49

To: Jason 6 Coll ins/ i crahan
cc: (bce: Andy Hyver TT)

Subject: Horizon disputed cases

Brander/e

Jason/Graham,

Andy called me and asked whether you guys, (Graham, if FIU have any cases in
dispute/new issues that could affect your case) could put together some stats

POL00054371
POL00054371

POL-0050850
POL00054371
POL00054371

on these cases, where the accused's defence was/is that the Horizon data is
unreliable for any amount of reasons given by the accused .

This should be sent to Iain within the next few days. Iain will need as much
infomation as possible.
Regards,

Andrew
>>>> Horizon cases.xls attachment was removed from this email <<<<

>>>> Horizon blamed.pdf attachment was removed from this email <<<<

POL-0050850