POL00058369
POL00058369
(oe) Horizon Integrity
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
Document Title: Horizon Integrity
Document Reference: ARC/GEN/REP/xxxx
Document Type: Report (REP)
Release: N/A
Abstract: This document provides a report about investigations into the
Integrity of the Horizon System provided by Fujitsu to Post Office
Ltd.
Document Status: Draft
Author & Dept: Gareth I Jenkins
External Distribution:
Approval Authorities:
Signature
James Davidson Delivery Executive - Post
Office Account
Note. See Post Office Account HNG-X Reviewers/Approvers Role Matrix (PGM/DCM/ION/0001) for guidance.
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref: ARC/GENIREP [xxx
LEGALLY PRIVILEGED Version: 0.41
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 1 of 10
POL00058369
POL00058369
(oe) Horizon Integrity .
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY E>
PRIVILEGED
0
Document Control
0.1 Table of contents
0 DOCUMENT CONTROL........sccsssessssessssesssssssssessssesstsecsesscencacensasenseneeseaeesentesseeeesee 2
0.1 Table of contents. 2
0.2 Figures and Table: 3
0.2.1 Table of Figure: 3
0.2.2 Table of Table: 3
0.3 Document History. 3
0.4 Review Details.. 3
0.5 Associated Documents (Internal & External). 3
0.6 Abbreviations. 4
0.7 Glossary... 4
0.8 Changes Expecte 4
0.9 Accuracy... 4
0.10 Copyrigh' 4
1 PURPOSE.. 5
1.1. Document Structure. 5
2 THE HORIZON SYSTEM.........ccssscsessesssssssesessessnssssssessseseasseseseneeseessessesenenensasasseee 6
2.1 Timeline........ 6
2.2 Business Scope. 6
2.3. Architecture Diagrams. 6
3 HORIZON INTEGRITY.........scssssssssssesesessesesssssseesessssasseseseeeeseaesrsnensoretecsseeseesneeesaeae 9
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND _Ref: ARC/GENIREP [xxx
LEGALLY PRIVILEGED Version 0.4
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: of 10
POL00058369
POL00058369
Horizon Integrity
Ps)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
0.2 Figures and Tables
0.2.1 Table of Figures
Figure 1 — Horizon Data Flows...
Figure 2 — Horizon Online Data Flow:
0.2.2 Table of Tables
None.
0.3 Document History
Version No. Date Summary of Changes and Reason for Issue Associated Change -
CP/PEAK/PPRR
Reference
0.4 02/10/2012 First Informal Draft.
0.4 Review Details
Review Comments by 05/10/2012
Review Comments to Gareth Jenkins
Mandatory Review
Role Name
James Davidson Delivery Executive
Amit Apte CTO
Role Name
Ed Philips Senior Legal Counsel
Tim Healy Commercial
Jarnail Singh Post Office
Issued for Information — Please restrict
this distribution list to a minimum
Position/Role Name
(* ) = Reviewers that returned comments
(t ) = Reviewers that returned no comments
0.5 Associated Documents (Internal & External)
Reference Version Date Source
PGM/DCM/TEM/0001 Fujitsu Services Post Office Account I Dimensions
(D0 NOT REMOVE) HNG-X Document Template
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref: ARC/GENIREP [xxx
LEGALLY PRIVILEGED Version: 0.41
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 3 of 10
POL00058369
POL00058369
(oe) Horizon Integrity
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
ARC/GEN/REP/0001 HNG-X Glossary Dimensions
ARC/GEN/REP/0004 Horizon Data Integrity Dimensions
HR Doc Horizon Integrity - summary report
HR Spread Horizon spreadsheet HR.xis
Horizon Online Data I 0.1b 02/04/2012 Horizon Online Data Integrity for Post
Integrity Office Ltd
Misra Witness I 1.0 08/10/2010 Witness Statement
Statement
Unless a specific version is referred to above, reference should be made to the current approved
versions of the documents.
0.6 Abbreviations
Abbreviation Definition
0.7 Glossary
See also document ARC/GEN/REP/0001.
Term Definition
0.8 Changes Expected
Review comments etc.
0.9 Accuracy
Fujitsu Services endeavours to ensure that the information contained in this document is correct but, whilst every
effort is made to ensure the accuracy of such information, it accepts no liability for any loss (however caused)
sustained as a result of any error or omission in the same.
0.10 Copyright
© Copyright Fujitsu Services Limited 2012. All rights reserved. No part of this document may be reproduced,
stored or transmitted in any form without the prior written permission of Fujitsu Services.
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref: ARC/GENIREP [xxx
LEGALLY PRIVILEGED Version: 0.41
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 4 of 10
POL00058369
POL00058369
Horizon Integrity
Ps)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
1 Purpose
This document provides a report about investigations into the Integrity of the Horizon System provided
by Fujitsu to Post Office Ltd.
It has been produced at the request of Jarnail Singh of Post Office Ltd
I iS aia Road GAT TS Ca PERT,
There are two separate reports that have been previously produced covering the integrity of Horizon
[ARC/GEN/REP/0004] and Horizon Online [Horizon Online Data Integrity] respectively.
The purpose of this report is to provide some further background information and relate this to current
cases.
1.1 Document Structure
Section 2 of the document describes the Horizon system at a high level, giving a time-line for its
development, the Business scope and Architecture diagrams for both the original Horizon System and
the current Horizon Online system.
Section 3 then summarises my views on the overall integrity of the Horizon system and my involvement
in various related cases that Post Office Ltd have asked me to consider.
