FUJITSU RESTRICTED
COMMERCIAL IN CONFIDENCE
Fujitsu Services Ltd CCN NO: 1718
CHANGE CONTROL NOTE
(CCN)
CCN TITLE: Changes in Respect of _ I CHANGE ADMINISTRATION USE ONLY
Ongoing Provision of the Counter CR NO: RTQSR0003682
Access Report
CP NO: CP7408 (2851)
RELEASE: Release Independent EXPIRY DATE: 27" June 2022
CCN RAISED BY: Phil Boardman RAISED DATE: 25" May 2022
SUBMISSION DATE: 6" June 2022
EMERGENCY CHANGE PROCEDURE INVOKED: ¥ES/NO
EMERGENCY IMPLEMENTATION DATE:
ATTACHMENTS: ¥ES+ NO [If yes, Number of]: 0
FUJITSU SERVICES APPROVAL I DATE I POST OFFICE LTD DATE
APPROVAL
SUMMARY and REASON FOR CHANGE:
CW00574 - New Counter Access Report (including the Change Note) agreed to design and
implement production of a weekly report on remote access made by the Fujitsu Services support
users to RDT and Live Post Office Branch counter systems. Work performed under that
CW00574 also provided for 3 months of ongoing production of the report, the final report
produced against that CWO0574 to be provided on Monday 4" July 2022, thus the first provided
under the revised Security Management Service will be produced on Monday 11" July 2022.
This CCN1718 formally agrees the ongoing responsibilities for continued, weekly production of
the report as part of the Security Management Service and the increases in Charges for the
Security Management Service in respect of these additional responsibilities. These changes are
agreed to apply from 11" July 2022.
DETAILS OF CHANGE:
This CC1718 agrees additional responsibilities for the ongoing provision of weekly reports of
remote access made by the Fujitsu Services support users to RDT and Live Post Office Branch
counter systems, as part of the Security Management Service. It also makes changes to the
Operational Fixed Charge in respect of the Security Management Service in Schedule D1, in
respect of these additional responsibilities.
PROPOSED REVISION TO WORDING OF THE AGREEMENT ( including Schedule
reference):
Additions to existing clauses or paragraphs are shown underlined, and deletions are shown with a
CCN1718 FUJITSU RESTRICTED Ref: PGMI/CHM/TEM/0002
COMMERCIAL IN CONFIDENCE _ Version: v2.0
©Copyright Fujitsu Services 2013 Date: 03-JUN-2013
UNCONTROLLED IF PRINTED Page No: 1 of3
FUJ00233140
FUJ00233140
FUJITSU RESTRICTED
COMMERCIAL IN CONFIDENCE
Schedule D1
Annex B - Operational Charges Table
In respect of ongoing Charges for provision of weekly reports of remote access made by the
Fujitsu Services support users to RDT and Live Post Office Branch counter systems, add to the
Security Management Service: Fixed Charge the amount of £630.70 per month for the years
ending 31st March 2023, 31st March 2024 and 31st March 2025. Applicable from 11" July
2022.
Annex E - Variations in Monthly Charges
Add the following entry to the table.
Number of I Row Changed in Annex B Value (£) of Effective Date
CCN. (Description) Change of Change
CCNI1718 Security Management Service: Fixed I £630.70 per Starts 11" July
Charge month 2022
Revision of Wording in Service Description CCDs
SVM/SDM/SD/0017 - Security Management Service: Service Description
Paragraph 2.1.19 is amended, as follows;
“2.1.19 MONFHEY REPORTING
2. 1 Monthly Reporting
Information Governance staff provide a monthly Information Security Reporting Pack
which informs the Management Team, as an input to the Fujitsu Services POA ISMR, of
progress towards IS027001 compliance, results of audits and current risk status. It is
intended that the details contained in this report will expand over time. This includes
reports from the Operational Security Team such as a summary of the types and numbers
of incidents that may impact on the confidentiality, integrity or availability of POA
systems.
This report, together with report sub-sets contained in the service review book, is
provided to the customer on a monthly basis.
For the avoidance of doubt, this element of Security Management Service is limited to
reporting in respect of the HNG-X Application for those elements of the HNG-X System
migrated to Post Office Cloud.
2.1.19.2 Weekly Reporting
Security operations resources shall provide a weekly report to Post Office detailing the
remote access made by the Fujitsu Services support users to RDT and Live Post Office
Branch counter systems.
The report will be provided by Fujitsu Services on a weekly basis and consist of the
CCN1718 FUJITSU RESTRICTED Ref: PGMI/CHM/TEM/0002
COMMERCIAL IN CONFIDENCE _ Version: V2.0
©Copyright Fujitsu Services 2013 Date: 03-JUN-2013
UNCONTROLLED IF PRINTED Page No: 2 of 3
FUJ00233140
FUJ00233140
FUJITSU RESTRICTED
COMMERCIAL IN CONFIDENCE
following detail:
- Summary title
- Date and time of access
- Command Request
> Command Result
- Post Office ServiceNow reference number (where available)
- Rig (i.e. Live or RDT Counters
Reporting will be carried out 1 week in arrears and will be provided on the first Working
Day following the Sunday of each week. The report will be delivered in PDF format, via
HORIce, and will show a week’s worth of counter access logs for the period Monday to
Sunday of the preceding week.”
COMMERCIAL TERMS or CHARGES APPLICABLE IN RESPECT OF THIS CCN
(if any):
CW00574 and Change Note
NEW CCDs and/or CRDs: N/A.
Reference I Title Approved
Version
& Date
AMENDED CCDs and/or CRDs:
Reference I Title Previous I Approved
Version & I Version &
Date Date
SVM/SDM/ I Security Management Service: Service 4.0 8.0
SD/0017 Description 04/12/2013 I 2 months after
CCN approval
(V7.0 approval is
due shortly)
Policies and Standards: N/A
Service Levels (including any Service Level relief required): N/A
P.O. Ltd Responsibilities: N/A
Other: N/A
CONT716 FUJITSU RESTRICTED Ref. PGM/CHM/TEM/0002
COMMERCIAL IN CONFIDENCE _ Version: V2.0
©Copyright Fujitsu Services 2013 Date: 03-JUN-2013
UNCONTROLLED IF PRINTED
Page No: 3 of 3
FUJ00233140
FUJ00233140