FUJ00122346
FUJ00122346
1
Witness Statement (LAN
(CJ Act 1967, 89; MC Act 1980, ss 5A(3)(a) POH-3723D _)
and 5B, MC Rules 1981, r 70)
Statement of Penelope Anne Thomas
Age if under 18 Over 18 (If over 18 insert ‘over 18')
This statement (consisting of six pages each signed by me) is true to the best of my knowledge and belief
and I make it knowing that, if it is tendered in evidence, I shall be liable to prosecution if I have wilfully
stated in it anything which I know to be false or do’ not believe true.
Datedthe 9
Signature
I have been employed by Fujitsu Services, Post Office Account, formally ICL. Pathway Ltd
since 20 January 2004 as an Information Technology (IT) Security Analyst responsible for audit
data extractions and IT Security. I have working knowledge of the computer system known as
Horizon, which is a computerised accounting system used by Post Office Ltd. I am authorised
by Fujitsu Services to undertake extractions of audit archived data and to obtain information
regarding system transactions recorded on the Horizon system.
Horizon’s documented procedures stipulate how the Horizon System operates, and while I am
not involved with any of the technical aspects of the Horizon System, these documented
processes allow me to provide a general overview.
At each Post Office there are counter positions that have a computer terminal, a visual display
unit and a keyboard and printer. This individual system records all transactions input by the
counter clerk working at that counter position. Clerks log on to the system by using their own
unique password. The transactions performed by each clerk, and the associated cash and
stock level information, are recorded by the computer system in a stock unit. Once logged on,
all transactions performed by the clerk must be recorded and entered on the computer and are
accounted for within the user's allocated stock unit.
The Horizon system provides a number of daily and weekly records of all transactions input
Signature :
CS011A (Side A)” Version 5.0 09/08
FUJ00122346
FUJ00122346
Witness Statement
(CJ Act 1967, 89; MC Act 1980, ss 5A(3)(a)
and 5B, MC Rules 1981, r 70)
Statement of Penelope Anne Thomas
Age if under 18 Over 18 (If over 18 insert ‘over 18')
This statement (consisting of six pages each signed by me) is true to the best of my knowledge and delief
and I make it knowing that, if it is tendered in evidence, I shall be liable to prosecution if I have wilfully
stated in it anything which I know to be false or do not believe true.
Dated the 9 day of = January 2007
Signature
I have been employed by Fujitsu Services, Post Office Account, formally ICL Pathway Ltd
since 20 January 2004 as an Information Technology (IT) Security Analyst responsible for cudit
data extractions and IT Security. I have working knowledge of the computer system known as
Horizon, which is a computerised accounting system used by Post Office Ltd. I am authorised
by Fujitsu Services to undertake extractions of audit archived data and to obtain informatior
regarding system transactions recorded on the Horizon system.
Horizon’s documented procedures stipulate how the Horizon System operates, and while I iam
not involved with any of the technical aspects of the Horizon System, these documented
processes allow me to provide a general overview.
At each Post Office there are counter positions that have a computer terminal, a visual display
unit and a keyboard and printer. This individual system records all transactions input by the
counter clerk working at that counter position. Clerks log on to the system by using their own
unique password. The transactions performed by each clerk, and the associated cash and
stock level information, are recorded by the computer system in a stock unit. Once logged «n,
all transactions performed by the clerk must be recorded and entered on the computer and are
accounted for within the user's allocated stock unit.
The Horizon system provides a number of daily and weekly records of all transactions inpu!
Signature } G RO I Signature witnessed by
Version 5+) 09/06
CSO11A (Side Ayr
1
FUJ00122346
FUJ00122346
Witness Statement
(CJ Act 1967, s9; MC Act 1980, ss 5A(3)(a) and 5B, MC Rules 1981, r 70)
Continuation of statement of Penelope Anne Thomas
into it. It enables Post Office users to obtain computer summaries for individual clients of Fost
Office Limited e.g. National Savings Bank and Alliance & Leicester. The Horizon system also
enables the clerk to produce a periodic balance of cash and stock on hand combined with the
other transactions performed in that accounting period, known as a trading period.
