POL00106867 - Email from Rob G Wilson to Dave Posnette, Doug Evnas, CC Andy Hayward, Dave King, Mandy Talbot re Challenges to Horizon

Evidence on official site

ey

I

Head of Criminal Law

POL00106867
POL00106867

Rob G Wilson To: Dave Posnett/e/POSTOFFICE@POSTOFFICE, Doug
03/08/2010 11 Evansle/POSTOFFICE@POSTOFFICE
3/2010 11:23 ce: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave M

King/e/POSTOFFICE@POSTOFFICE, Mandy
Talbot/e/POSTOFFICE@POSTOFFICE, Rebekah
Subject: Re: Fw: Challenges to HorizonI

Dave,
If it is thought that there is a difficulty with Horizon then clearly the action set out in your memo is not
only needed but is imperative. The consequence however will be that to commence or continue to
proceed with any criminal proceedings will be inappropriate. My understanding is that the integrity of
~ Horizon data is sound and it is as a result of this that persistent challenges that have been made in
court have always failed. These challenges are not new and have been with us since the inception of
Horizon as it has always been the only way that Defendants are left to challenge our evidence when
they have stolen money or where they need to show that our figures are not correct.

What is being suggested is that an internal investigation is conducted. Such an investigation will be
disclosable as undermining evidence on the defence in the cases proceeding through the criminal
courts. Inevitably the defence will argue that if we are carrying out an investigation we clearly do not
have confidence in Horizon and therefore to continue to prosecute will be an abuse of the criminal
process. Alternatively we could be asked to stay the proceedings pending the outcome of the
investigation, if this were to be adopted the resultant adverse publicity could lead to massive
difficulties for POL as it would be seen by the press and media to vindicate the current challenges.
The potential impact however is much wider for POL in that every office in the country will be seen to
be operating a compromised system with untold damage to the Business. Our only real alternative to
avoid the adverse publicity will be to offer no evidence on each of our criminal cases. This should
mitigate some adverse publicity but is not a total guarantee.

To continue prosecuting alleged offenders knowing that there is an ongoing investigation to determine
the veracity of Horizon could also be detrimental to the reputation of my team. If we were to secure
convictions in the knowledge that there was an investigation, where the investigation established a
difficulty with the system we would be open to criticism and appeal to the Court of Appeal. The Court
of Appeal will inevitably be highly critical of any prosecutor's decision to proceed against Defendant's
in the knowledge that there could be an issue with the evidence.

What we really need to do is impress on Fujitsu the importance of fully cooperating in the provision of
technical expertise and witness statements to support the criminal and civil litigation now and in the
future.

Given the nature of the discussions that took palce on the 26/2 I am staggered that I was not invited to
* take part in the conference.

Rob Wilson

Dave Posnett

Dave Posnett To: Mandy Talbove/POSTOFFICE@POSTOFFICE, Rod
, Ismay/elPOSTOFFICE@POSTOFFICE, Rebekah
0170812010 17:02 Mantle/e/POSTOFFICE@POSTOFFICE, Dave M
King/e/POSTOFFICE@POSTOFFICE, Sue
Lowther/e/POSTOFFICE@POSTOFFICE, Andy
Hayward/e/POSTOFFICE@POSTOFFICE
ce: Rob G Wilson/e/POSTOFFICE@POSTOFFICE
Subject: Fw: Challenges to Horizon

All,

Can we please ensure that Rob Wilson (Head Of Criminal Law, RMG) is kept appraised of the

POL00106867
POL00106867
—y

POL00106867

POL00106867

situation and included in any further meetings/updates on this subject. Our prosecution cases have
faced an increase in challenges as well as our civil cases, so the activities outlined below, and indeed
going forward, are applicable to both Legal teams.

