POL00024087
POL00024087
Message
From: Julie George
Sent: 21/07/2015 08:
To: Jane MacLeod Lesley J Sewell!
Subject: Cygwin
Attachments: image001.png
The Fujitsu application for remote access:
I have now got the definitive written confirmation from Fujitsu they cannot/do not access for amendment or deletion
the branches Horizon front office business/financial systems.
This has taken several months.
Patrick (for Sparrow) and Audit have been informed.
Julie
Julie George
Head of Information Security and Assurance Group
Finsbury Dials,
From: Patrick Bourke
Sent: 20 July 2015 16:07
To: Garry Hooton; Julie George
Cc: Eddie Bowden
Subject: RE: Cygwin
Julie
Many thanks for this and for the translation (as a non-IT person, I confess to having had a hard time, personally, pin-
pointing exactly where in this document that clear conclusion appears!).
Kind regards
Patrick
From: Garry Hooton
Sent: 20 July 2015 15:43
To: Julie George; Patrick Bourke
Cc: Eddie Bowden
Subject: RE: Cygwin
Excellent, thanks Julie.
Best
Garry
POL-0020566
POL00024087
POL00024087
Garry Hooton
Acting Head of Internal Audit
The Post Office
Sent from my dows Phone
From: Julie George
Sent: 20/07/2015 13:39
To: Patrick Bourke
Cc: Garry Hooton; Eddie Bowden
Subject: Cygwin
Patrick
CC’d Audit since I am aware that one of my exiting people raised this with you.
I had some concerns over an application ‘Cygwin’, that Fujitsu use on the Horizon systems, it was reported to me that
Fujitsu staff could ‘take control’ of the branches systems.
Given the scope of the Sparrow project and past allegations I thought it prudent to obtain clarity from Fujitsu.
However whilst Fujitsu were happy to verbally confirm the use of the application, they weren’t quite so keen on
providing a written report.
This has taken months but nonetheless I wanted to ensure that there could be no doubt and that we had a definitive
statement from Fujitsu on their remote support if there was a challenge in the future.
The attached provides confirmation that remote access is controlled and cannot be used to take control of or amend
business/financial information on branch systems.
Julie
julie George
Head of Information Security and Assurance Group
Finsbury Dials,
20 Finsbury Street,
London EC2Y 9AQ_
POL-0020566