Where local reports are required these are accessed from an icon on the desktop menu. The
user is presented with a parameter driven menu, which enables the report to be customise: to
requirements. The report is then populated from transaction data that is held in the local
database and is printed out on the printer. The system also allows for information to be
transferred to the main accounting department at Chesterfield in order for the office accour ts
to be balanced.
The Post Office counter processing functions are provided through a series of counter
applications: the Order Book Control Service (OBCS) that ascertained the validity of DWP
order books before payment was made, this application ceased in June 2005; the Electronic
Point of Sale Service (EPOSS) that enables Postmasters to conduct general retail trade at the
counter and sell products on behalf of their clients; the Automated Payments Service (APS)
which provides support for utility companies and others who provide incremental in-paymerit
mechanisms based on the use of cards and other tokens and the Logistics Feeder Service
(LFS) which supports the management of cash and value stock movements to and from the
outlet, principally to minimise cash held overnight in outlets. The counter desktop service end
the office platform service on which it runs provides various common functions for transaction
recording and settlement as well as user access control and session management.
Information from counter transactions is written into a local database and then replicated
automatically to databases on all other counters within a Post Office outlet. The informaitic is
then forwarded over ISDN (Integrated System Digital Network) or other communication service,
to databases on a set of central Correspondence Servers at the Fujitsu Services data centres.
This is undertaken by a messaging transport system within the Transaction Management
Service (TMS). Various systems then transfer information to Central Servers that control the
GRO
Signature Signature witnessed b '
csot1a Version (1.0 09/06
FUJ00122346
FUJ00122346
Witness Statement
(CJ Act 1967, s9; MC Act 1980, ss 5A(3)(a) and 58, MC Rules 1981, r 70)
Continuation of statement of Penelope Anne Thomas
flow of information to various support services. Details of outlet transactions are normally sant
at least daily via the system. Details are then forwarded daily via a file transfer service to the
Post Office accounting department at Chesterfield and also, where appropriate, to other I?o:it
Office Clients
An audit of all information handled by the TMS is taken daily by copying all new messages {>
archive media. This creates a record of all original outlet transaction details including its orijin
- outlet and counter, when it happened, who caused it to happen and the outcome. The TM:
journal is maintained at each of the Fujitsu Services Data Centre sites and is created by
securely replicating all transaction records that occurred in every Outlet. They therefore provide
the ability to compare the audit track record of the same transaction recorded in two places to
verify that systems were operating correctly. All exceptions are investigated and reconciled
Records of all transactions are written to audit archive media
The system clock incorporated into the desktop application on the counter visual! display units
is configured to indicate local time. This has been the situation at South Warnborough, Brar ch
Code 092904 since 27 March 2001 when the Horizon system was introduced at that particu’ ar
Post Office.
The Horizon system records time in GMT and takes no account of Civil Time Displacements,
thus during British Summer Time (BST) (generally the last Sunday in March to the last Sunclay
in October), system record timings are shown in GMT — one hour earlier than local time (BST)
When information relating to individual transactions is requested, the data is extracted from the
audit archive media via the Audit Workstations (AW’s). Information is presented in exactly the
same way as the data held in the archive although it can be filtered depending upon the ‘yp: of
information requested. The integrity of audit data is guaranteed at all times from its origination,
storage and retrieval to subsequent despatch to the requester. Controls have been
established that provide assurances to Post Office Internal Audit (POIA) that this integrity is
maintained.