Regards,

Dave Posnett
Fraud Risk Manager

: Security Suite (G14), Leatherhead DO, Station Rd, Leatherhead, KT22 7AE

a
s
4
a

Greys wae
@&

~~ Forwarded by Andy Hayward/e/POSTOFFICE on 26/02/2010 17:35 ——~

&y ~. Andy Hayward To: Mandy Talbot/e/POSTOFFICE@POSTOFFICE, Rod
. ismay/e/POSTOFFICE@POSTOFFICE, Rebekah
2610212010 17:01 Mantle/e/POSTOFFICE@POSTOFFICE, Dave M
~ gp! King/e/POSTOFFICE@POSTOFFICE, Sue
‘ei Lowther/e/POSTOFFICE@POSTOFFICE
ce: David X Smith/e/POSTOFFICE@POSTOFFICE, John M
ro] Scott/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE
Subject: Challenges to Horizon

All,

following our conference call today, below is a brief summary of the agreed key activities to progress
the next steps in relation to the above piece of work:

1) AH & MT to provide SL/DK with information on past and present cases with reference to the Horizon
Challenges (Criminal & Civil cases).

(‘Note: I have asked the fraud team to review approx. past 2-3 years casefile although these
challenges are of a more recent nature).

2) Information Security (SL &DK) to conduct initial investigations and provide Terms of Reference
outlining remit and requirements to carry out full investigation (inc. resource, timescales and any
associated ancillary costs).

(N.B. agreement by all that with DK and our ‘banking consultant’ (Paul Hallidan), we have far more
expertise and knowledge than anyone else is likely to produce for this initial piece of work).

3) Subject to agreement of 2 above, conduct full investigations into integrity issues, with conclusions/
report provided. Once investigated and conclusions drawn, gain external verification to give a level of '
external gravitas' to the response to these challenges. (Recommend Ernst & Young as most suitable
partner to complete this... TBA).

Additional:

AP: DP to continue with investigation into Alresford (outstanding debt) case and feed into MT & wider
review.

POL00106867
POLO00106867

POL00106867
POL00106867

AP: DP to forward details to all on previous investigations conducted on 2 x Horizon challenge cases.
Note: Ensure that any response formulated includes an ongoing review to any developments/Changes
to Horizon, that in turn will support legal challenges in the future. (DK commented that there were
already systems in place that would verify and support this).

Dave S/ John S
if there is anything else you wish to comment or add please advise.
As I am away next week could I ask that you direct any immediate responses via Dave Posnett
please. Mandy Talbot (MT) Rod Ismay (RI)
Thanks in advance,
Rebakah Mantle (RM) Dave king (DK)

Sue Lowther (SL) Dave Posnett (DP)
Andy

Andy Hayward (AH)
Regards,
Andy Hayward

Senior Fraud Risk Programme Manager
Post Office Ltd. Security Team

F Spread the afain
APE UNE a
Confidential Information: This e-mail message is for the sole use of the intended recipient (s) and may conizin

confidentist and priviteyed information. Any unauthorised review, use, disctosure or distribution is prohibted. {
ifyou are notthe intended recipient, please contact me by reply e-mailand destroy alt copies of the orginal
message.

ety Please consider the environment before printing this e-mail

POL00106867
POL00106867

POL00106867
POL00106867

Rob G Wilson To: Sue Lowtherle/POSTOFFICE@POSTOFFICE
. cc: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave M
09/03/2010 13:49 King/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE, David X
Subject: Re: Fw: Horizon disputed casesI

Thanks,

We have additional difficulties in relation to challenges to Horizon. Today i have been made aware of
a prosecution being conducted by the CPS where Horizon is being challenged. The case may have
already been identified by you. The difficulty however will be our lack of control over any case that is
not being prosecuted by my team.

Rob Wilson
Head of Criminal Law

Sue Lowther

6 Sue Lowther To: Rob G Wilson/e/POSTOFFICE@POSTOFFICE
. , ce: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave M
08/03/2010 17:01 King/e/POSTOFFICE@POSTOFFICE, Dave

Posnett/e/POSTOFFICE@POSTOFFICE, David X
Smith/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE, John M
Scott/e/POSTOFFICE@POSTOFFICE, Mandy
Talbovle/POSTOFFICE@POSTOFFICE, Rebekah
Mantle/e/POSTOFFICE@POSTOFFICE, Rod
ismayle/POSTOFFICE@POSTOFFICE

Subject: Re: Fw: Horizon disputed cases}

Rob,

Essentially it means that we would wish to examine that the Security controls that we have specified
for Horizon and those systems with which it interfaces are indeed in place and working correctly.

