POL00138209
POL00138209
Message
From: Belinda Crowe [imceaex-
_0=mms_ou=exchange+20administrative+20group+20+28fydibohf23spdit+29_cn=recipients_cn=belinda+20crowe79b93f11-
S69f-4526-a078-f5b4958a8917220@c72a47.ingest.local]
Sent: 03/04/2014 18:43:09
To: James, Garetl
ce: Chris Aujard !
Subject: Re: Strictly Private & Confidential - Subject to Legal Privilege
Attachments:image003.png; image004.png; image.png.pdf; image.png; image.png; image.png; image.png; image.png; image.png;
Gareth
image.png; image.png; image005.png; image006.png; image007.gif; image008.gif; image009.png; image002.jpg; image.png;
image.png
Good to see you today. Further to Rod's email below, and our conversation today, please find attached further
documents relating to Horizon.
They are listed below. I will send the password to you for the ROC document separately.
Best wishes
Belinda
Current Fujitsu POA ISO27001 certification (Fujitsu have advised us in the past this is not to be shared with
third parties but I’ll leave that to your discretion),
The associated Fujitsu POA ISMS Statement of Applicability,
The Post Office Horizon PCI DSS certificate,
The Post Office Horizon PCI DSS signed AOC,
The Post Office Horizon PCI DSS ROC (password on separate email),
The last 3 published Post Office ISMF minutes with Fujitsu,
The last 3 Fujitsu Security Ops Reports.
POL-BSFF-0000438
POL00138209
POL00138209
Best wishes
Belinda
Belinda Crowe
148 Old Street, LONDON, EC1V 9H
On 2 Apr 2014, at 18:58, "Rodric Williams" <="
Gareth,
As discussed earlier today, Post Office Limited is responding to allegations that the “Horizon” IT system used
to record transactions in Post Office branches is defective and/or that the processes associated with it are
inadequate.
In order to respond to these allegations (which have been, and will in all likelihood continue to be, advanced in
the courts), Post Office wants to demonstrate that the Horizon system is robust, fit for purpose, and/or operates
within an appropriate control framework.
In order to determine whether or not Deloittes can help us in this regard, I attach the following documents:
1. “Horizon Core Audit Process” which outlines how Horizon has been designed to operate;
2. “Draft Factfile” which deals with how Post Office uses Horizon in our branch network;
3. “Description of Fujitsu’s System of IT Infrastructure Services supporting Post Office Limited’s POLSAP
and HNG-X applications”;
4. A table of the themes which underlie some of the allegations that Horizon is deficient; and
5. “Note on Horizon Report” which outlines of the type of report we may require.
POL-BSFF-0000438_0001
POL00138209
POL00138209
Could you please review these so that we can advance our discussions on a further call (or meeting) during the
course of tomorrow.
Kind regards, Rodric
Rodric Williams I Litigation Lawyer
(Description: address]
148 Old Street, LONDON, EC1V 9HQ
[Description: phone]
(Description: web]
Post Office stories<http://www.postofficestories.co.uk/>
[Description: twitter]
@postofficenews<http://www.twitter.com/postofficenews>
[Deseription: footer]
<image003.png>
<image004.png>
<image005.png>
<image006.png>
<image007.gif>
<image008.gif>
<image009.png>
<Factfile (updated with SS comments).docx>
<Centrally generated transactions.doc>
<A17938113 v0.4 140327_Note on Horizon Report.docx>
<Horizon Core Audit Process - v1 0.ppt>
<Fujitsu POL ISAE3402 2013.pdf>
<image002.jpg>
This email and any attachments are confidential and intended for the addressee only. If you are not the named recipient,
you must not use, disclose, reproduce, copy or distribute the contents of this communication. If you have received this in
error, please contact the sender by reply email and then delete this email from your system. Any views or opinions
expressed within this email are solely those of the sender, unless otherwise specifically stated.
POL-BSFF-0000438_0002
POL00138209
POL00138209
POST OFFICE LIMITED is registered in England and Wales no 2154540. Registered Office: 148 OLD STREET,
LONDON EC1V 9HQ.
POL-BSFF-0000438_0003