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref: ARC/GENIREP [xxx
LEGALLY PRIVILEGED Version: 0.41
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: Sof 10
POL00058369
POL00058369
Horizon Integrity
Ps)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
2 The Horizon System
2.1 Timeline
Fujitsu were originally awarded a contract in 1996 to provide a Horizon System to Post Office Ltd. The
following provides some key dates and functional changes:
* Horizon Pilot 1996
e Horizon Rollout 1999 — 2002
e Network Banking 2003
« EMV 2004
* Cash Account removed 2005
e Data Centre Migration 2009
e HNG-X Rollout 2010
Horizon Online (or HNG-X) was a major re-implementation of Horizon. It was a complete re-
implementation of the business functionality at the counter and utilised a central Database to hold details
of all transactions rather than the MessageStore used by the original Horizon system.
All Post Office Branches migrated from the original Horizon to Horizon Online between January and
September 2010. Historical transactions were made visible in the new system as part of the migration
process.
2.2 Business Scope
The Business scope of Horizon is:
e Point Of Sale Application
e Transaction Recording
o All such transactions are Audited
e Posting Summary Transactions to POL SAP (Post Office Ltd's back end accounting system)
« Posting Detailed Transactions to Credence (Post Office Ltd’s back end Management Information
system)
e Posting Remuneration Data to HR-SAP (Royal Mail Group’s back end Payroll system)
* Delivering Client Data to Post Office Ltd’s Clients (ie 3% parties that Post Office Ltd acts as an
agent for such as Local Authorities and Utility companies etc)
2.3 Architecture Diagrams
DO Titeed 6 add Some words of description Wiese diagrams?
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref: ARC/GENIREP [xxx
LEGALLY PRIVILEGED Version: 0.41
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 6 of 10
POL00058369
POL00058369
oO Horizon Integrity
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
Other
Systems
Audit Agent
Audit
Harvester Extract
Agents
Data
Extract S Audit I Store
Message
store
Audit System
Replication
Audit I Retrieval
Counter Journal Message Audit
store Extract
1
Figure 1 - Horizon Data Flows
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND __ Ref. ARCIGENIREP nox
LEGALLY PRIVILEGED Version: 0.4
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 7 of 10
POL00058369
POL00058369
oO Horizon Integrity
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
Other
Systems
Data ICopy
Audit I Store
BAL Message Audit System
Audit I Retrieval
Counter Audit
Extract
1
Figure 2 — Horizon Online Data Flows
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND __ Ref. ARCIGENIREP nox
LEGALLY PRIVILEGED Version: 0.4
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 8 of 10
POL00058369
POL00058369
Horizon Integrity
fee)
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
3 Horizon Integrity
This is described in the separate integrity documents [ARC/GEN/REP/0004] and [Horizon Online Data
Integrity].
I have been involved personally in a number of challenges to the integrity of the original Horizon system
and produced Witness Statements for a number of cases where the Integrity has been challenged. I am
not aware of any cases where the Integrity of Horizon Online has yet been successfully challenged in
court.
Lhave-b d-two-d ts-by Mr Jarnail-Singh-of Rost Offi
LA: Jooked-through_the-Spreadsheet-and ise-the-followi hich--have-had.
tn-thi the-_Defendant found Guilty-of both Fal ting-and Theft.
3. Rinkfield
I provided a Witness Statement for this case which was a commentary on the Defence Expert
Witness's—Report duced—by—Rrofe Charles—MeLach! Thi rt_byProf
port—{p ye Pp
MeLach lar-to-that which_he-had-produced for West Byfleet d-repeated
h-of-th ts-which-had_been-pi ted-in_the-West-Byfleet int
9 Pi y Ag
carried-out significant. lysis of the data produced idence.
Lwentt ett Expert Wit but-atthe-tast te-a-deal d-and-th
PP Pi a ‘g
4
the-Def Expert-Witness's-Report_(produced_by_Mr-Mark
Pi port_{p
eal i thati mn -with-th t—It-did-net
) g port:
—but th in-which-the-branch-had-b ged-and
The-ti pan-of the dat jated_with-thi d_both_the-Hori Hi
Online Operati H I did-not-d detailed-anat £the-dat
Pi 7 ¥ y 7
I don’t believe-that-thi hi " to-trial
I-don't I-having 1 t- with the-other-24 } k furth t
these:
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND __ Ref. ARCIGENIREP nox
LEGALLY PRIVILEGED Version: 0.4
Uncontrolled if Printed or Distributed Date: 02/10/2012
PageNo: 9of 10
POL00058369
POL00058369
(oe) Horizon Integrity .
FUJITSU COMMERCIAL IN CONFIDENCE AND LEGALLY
PRIVILEGED
The main challenges in boththe-West -Byfleet-and-Rinkfield the cases in which I have been
involved were presented as “Hypothetical issues” and my previous Witness Statements inthe-West-
Gyllest Holst Va. tal Hoy went through each of these hypotheses and showed that
there was no specific evidence for any of them in the data presented.
In summary I would conclude by saying that I fully believe that Horizon will accurately record all data
that is submitted to it and correctly account for it. However it cannot compensate for any data that is
incorrectly input into it as a result of human error, lack of training or fraud (and nor can any other
system).
© Copyright Fujitsu Services Ltd 2012 COMMERCIAL IN CONFIDENCE AND Ref, ARC/GENIREP [xxx
LEGALLY PRIVILEGED Version: 0.41
Uncontrolled if Printed or Distributed Date: 02/10/2012
Page No: 10 of 10