Yours
Sue

@ Susan L Lowther
Information Security
Tel

— Laptop Security -Leash it, don't lose it - its your responsibility! ----
Rob G Wilson

Rob G Wilson To: Sue Lowther/e/POSTOFFICE@POSTOFFICE
! ce: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave M

98/08/2010 14:31 King/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE, David X
Smith/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE, John M
Scott/e/POSTOFFICE@POSTOFFICE, Mandy
Talbot/e/POSTOFFICE@POSTOFFICE, Rebekah
Mantle/e/POSTOFFICE@POSTOFFICE, Rod
ismay/e/POSTOFFICE@POSTOFFICE

Subject: Re: Fw: Horizon disputed casesE)

Sue,
I note that you wish to examine the integrity of Horizon from an ‘information security perspective’.

POL00106867
POL00106867

POL00106867

POL00106867

What does this mean?
Rob Wilson
Head of Criminal Law

Sue Lowther To: Andy Hayward/e/POSTOFFICE@POSTOFFICE

08/03/2010 13:50 ce: David X Smith/e/POSTOFFICE@POSTOFFICE, John M
Scott/e/POSTOFFICE@POSTOFFICE, Mandy
Talbot/e/POSTOFFICE@POSTOFFICE, Rod
Ismay/e/POSTOFFICE@POSTOFFICE, Rebekah
Mantle/e/POSTOFFICE@POSTOFFICE, Dave M
King/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE, Rob G
Wilson/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE

Subject: Re: Fw: Horizon disputed cases}

All,

As was discussed on the conference call and taking into account Rob's comments, to confirm that
what we are looking at is a 'general' due diligence exercise on the integrity of Horizon, to confirm our
belief in the robustness of the system and thus rebutt any challenges.

The Information Security team have looked at the information that has been forwarded to them, re the
above and it seems that the issues raised are mainly around procedural items and about ‘Accounting’
reconciliation.

To enable us to examine the Integrity of Horizon from an Information Security perspective we need
input from a number of areas.

1. A decription of the accounting process from the business perspective, including the interfaces
between Horizon and POL/FS and the process by which ‘error notices' are generated.

2. The identity of all the offices making allegations, together with a list of loss declarations from those
Offices.

3. A report from Service Delivery of all the problems they have received through the Live Service
Desk, from the offices in 2 above.

Rod, could you please arrange for someone to provide item 1
Andy, item 2
Information Security will provide item 3 once we have the complete list of offices.

Once we have that information, I can then put together a plan of how we will examine the system
‘integrity’ of Horizon and the resource required to complete it.

Yours
Sue.

Susan L Lowther

Information Security
Tet GRO :

Laptop Security -Leash it, don't lose it - its your responsibility! ----
Andy Hayward

& Andy Hayward To: Mandy Talbot/e/POSTOFFICE@POSTOFFICE, Rod
7 Ismay/e/POSTOFFICE@POSTOFFICE, Rebekah
a” 26/02/2010 18:01 Mantle/eIPOSTOFFICE@POSTOFFICE, Dave M

POL00106867
POL00106867

POL00106867

POL00106867

(e) King/e/POSTOFFICE@POSTOFFICE, Sue
Lowther/e/POSTOFFICE@POSTOFFICE, Dave
e~ Posneti/e/POSTOFFICE@POSTOFFICE
* 9! ce: David X Smith/e/POSTOFFICE@POSTOFFICE, John M
eo Scott/e/POSTOFFICE@POSTOFFICE
~s Subject: Fw: Horizon disputed cases

All,

further to our discussion earlier today, additional information in the attached pdf article below. As part
of the wider review It may well be worthwhile understanding the 'outcome' of each of the case studies
referenced, where applicable (i.e. criminal/civil) and that may assist in our review.

