FUJ00123914 - Fujitsu/Post Office Horizon Integrity report about investigations into the integrity of the Horizon system; V0.1a
Evidence on official site
FUJ00123914
FUJ00123914
co Horizon Integrity ~
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
Document Title: Horizon Integrity
Document Reference: ARC/GEN/REPI/Xxxx
Document Type: Report (REP)
Release: N/A
Abstract: This document provides a report about investigations into the
Integrity of the Horizon System provided by Fujitsu to Post Office
Ltd.
Document Status: Draft
Author & Dept: Gareth I Jenkins
External Distribution:
Approval Authorities:
Name Signature
James Davidson Delivery Executive - Post
Office Account
Note. See Post Office Account HNG-X Reviewers/Approvers Role Matrix (PGM/DCM/ION/0001) for guidance.
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref. ARCIGENIREP/Xxxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 1 of 10
FUJ00123914
FUJ00123914
Horizon Integrity
Pe)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
0 Document Control
0.1 Table of contents
Table of Figures .
Table of Tables
0.3 Document History
0.4 Review Details .
0.5 Associated Documents (Internal & External) .
0.6 Abbreviations
0.7 Glossary.
0.8 Changes Expected
0.9
0.10
1.14 Document Structure...
1 Timeline.....
2.2 Business Scope
2.3 Architecture Diagrams
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND. Ref: ARC/GEN/REP/xxxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 2 of 10
FUJ00123914
FUJ00123914
co Horizon Integrity
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
0.2 Figures and Tables
0.2.1 Table of Figures
Figure 1 — Horizon Data Flows...
Figure 2 — Horizon Online Data Flows ..
0.2.2 Table of Tables
None.
0.3 Document History
Version No. I Date Summary of Changes and Reason for Issue Associated Change -
CP/PEAK/PPRR
Reference
Ota 02/10/2012 First Informal Draft.
0.4 Review Details
Review Comments by 03/10/2012
Review Comments to Gareth Jenkins
Mandatory Review
Role Name
James Davidson Delivery Executive
Amit Apte CTO
Role Name
Ed Philips Senior Legal Counsel
Tim Healy Commercial
Jarnail Singh Post Office
sued for Information — Please restrict
this distribution list to a minimum
Position/Role Name
(*) = Reviewers that retumed comments
(1) = Reviewers that returned no comments
0.5 Associated Documents (Internal & External)
Reference Version Date Source
PGM/DCM/TEM/0001 Fujitsu Services Post Office Account Dimensions
(DO NOT REMOVE) HNG-X Document Template
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND: Ref. ARC/GEN/REP/xxxx
LEGALLY PRIVILIDGED Version. Ola
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 3 of 10
FUJ00123914
FUJ00123914
co Horizon Integrity ~
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
Reference Version Date Title Source
ARC/GEN/REP/0001 HNG-X Glossary Dimensions
ARC/GEN/REP/0004 Horizon Data Integrity Dimensions
HR Doc Horizon Integrity - summary report
HR Spread Horizon spreadsheet HR.xls
Horizon Online Data 0.1b 02/04/2012 Horizon Online Data Integrity for Post
Integrity Office Ltd
Misra Witness 1.0 08/10/2010 Witness Statement
Statement
Unless a specific version is referred to above, reference should be made to the current approved
versions of the documents.
0.6 Abbreviations
Abbreviation Definition
0.7 Glossary
See also document ARC/GEN/REP/0001
Term Definition
0.8 Changes Expected
Review comments ete.
0.9 Accuracy
Fujitsu Services endeavours to ensure that the information contained in this document is correct but, whilst every
effort is made to ensure the accuracy of such information, it accepts no liability for any loss (however caused)
sustained as a result of any error or omission in the same.
0.10 Copyright
© Copyright Fujitsu Services Limited 2012. Alll rights reserved. No part of this document may be reproduced, stored
or transmitted in any form without the prior written permission of Fujitsu Services.
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref. ARCIGENIREP/Xxxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 4 of 10
FUJ00123914
FUJ00123914
Horizon Integrity
Pe)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
1 Purpose
This document provides a report about investigations into the Integrity of the Horizon System provided by
Fujitsu to Post Office Ltd.
It has been produced at the request of Jarnail Singh of Post Office Ltd
There are two separate reports that have been previously produced covering the integrity of Horizon
[ARC/GEN/REP/0004] and Horizon Online [Horizon Online Data Integrity] respectively.
The purpose of this report is to provide some further background information and relate this to current
cases.
1.1. Document Structure
Section 2 of the document describes the Horizon system at a high level, giving a time-line for its
development, the Business scope and Architecture diagrams for both the original Horizon System and
the current Horizon Online system.
Section 3 then summarises my views on the overall integrity of the Horizon system and my involvement
in various related cases that Post Office Ltd have asked me to consider.
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND. Ref: ARC/GEN/REP/xxxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 5 of 10
Pe)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
FUJ00123914
FUJ00123914
Horizon Integrity
PRIVILIDGED
2
2.1
The Horizon System
Timeline
Fujitsu were originally awarded a contract in 1996 to provide a Horizon System to Post Office Ltd. The
following provides some key dates and functional changes:
Horizon Pilot 1996
Horizon Rollout 1999 — 2002
Network Banking 2003
EMV 2004
Cash Account removed 2005
Data Centre Migration 2009
HNG-X Rollout 2010
Horizon Online (or HNG-X) was a major re-implementation of Horizon. It was a complete re-
implementation of the business functionality at the counter and utilised a central Database to hold details
of all transactions rather than the MessageStore used by the original Horizon system.