Signature }
cso11a * Version 6.11 09/06
FUJ00122346
FUJ00122346
Witness Statement
(CJ Act 1967, s9; MC Act 1980, ss 5A(3)(a) and 5B, MC Rules 1981, r 70)"
Continuation of statement of Penelope Anne Thomas
During audit data extractions the following controls apply
1
o- (GRO-
SONIA
Extractions can only be made through the AWs which exist at Fujitsu Services,
Lovelace Lane, Bracknell, Berkshire and Fujitsu Services, Sackville House, Brooks
Close, Lewes, East Sussex. These sites are both subject to rigorous physical secu ‘ity
controls appropriate to each location. All AWs are located in a secure room subjec! to
proximity pass access within a secured Fujitsu Services site.
Logical access to the AW and its functionality is managed in accordance with the
Fujitsu Services, Post Office Account Security Policy and the principles of ISO 17799.
This includes dedicated Logins, password control and the use of Microsoft Windows: NT
security features
All extractions are logged on the AW and supported by documented Audit Record
Queries (ARQ’s), authorised by nominated persons within Post Office Ltd. This log can
be scrutinised on the AW
Extractions are only made by authorised individuals.
Upon receipt of an ARQ from Post Office Ltd they are interpreted by CS Security. The
details are checked and the printed request filed
The required files are identified and marked using the dedicated audit tools
Checksum seals are calculated for audit data files when they are written’ to audit
archive media and re-calculated when the files are retrieved
To assure the integrity of the audit data while on the audit archive media the checks 1m
seal for the file is re-calculated by the Audit Track Sealer and compared to the origir al
value calculated when the file was originally written to the audit archive media. The
result is maintained in a Check Seal Table
The specific ARQ details are used to obtain the specific data.
. The files are copied to the AW where they are checked and converted into the file: type
required by Post Office Ltd
The requested information is copied onto removal CD media, sealed to prevent
modification and virus checked using the latest software. It is then despatched to the
Post Office Ltd Casework Manager using Royal Mail Special Delivery. This ensures
Version 6.01 09/06
FUJ00122346
FUJ00122346
Witness Statement
(Ch Act 1967, s9; MC Act 1960, ss 5A(3)(a) and 58, MC Rules 1981, r 70).
Continuation of statement of Penelope Anne Thomas
that a receipt is provided to Fujitsu Services confirming delivery
ARQ 046/0607 was received on 24 April 2006 and asked for information in connection with the
Post Office at South Warnborough, Branch code 092904. I produce a copy of ARQ 046/007
as Exhibit PT/O1. I undertook extractions of data held on the Horizon system in accordanc::
with the requirements of ARQ 046/0607 and followed the procedure outlined above. I prod ice
the resultant CD as Exhibit PT/02. This CD, Exhibit PT/02, was sent to the Post Office
Investigation section by Special Delivery on 5 May 2006.
The report is formatted with the following headings:
ID — relates to counter position
User — Person Logged on to System
SU — Stock Unit
Date — Date of transaction
Time — Time of transaction
Sessionid — A unique string relating to current customer session
Txnld-A unique string relating to current transaction
Mode — e.g. SC which translates to Serve Customer
ProductNo — Product Item Sold
Qty — Quantity of items. sold
SaleValue — Value of items sold
Entry method - Method of data capture for Transactions (0 = barcode, 1 = manuzilly
keyed, 2 = magnetic card, 3 = smartcard, 4 = smart key)
State — Method of manual keyed Entry Method
!OP - Order Book Number
Result — Order Book Transaction Result
Foreign Indicator — Indicates whether OBCS payment was made ata local or foreig’:
outlet (0- Local, 1- Foreign). The foreign indicator defaults to a ‘0’ for all manually
entered transactions.
Signature I
esontAa Version 6.0 09/08
FUJ00122346
FUJ00122346
Witness Statement
(CJ Act 1967, s9; MC Act 1980, ss 5A(3)(a) and 5B, MC Rules 1981, r 70)
Continuation of statement of Penelope Anne Thomas
The Event report is formatted with the following headings:
Groupid —- FAD code
ID — relates to counter position
Date — Date of transaction
Time — Time of transaction
User — Person Logged on to System
SU — Stock Unit
EPOSSTransaction.T — Event Description
EPOSSTransaction.Ti — Event Result
Type — Inactivity Logout noted
Logout Authority ~ User who logged out the account
SecurityEvent.User — User who failed to log in’
There is no reason to believe that the information in this statement is inaccurate because o!
the improper use of the computer. To the best of my knowledge and belief at all material tires
the computer was operating properly, or if not, any respect in which it was not operating
properly, or was out of operation was not such as to effect the information held on it.