Cheers,

Andy

--—- Forwarded by Andy Hayward/e/POSTOFFICE on 26/02/2010 12:15 --—-

Graham C Ward To: Andy Hayward/e/POSTOFFICE@POSTOFFICE
ee 25/02/2010 16:10 cc: Sue Lowther/e/POSTOFFICE@POSTOFFICE
Subject: Re: Fw: Horizon disputed cases

Andy

fyi

Regards

Graham

Andrew / Jason

1'm aware of two ongoing cases at West Byfleet (John Longman) & Orford Rd ? (Lisa Allen) and
also some historical cases (which are included on the attachment below), but as F's, we wouldn't
have Horizon disputed cases other than those reported by the Investigator's, who will have far more
details on the issues than us.

/'ve attached an article from an IT magazine which may have bought this issue to the fore in the 1st
place and which may be of interest to lan.

Regards
Graham
Andy Hayward
~~, Andy Hayward To: Andrew Daley/e/POSTOFFICE@POSTOFFICE, Jason G
25/02/2010 15:48 Collins/e/POSTOFFICE@POSTOFFICE, Graham C

Ward/e/POSTOFFICE@POSTOFFICE.
cc: Graham Brander/e/POSTOFFICE@POSTOFFICE
Subject: Fw: Horizon disputed cases

Andrew,

Thanks for this (should be Graham Ward... Graham B, please ignore)

When completed can you also fwd. details to Sue Lowther as she is leading on behalf of Security.
Please also send Sue any additional documents or reports pertinent to specific cases (i.e.Jason the
forensic report from John L's case).

With reference to case information, bullet points will suffice, if more is required we can supply

POL00106867
POL00106867

POL00106867

POL00106867
thereafter.
Cheers, N
Minny
AL u
Andy Seay th ow Seuw ih
Adu
-— Forwarded by Andy Héyward/e/POSTOFFICE on afoanoro 15:42 —- Z
Andrew Daley To: Jason G Collins/e/POSTOFFICE@POSTOFFICE, Gfaha
: Branderle/POSTOFFICE@POSTOFFICE
25/02/2010 11:49 ec: (bec: Andy Hayward/e/POSTOFFICE)
Subject: Horizon disputed cases
Jason/Graham,

Andy called me and asked whether you guys, (Graham, if FIU have any cases in dispute/new issues
that could affect your case) could put together some stats on these cases, where the accused's
defence was/is that the Horizon data is unreliable for any amount of reasons given by the accused .

This should be sent to lain within the next few days. lain will need as much infomation as possible.
Regards,

Andrew
>>>> Horizon cases.xls attachment was removed from this email <<<<

>>>> Horizon blamed.pdf attachment was removed from this email <<<<

POL00106867
POL00106867

POL00106867
POL00106867

Rob G Wilson To: Dave M King/e/POSTOFFICE@POSTOFFICE
08/03/2010 16:11 cc: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave
. Posnett/e/POSTOFFICE@POSTOFFICE, David X

Smith/e/POSTOFFICE@POSTOFFICE, lain
Subject: Re: Fw: Horizon disputed casesI

Dave,
Thanks for this.

Rob Wilson
Head of Criminal Law

Dave M King To: Rob G Wilson/e/POSTOFFICE@POSTOFFICE
y cc: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave

08/03/2010 15:27 Posnett/e/POSTOFFICE@POSTOFFICE, David X
Smith/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE, John M
Scott/e/POSTOFFICE@POSTOFFICE, Mandy
Talbot/e/POSTOFFICE@POSTOFFICE, Rebekah
Mantle/e/POSTOFFICE@POSTOFFICE, Rod
Ismay/e/POSTOFFICE@POSTOFFICE, Sue
Lowther/e/POSTOFFICE@POSTOFFICE

Subject: Re: Fw: Horizon disputed cases)

8

Rob

Thanks for you time earlier.

As discussed, I can confirm that we are in no way questioning/investigating the financial integrity of
Horizon, or of the accounting system as a whole. The Information Security review is to look at the
ways in which messages are sent at a system level and whether there are any additional measures we
could put in place to make it easier to show message integrity at that level (below that of any
reconciliation or accounting) and thus improve the statements/evidence available.

The intention is to look at the current and past challenges to identify where common claims are being
made enabling the production/adaptation of the statements produced in support of the system

@ information.