All Post Office Branches migrated from the original Horizon to Horizon Online between January and
September 2010. Historical transactions were made visible in the new system as part of the migration
process.
2.2
Business Scope
The Business scope of Horizon is:
Point Of Sale Application
Transaction Recording
o Allsuch transactions are Audited
Posting Summary Transactions to POL SAP (Post Office Ltd's back end accounting system)
Posting Detailed Transactions to Credence (Post Office Ltd’s back end Management Information
system)
Posting Remuneration Data to HR-SAP (Royal Mail Group's back end Payroll system)
Delivering Client Data to Post Office Ltd's Clients (ie 3% parties that Post Office Ltd acts as an
agent for such as Local Authorities and Utility companies etc)
2.3 Architecture Diagrams
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND. Ref: ARC/GEN/REP/xxxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 6 of 10
FUJ00123914
FUJ00123914
oO Horizon Integrity
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
Audit Agent
Oracle Write
‘Audit
Harvester Extract
Agents —
Data
™ cs .
Extract ~~ Audit Store
Message
store
, Audit System
I Replication
I Audit I Retrieval
Counter Journal Message Audit
store Extract
Figure 1 - Horizon Data Flows
© Copyright Fujitsu Services Ltd 2072 COMMERCIAL IN CONFIDENCE AND _ Ref. ARCIGENIREP xxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date 02/10/2012
PageNo: 7 of 10
FUJ00123914
FUJ00123914
oO Horizon Integrity
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
‘Other
Systems
Data! Copy
BAL [Message
Audit ‘Retrieval
Counter buck
Extract
Figure 2 — Horizon Online Data Flows
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref. ARC/GEN/REP/xxxx
LEGALLY PRIVILIDGED Version: 01a
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 8 of 10,
FUJ00123914
FUJ00123914
Horizon Integrity
Pe)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
3 Horizon Integrity
This is described in the separate integrity documents [ARC/GEN/REP/0004] and [Horizon Online Data
Integrity].
I have been involved personally in a number of challenges to the integrity of the original Horizon system
and produced Witness Statements for a number of cases where the Integrity has been challenged. I am
not aware of any cases where the Integrity of Horizon Online has yet been challenged in court.
I have been passed two documents by Mr Jarnail Singh of Post Office:
e [HR Spread]: This is a Spreadsheet prepared by Helen Rose of Post Office Ltd summarising 25
cases where the Integrity of Horizon or Horizon Online may have been called into question
e [HR Doc]: This is a report also produced by Helen Rose providing further information of 5 of the
cases.
I have looked through the Spreadsheet and recognise the following cases as ones in which I have had
some involvement:
1. Porters Avenue
I attended a case review for this in May 2010 and also provided some comments on the Defence
Expert Witness's Report (produced by Mr Jeffrey E. C. Davidson), but did not appear in court at
the trial
2. West Byfleet
I provided a Witness Statement for this case [Misra Witness Statement] which was a commentary
on the Defence Expert Witness’s Report (produced by Professor Charles McLachlan). I was also.
called as an Expert Witness at the trial and carried out significant analysis of the data produced
as evidence.
In this case the Defendant was found Guilty of both False Accounting and Theft.
3. Rinkfield
I provided a Witness Statement for this case which was a commentary on the Defence Expert
Witness’s Report (produced by Professor Charles McLachlan). This report by Professor
McLachlan was very similar to that which he had produced for West Byfleet case and repeated
much of the same arguments which had been presented in the West Byfleet case. Again I
carried out significant analysis of the data produced as evidence.
I went to court to appear as an Expert Witness, but at the last minute a deal was agreed and the
case did not go to trial.
4. Bishops Hull
I was asked for my views on the Defence Expert Witness’s Report (produced by Mr Mark
Jenner). Having read the report I my view was that in general I agreed with the report. It did not
question the integrity of Horizon, but more the way in which the branch had been managed and
processes not been followed.
The time span of the data associated with this case covered both the Horizon and Horizon Online
Operations. However I did not do any detailed analysis of the data.
I don't believe that this case has yet come to trial.
As I don't recall having any involvement with the other 21 cases I can make no further comment on those.
The main challenges in both the West Byfleet and Rinkfield cases were presented as “Hypothetical
issues” and my Witness Statement in the West Byfleet case [Misra Witness Statement] goes through
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND. Ref: ARC/GEN/REP/xxxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 9of 10
FUJ00123914
FUJ00123914
Horizon Integrity
Pe)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILIDGED
each of these hypotheses and shows that there is no specific evidence for any of them in the data
presented.
In summary I would conclude by saying that I fully believe that Horizon will accurately record all data that
is submitted to it and correctly account for it. However it cannot compensate for any data that is
incorrectly input into it as a result of human error, lack of training or fraud (and nor can any other system).
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND. Ref: ARC/GEN/REP/xxxx
LEGALLY PRIVILIDGED Version: Ota
Uncontrolled if Printed or Distributed Date: 02/10/2012
Page No: 10 of 10