Any records to which I refer in my statement form part of the records relating to the busiries:s of
Fujitsu Services. These were compiled during the ordinary course of business from
information supplied by persons who have, or may reasonably be supposed to have, personal
knowledge of the matter dealt with in the information supplied, but are unlikely to have ariy
recollection of the information or cannot be traced. As part of my duties, I have access to
these records
Signature :
csoa Version 6.0 09/08
AUDIT RECORD QUERY
I Originato Graham Ward Date I 24/04/06
rr Post Office Ltd Security :
Casework Manager
PO Box 1
CROYDON
CR9 1WN
Teluphon I GRO
Qe I nn
Witness No REF NO. I ARQ
Statiernent 0607/046
(deliate as
I applicable)
Information Requested
Dat: range: 09/02/06 - 08/03/06 Post SOUTH
Office WARNBOROU
GH SPSO
— 1.092904
I GENERAL A report of all transactions and events for the office
DES:CRIPTION I for the relevant days (See attached list), including
FOFLMAT remittances received, transfers between stock units
REC{UIREMEN I and error notices.
TS:
We would like the following format for logs (in Excel
format with each category in a separate column):
Balancing Period; Cash Accounting Period;
Session Type - i.e. Serve Customer, Reversal. Rem
In etc Transaction No; Session Indicator; Date; Time;
Stock; User ID; Transaction Type; Amount Ep
2 columns specifying whether an OBCS (& state) of
scan accompanied the transaction
(Session Indicator is whatever way the system has of
indicating that individual transactions are linked)
FUJ00122346
FUJ00122346
FUJ00122346
FUJ00122346
Thomas Penny
From: graham.c.wardG@...
Sent: 18 Dece 2
To: Fujitsu. ~<GRO-}
Subject: Statement AR'
All
Can I please request a standard statement in respect of South Warnboro (ARQ 0607/046) .
Required by the 12th January 2007 if possible please.
As well as the standard statement, we also need a statement referring to HSH calls
logs covering the period 23/10/03 - 09/03/06.
Finally, are there any records relating to training against this name - Josephine
Hamilton - if so I'll need another statement covering training given etc
Many thanks
Regards
Graham
Casework Manager
Post Office Ltd Investigation Team
PO BOX 1, CROYDON, CR9 1WN
I VoiceMail:
JOSS ISG SIS SISOS ISIS SSIS S IIS GIG CISC SSIS ISS IOS IGS S IGS I i iub i k
This email and any attachments are confidential and intended for the addressee only.
If you are not the named recipient, you must not use, disclose, reproduce, copy or
distribute the contents of this communication.
If you have received this in error, please contact the sender and then delete this
email from your system.
eerrrvrerceerrstereererrerrererrrrrtrret errr treterr errr rrer rer er eres.
OAWOY
(neG@Ued 27 Mav of
FUJ00122346
FUJ00122346
Thomas Penny __
From: graham.brander@__
Sent: 08 February 2008.
To: nigel.allen@, Penny; Dunks
Andy; rebecca.I.portch@: GRO ; alan.stuart@
. colin.woodbridge@. { colin.price@
Subject: South Warnborough
All
Just to advise that the defendant was sentenced to 12 months Community Service with a
12 month Supervision Order. The case is now concluded and i would like to thank you
all once again for the assistance you have provided in this case.
K/Regards
Graham Brander
Investigator i
Post Office Ltd
14 High Street
Eastleigh
Hants
SOS0 STA...
STD Phi
Mobex:!