Thanks

Dave King
Security Architect

Rob G Wilson

Rob G Wilson To: Sue Lowther/e/POSTOFFICE@POSTOFFICE
. cc: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave M

08/03/2010 14:31 King/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE, David X
Smith/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE, John M
Scott/e/POSTOFFICE@POSTOFFICE, Mandy
Talbot/e/POSTOFFICE@POSTOFFICE, Rebekah
Mantle/e/POSTOFFICE@POSTOFFICE, Rod
Ismay/e/POSTOFFICE@POSTOFFICE,

POL00106867
POL00106867

POLO0106867
POL00106867

Subject: Re: Fw: Horizon disputed casesE)

Sue,

I note that you wish to examine the integrity of Horizon from an ‘information security perspective’.
What does this mean?

Rob Wilson

Head of Criminal Law

Sue Lowther

Sue Lowther To: Andy Hayward/e/POSTOFFICE@POSTOFFICE
7 ce: David X Smith/e/POSTOFFICE@POSTOFFICE, John M

08/03/2010 13:50 Scott/e/POSTOFFICE@POSTOFFICE, Mandy
Talbot/e/POSTOFFICE@POSTOFFICE, Rod
Ismay/e/POSTOFFICE@POSTOFFICE, Rebekah
Mantle/e/POSTOFFICE@POSTOFFICE, Dave M
King/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE, Rob G
Wilson/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE

Subject: Re: Fw: Horizon disputed cases)

All,

As was discussed on the conference call and taking into account Rob's comments, to confirm that
what we are looking at is a ‘general’ due diligence exercise on the integrity of Horizon, to confirm our
belief in the robustness of the system and thus rebutt any challenges.

The Information Security team have looked at the information that has been forwarded to them, re the
above and it seems that the issues raised are mainly around procedural items and about ‘Accounting’
reconciliation.

To enable us to examine the Integrity of Horizon from an Information Security perspective we need
input from a number of areas.

1, Adecription of the accounting process from the business perspective, including the interfaces
between Horizon and POL/FS and the process by which ‘error notices’ are generated.

2. The identity of all the offices making allegations, together with a list of loss declarations from those
Offices.

3. A report from Service Delivery of all the problems they have received through the Live Service
Desk, from the offices in 2 above.

Rod, could you please arrange for someone to provide item 1
Andy, item 2
Information Security will provide item 3 once we have the complete list of offices.

Once we have that information, I can then put together a plan of how we will examine the system
‘integrity’ of Horizon and the resource required to complete it.

Yours
Sue.

Susan L Lowther
Informati i

Laptop Security -Leash it, don't lose it - its your responsibility! ----
Andy Hayward

POL00106867
POL00106867

POL00106867
POL00106867

Ce) Andy Hayward To: Mandy Talbot/e/POSTOFFICE@POSTOFFICE, Rod
I Ismay/e/POSTOFFICE@POSTOFFICE, Rebekah

@ ~ 26/02/2010 18:01 Mantle/e/POSTOFFICE@POSTOFFICE, Dave M

f f I King/e/POSTOFFICE@POSTOFFICE, Sue

‘fe. Lowther/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE

feo ] ce: David X Smith/e/POSTOFFICE@POSTOFFICE, John M
Scott/e/POSTOFFICE@POSTOFFICE
Subject: Fw: Horizon disputed cases

All,

further to our discussion earlier today, additional information in the attached pdf article below. As part
of the wider review It may well be worthwhile understanding the ‘outcome’ of each of the case studies
referenced, where applicable (i.e. criminal/civil) and that may assist in our review.

Cheers,

Andy

++ Forwarded by Andy Hayward/e/POSTOFFICE on 26/02/2010 12:15 —-

Graham C Ward To: Andy Hayward/e/POSTOFFICE@POSTOFFICE
25/02/2010 16:10 co: Sue Lowther/e/POSTOFFICE@POSTOFFICE

e, Subject: Re: Fw: Horizon disputed casesE]

Andy

fyi

Regards

Graham

Andrew / Jason

/'m aware of two ongoing cases at West Byfleet (John Longman) & Orford Rd ? (Lisa Allen) and
also some historical cases (which are included on the attachment below), but as Fl's, we wouldn't
have Horizon disputed cases other than those reported by the Investigator’s, who will have far more
details on the issues than us.

