FUJ00155391 - Email from Penny Thomas to Steve Evans, Allen Graham and others RE: New Witness Statement Request Support

Evidence on official site

FUJ00155391

FUJ00155391

From: Thomas Penny[/O=EXCHANGE/OU=ADMINGROUP1/CN=RECIPIENTS/CN=THOMASP]
Sent: Tue 16/12/2008 5:42:00 PM (UTC)
To: Evans Steve (FEL01)I

(BRAO1)

Peter (FI Holmes Alant
Subject: RE: New Witness Statement Request Support
Attachment: Updated: ARQ Aervice issue

See attached

From: Evans Steve (FELO1)

Sent: 16 December 2008 17:41

To: Thomas Penny; Allen Graham (BRA01); Cousins Adam; Sewell Peter (FELO1); Holmes Alan
Subject: RE: New Witness Statement Request Support

What discussion tomorrow?

Stephen A Evans

This e-mail is only for the use of its intended recipient. Its contents are subject to a duty of confidence and may be privileged.

Fujitsu Services does not guarantee that this e-mail has not been intercepted and amended or that it is virus-free.

py Before printing, think about the environment

From: Thomas Penny

Sent: Tuesday, December 16, 2008 5:33 PM

To: Allen Graham (BRAO1); Cousins Adam; Evans Steve (FELO1); Sewell Peter (FELO1); Holmes Alan; Pritchard
Howard; Warham Wendy

Cc: Chambers Anne O; Jenkins Gareth GI

Subject: FW: New Witness Statement Request Support

Please see note below from Anne, and attached spreadsheet containing events which remain after known event filters
have been applied. This data covers 2006-7, which is not unusual. Anne's comments need to be part of our
discussion tomorrow.

Kind regards
Penny

From: Chambers Anne O

Sent: 15 December 2008 17:56

To: Thomas Penny

Cc: Jenkins Gareth GI

Subject: RE: New Witness Statement Request Support

Branch 132001:

Counter 3 had disk errors and was replaced on 12/10/2006.
Further counter 3 disk errors 24/3/2007 - this time cleared by a reboot.
FUJ00155391
FUJ00155391

Counter 1 Lock event writing checkpoint 4/4/2007 02:30 - I think safe to assume this is benign.

When such long periods are covered, especially at branches with many counters, there are almost certainly
going to be some events which look alarming but are, as far as I'm concerned, not particularly unusual over
the estate as a whole. We wouldn't normally investigate them unless there were some grounds for thinking
they had caused a problem - maybe because the PM queried something, or something showed up on the
reconciliation stream.

Trying to justify and assess them so long afterwards, without knowing what / when the problem was, is not
feasible. While I'm happy to help out with this in the short term, I think I'm being pulled much further into
this than I should be. So someone is going to have to work out what Security's approach to this is. In the
meantime perhaps we should just continue to check the lock events since those are the ones which have
been proved to be associated with a financial problem in a handful of cases.

Any thoughts?

From: Barnes Gerald

Sent: 11 December 2008 18:55

To: Thomas Penny; Meek Steven

Cc: Chambers Anne O; Jenkins Gareth GI

Subject: RE: New Witness Statement Request Support

Hi Penny,

I attach my resulting spreadsheet.
Regards,

Gerald Barnes

From: Thomas Penny

Sent: 11 December 2008 16:01

To: Barnes Gerald; Meek Steven

Cc: Chambers Anne O; Jenkins Gareth GI
Subject: New Witness Statement Request Support

Gerald
Could you please check errors for the following:-

132001 - 1 May to 31 Jul 06
132001 - 1 Oct 06 to 25 Jul 07

Many thanks
Penny

Penny Thomas
Security Analyst, Customer Services

FUJ00155391
FUJ00155391

penny.thomast

E-Mai
Web: _ http://uk.fujitsucom

Fujitsu Ser s Limited, Registered in England no 96056, Registered Office 22, Baker Street, London W1U 3BW
This E-mail is only for the use of its intended recipient. Its contents are subject to a duty of confidence and may be privileged. Fujitsu
Services does not guarantee that this E-mail has not been intercepted and amended or that it is virus-free.