Extern}
08/02/2008 12:38 -----
Graham Brander
To: Nigel
Allen/e/POSTOFFICE@POSTOFFICE, Martin
98 14:06 Drake/e/POSTOFFICE@POSTOFFICE,
andy .dunkst_______. GRO } Rebecca L
Portch/e/POSTOFFICE@POSTOFFICE, Alan
Stuart/e/POSTOFFICE@POSTOFFICE, Colin
Woodbridge/e/POSTOFFICE@POSTOFFICE,
Colin '
Price/e/POSTOFFICE@POSTOFFICE
ce:
Subject: South Warnborough
All
Please note that sentencing has been adjourned until 04 February 2008.
I will’ let you know the outcome in due course.
K/Regards
Graham Brander
Investigator
Post Office Ltd
14 High Street
Eastleigh
Hants
SoO50 STA.
Graham Brander
To: Nigel
FUJ00122346
FUJ00122346
y
Allen/e/POSTOFFICE@POSTOFFICE, Martin
19.L11.42007 12:48 Drake/e/POSTOFFICE@POSTOFFICE,
penny. thomas
andy. dunks@}_ Rebecca L
Portch/e/POSTOFFICE@POSTOFFICE, Alan
Stuart /e/POSTOFFICE@POSTOFFICE, Colin
Woodbridge/e/POSTOFFICE@POSTOFFICE,
Colin
Price/e/POSTOFFICE@POSTOFFICE
ce:
Subject: South Warnborough
All
There was a Mention Hearing today, whereby the defendant pleaded guilty to the 14
False Accounting charges. The case has now been adjourned for sentencing on 25 January
2008. The theft charge will be dropped on the provisal that all the money owed is
repaid by defendant by sentencing date.
If the money is not repaid then we will pursue the theft charge, in which case a new
trial date will be arranged.
As such, there will not now be a trial in December (10 - 23/12/07) and provided the
money is repaid, the trial will be not be re-scheduled.
Thanks once again to you.all for the assistance you have given in this case. I will
advise you in due course as to whether the trial is re-scheduled or whether sentencing
goes ahead on 25/01/08.
K/Regards
Graham Brander
Investigator
Post Office Ltd
14 High Street
Eastleigh
Hants
sOS50 STA
-- Forwarded by Graham Brander/e/POSTOFFICE on 19/11/2007 12:38 -----
Graham Brander
To: Nigel
Allen/e/POSTOFFICE@POSTOFFICE, Martin
Drake/e/POSTOFFICE@POSTOFFICE,
penny . thomas‘
andy .dunks@ Rebecca L
Portch/e/POSTOFFICE@POSTOFFICE, Alan
Stuart /e/POSTOFFICE@POSTOFFICE, Colin
Woodbridge/e/POSTOFFICE@POSTOFFICE,
Colin
Price/e/POSTOFFICE@POSTOFFICE
cc:
Subject: South Warnborough
This document has been archived to the Central Archive Store
I have just been notified that the trial in respect of the Postmistress at South
Warnborough Post Office has been adjourned.
FUJ00122346
FUJ00122346
As such, please would you all advise me as to your availability to attend Winchester
Crown Court on dates between 10 - 2iDecember 2007. °
Thanks once again for your assistance in this matter.
Please feel free to contact me if you wish to discuss anything.
Please advise me, should any further dates arise whereby you would be unavailable.
FOI IOI ICIS III II ISI IIIT IIGIU ISIS II IOI ICICI ICICI III IOI IE
Royal Mail Group Limited registered in England and Wales registered number
4138203 registered office 148 Old Street London EC1V 9HQ
This email and any attachments are confidential and intended for the addressee only.
If you are not the named recipient, you must not use, disclose, reproduce, copy or
distribute the contents of this communication.
If you have received this in error, please contact the sender and then delete this
email from your system.
JES IFS IO SII IIGEIGGSIG SIG IOS IIOGIIS GSI IOUS IOI IOI IOI IOI IE