/'ve attached an article from an IT magazine which may have bought this issue to the fore in the 1st
place and which may be of interest to lan.

Regards
Graham
Andy Hayward
& Andy Hayward To: Andrew Daley/e/POSTOFFICE@POSTOFFICE, Jason G
> Collins/e/POSTOFFICE@POSTOFFICE, Graham C
@ ™ 25/02/2010 15:48 Ward/e/POSTOFFICE@POSTOFFICE
( »! cc: Graham Brander/e/POSTOFFICE@POSTOFFICE
“ei Subject: Fw: Horizon disputed cases.
Andrew,

Thanks for this (should be Graham Ward... Graham B, please ignore)

POL00106867
POL00106867

POL00106867
POL00106867

When completed can you also fwd. details to Sue Lowther as she is leading on behalf of Security.
Please also send Sue any additional documents or reports pertinent to specific cases (i.e.Jason the
forensic report from John L's case).

With reference to case information, bullet points will suffice, if more is required we can supply
thereafter.
Cheers,
Andy
~~» Forwarded by Andy Hayward/e/POSTOFFICE on 25/02/2010 15:42 ——-

Andrew Daley To: Jason G Collins/e/POSTOFFICE@POSTOFFICE, Graham

p Brander/e/POSTOFFICE@POSTOFFICE
25/02/2010 11:49 ce: (bec: Andy Hayward/e/POSTOFFICE)
Subject: Horizon disputed cases

Jason/Graham,
Andy called me and asked whether you guys, (Graham, if FIU have any cases in dispute/new issues
that could affect your case) could put together some stats on these cases, where the accused's
defence was/is that the Horizon data is unreliable for any amount of reasons given by the accused .

This should be sent to lain within the next few days. lain will need as much infomation as possible.
Regards,

Andrew
>>>> Horizon cases.xls attachment was removed from this email <<<<

>>>> Horizon blamed.pdf attachment was removed from this email <<<<

POL00106867
POL00106867

POL00106867

POL00106867

Rob G Wilson To: Sue Lowtherle/POSTOFFICE@POSTOFFICE
. ce: Andy Hayward/e/POSTOFFICE@POSTOFFICE, Dave M
08/03/2010 14:31 King/e/POSTOFFICE@POSTOFFICE, Dave

Posnett/e/POSTOFFICE@POSTOFFICE, David X
Subject: Re: Fw: Horizon disputed casesI

Sue,

I note that you wish to examine the integrity of Horizon from an ‘information security perspective’.
What does this mean?

Rob Wilson

Head of Criminal Law

Sue Lowther

Sue Lowther To: Andy Hayward/e/POSTOFFICE@POSTOFFICE
- cc: David X Smith/e/POSTOFFICE@POSTOFFICE, John M

Py 08/03/2010 13:50 Scott/e/POSTOFFICE@POSTOFFICE, Mandy
Talbot/e/POSTOFFICE@POSTOFFICE, Rod
Ismay/e/POSTOFFICE@POSTOFFICE, Rebekah
Mantle/e/POSTOFFICE@POSTOFFICE, Dave M
King/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE, Rob G
Wilson/e/POSTOFFICE@POSTOFFICE, lain
Murphy/e/POSTOFFICE@POSTOFFICE

Subject: Re: Fw: Horizon disputed cases]

All,

As was discussed on the conference call and taking into account Rob's comments, to confirm that
what we are looking at is a ‘general’ due diligence exercise on the integrity of Horizon, to confirm our
belief in the robustness of the system and thus rebutt any challenges.

The Information Security team have looked at the information that has been forwarded to them, re the
above and it seems that the issues raised are mainly around procedural items and about ‘Accounting’
reconciliation.

To enable us to examine the Integrity of Horizon from an Information Security perspective we need
input from a number of areas.

1. Adecription of the accounting process from the business perspective, including the interfaces
between Horizon and POL/FS and the process by which ‘error notices' are generated.

