FUJ00154841
FUJ00154841
FUJITSU COMPANY IN CONFIDENCE G&S
HNG-X CHANGE PROPOSAL CP NO: 4867
CP TITLE: HNG-X CP0336 - Enable analysis of DATE RAISED: 26" February
Counter event messages within the HNG-X Audit 2009
solution
REQUIRED IMPLEMENTATION / PURCHASE DATE. ORIGINATOR: Alan Holmes
30" April 2009
CHANGE OWNER: Pete Sewell
ANTICIPATED CP CLOSURE / COMPLETION DATE: (RECEIVED)
30" April 2009
TECHNICAL SPONSOR: Alan
DATE BY WHICH CP TO BE IMPACTED: Holmes (RECEIVED)
17" March 2009
CP CLASSIFICATION: Budget Holder Approval for Impacting:
. (Email or Hard Copy Signature)
FAST-FRAGCK/URGENT/ROU-FINE/FOR INFORMATION’
(‘strikethrough as applicable) S Denham (RECEIVED)
W Warham (RECEIVED)
J Jukes (RECEIVED)
DAB Required: Yes/No (Strikethrough as Date DAB Authorised:
applicable)
LIFECYCLE STAGE:
Stage 1: Strategie Approval Stage 4: Solution Specification
Stage 2 : Start Up-& Feasibility Stage 5 : Solution Build & Test
Stage 3: Requirements Analysis Stage 6 : Implementation
(‘strikethrough as applicable) :
RELATED Change Request/Request for Work Package: N/A
RELATED PEAKs: PC0152376
RELATED HORIZON CPs: N/A
RELATED HNG-X CPs: N/A
Impact statements must consider all transitional states between Horizon and HNG-X, as well
as the final HNG-X solution.
Description of Change Proposed:
The Audit system supports a service (the Prosecution Support Service) whereby POL can request an
extract of historical data that is held within the Audit archive. Typically this requires retrieval of
archived Riposte transaction data. The data, as returned to POL, is often used to support legal
proceedings where, say, a postmaster is accused of fraud. In such cases, we must also provide a
witness statement with the audit data which attests to its provenance and integrity.
In order to further automate this service under HNG-X, for every branch Riposte data retrieval, the
archived events generated by counters at the branch are also analysed to identify any possible
occurrences of problems which might adversely affect the integrity of the transaction data.
The current Horizon tactical solution is a largely manual process, the operation of which is reliant on a
few key individuals. Whilst we believe that we will have to live with this tactical solution for the
remaining life of the Horizon Audit system, a permanent solution for the HNG-X Audit solution is
required. In outline, this will require the following:
> Amending the HNG-X Audit server (ARC) and workstation (AUW) applications to
automatically retrieve and filter Events data when performing Horizon branch data retrievals.’
» Amending the HNG-X Audit server (ARC) and workstation (AUW) applications to
automatically retrieve and filter Events data when performing HNG-X branch data retrievals.”
>» Introduce Prosecution Support process changes around the operation of the amended
‘©Copyright Fujitsu Services Ltd 2007 COMPANY IN CONFIDENCE Ref: PGMICHM/TEM/0001
Version: V1.0
Date: 17-NOV-07
UNCONTROLLED IF PRINTED PageNo: J of 2
FUJ00154841
FUJ00154841
Fe)
FUJITSU COMPANY IN CONFIDENCE
system.
> Identify suitable skilled & committed resources to perform any manual analysis required.
» Identify all ongoing operational costs associated with operating the revised service.
Acceptance Criteria and Methods (Functional and Non Functional):
Testing will be required to ensure that all counter events are extracted by the system and presented to
the Audit workstation user for further analysis
Reason for Change and Justification for Required Date (above):
While we do not believe that (due to time constraints) it is practicable to introduce this change into
Horizon, it is required to ensure the viability of the ongoing Prosecution Support service within HNG-
x.
Consequences if Not Approved:
» Weare obliged to present, and vouch for the integrity of, Audit data that is fit for purpose - i.e.
admissible as evidence in court. If this change is not approved, we will need to continue
operating the current Horizon tactical process for the lifetime of HNG-X.
This solution has a number of deficiencies :
» It is a largely manual process which is error prone & time consuming.
» Itinvolves moving large volumes of data between the Audit server and workstation
> Itis reliant on ad hoc tooling & hardware
> Itis reliant on a few key individuals
> It requires local & insecure storage of event audit data, invalidating certain statements made
within the current witness statement
» Ithas no DR mechanism in the event of DR from BRAO1 to LEW02
Platforms (Physical) Affected: (insert identity and details of all platforms requiring software update by this CP - where
known)
> ARC - Audit Server
> __AUW - Audit Workstation
Business Applications Affected: (insert identity and details of all Applications requiring update by this CP - where
known)
> Audit Server retrieval application
>__Audit workstation client application
External Impact Assessment Distribution: (insert contact details and additional rows as required)
Name: Organisation: Contact No:
N/A N/A N/A
Impact on Royal Mail Group Account: (insert additional rows as required)
Resource Grade Man-days Non Labour Cost (£)
TBA TBA TBA
TOTAL
Documents Affected: (insert additional rows as required)
Document Reference I Title [Current Version
‘The HNG-X Audit solution will need to continue to support the retrieval & analysis of Horizon branch audit
data for seven years
? While there is no reason to believe that the HNG-X counter will suffer the same deficiencies as the Horizon
counter, it is advisable that similar checks are performed in both environments
‘©Copyright Fujitsu Services Ltd 2007 COMPANY IN CONFIDENCE Ref PGMICHM/TEM/0001
Version: V1.0
Date: 17-NOV-07
UNCONTROLLED IF PRINTED PageNo: 2 of 2
FUJ00154841
FUJ00154841
Fe) ~
FUJITSU COMPANY IN CONFIDENCE.
[184 TBA TBA ]
©Copyright Fujitsu Services Ltd 2007 COMPANY IN CONFIDENCE Ref: PGM/CHM/TEM/0001
Version: V1.0
Date: 47-NOV-07
UNCONTROLLED IF PRINTED PageNo: 3 of 2