2. The identity of all the offices making allegations, together with a list of loss declarations from those
offices.

3. Areport from Service Delivery of all the problems they have received through the Live Service
Desk, from the offices in 2 above.

Rod, could you please arrange for someone to provide item 1
Andy, item 2
Information Security will provide item 3 once we have the complete list of offices.

Once we have that information, I can then put together a plan of how we will examine the system
‘integrity’ of Horizon and the resource required to complete it.

Yours
Sue.

Susan L Lowther

POL00106867
POL00106867

POL00106867

POL00106867

nee Laptop Security -Leash it, don't lose it - its your responsibility! ----

Andy Hayward
Ys Andy Hayward To: Mandy Talbotle/POSTOFFICE@POSTOFFICE, Rod
ismay/e/POSTOFFICE@POSTOFFICE, Rebekah
26/02/2010 18:01 Mantle/e/POSTOFFICE@POSTOFFICE, Dave M
King/e/POSTOFFICE@POSTOFFICE, Sue

Lowther/e/POSTOFFICE@POSTOFFICE, Dave
Posnett/e/POSTOFFICE@POSTOFFICE
cc: David X Smith/e/POSTOFFICE@POSTOFFICE, John M
Scoti/e/POSTOFFICE@POSTOFFICE,
Subject: Fw: Horizon disputed cases

All,

further to our discussion earlier today, additional information in the attached pdf article below. As part
of the wider review It may well be worthwhile understanding the 'outcome' of each of the case studies
referenced, where applicable (i.e. criminal/civil) and that may assist in our review.

Cheers,

Andy

~-— Forwarded by Andy Hayward/e/POSTOFFICE on 26/02/2010 12:15 ——

Graham C Ward To: Andy Hayward/e/POSTOFFICE@POSTOFFICE
25/02/2010 16:10 cc: Sue Lowther/e/POSTOFFICE@POSTOFFICE
Subject: Re: Fw: Horizon disputed cases)

Regards

Graham

Andrew/ Jason

1'm aware of two ongoing cases at West Byfleet (John Longman) & Orford Rd ? (Lisa Allen) and
also some historical cases (which are included on the attachment below), but as Fl's, we wouldn't
have Horizon disputed cases other than those reported by the Investigator's, who will have far more
details on the issues than us.

/'ve attached an article from an IT magazine which may have bought this issue to the fore in the 1st
place and which may be of interest to lan.

Regards
Graham
Andy Hayward
&y Andy Hayward To: Andrew Daley/e/POSTOFFICE@POSTOFFICE, Jason G
- Collins/e/POSTOFFICE@POSTOFFICE, Graham C
e 25102/2010 18:48 WardielPOSTOFFICE@POSTOFFICE
{ So I ec: Graham Brander/e/POSTOFFICE@POSTOFFICE

wo Subject: Fw: Horizon disputed cases

POL00106867
POL00106867

POL00106867
POL00106867

Andrew,

Thanks for this (should be Graham Ward... Graham B, please ignore)

When completed can you also fwd. details to Sue Lowther as she is leading on behalf of Security.
Please also send Sue any additional documents or reports pertinent to specific cases (i.e.Jason the
forensic report from John L's case).

With reference to case information, bullet points will suffice, if more is required we can supply
thereafter.
Cheers,
Andy
~~ Forwarded by Andy Hayward/e/POSTOFFICE on 25/02/2010 15:42 ——~

Andrew Daley To: Jason G Collins/e/POSTOFFICE@POSTOFFICE, Graham

‘ Brander/e/POSTOFFICE@POSTOFFICE
25/02/2010 11:49 ce: (bec: Andy Hayward/e/POSTOFFICE)
Subject: Horizon disputed cases

Jason/Graham,
Andy called me and asked whether you guys, (Graham, if FIU have any cases in dispute/new issues
that could affect your case) could put together some stats on these cases, where the accused's
defence was/is that the Horizon data is unreliable for any amount of reasons given by the accused .
This should be sent to lain within the next few days. lain will need as much infomation as possible.
Regards,

Andrew
>>>> Horizon cases.xls attachment was removed from this email <<<<

>>>> Horizon blamed.pdf attachment was removed from this email <<<<

POL00106867
POL00106867