POL00376964 - Letter from Rodric Williams (Solicitor - POL) to Amanda Pearce re: Criminal Cases Review Commission Horizon Computer System

Evidence on official site

POL00376964
POL00376964

Post Office Limited
Finsbury Dials

20 Finsbury Street
London

EC2Y 9AQ

Ms Amanda Pearce

Criminal Cases Review Commission
5 St Philip's Place

Birmingham

B3 2PW

By post only

14 March 2016

Dear Ms Pearce

Criminal Cases Review Commission ("Commission")
Horizon Computer System

I write further your letter of 5 February 2016, which enclosed a notice issued pursuant
to section 17 of the Criminal Appeal Act 1995 (CAA) requiring Post Office Limited (POL)
to produce copies of the following documents referred to in my email to you dated 13
January 2016:

ls the Royal Mail Group prosecution policy;

ii. the Post Office Limited prosecution policy;

iii. the “Horizon Core Audit Process” presentation dated 30 January 2014;

iv. the “Horizon Data Integrity” document dated 2 October 2009;

ve the “Horizon Online Data Integrity for Post Office Limited” document dated
28 March 2012;

vi. the Deloitte LLP draft report dated 23 May 2014; and

vii. the Deloitte LLP “Board Update” dated 4 June 2014

and further to preserve the following documents also referred to in that email:

viii. all ISAE3402 reports detailing the process through which Fujitsu
implements any new functionality or ‘fixes’ and provides the specifics of its
testing regime procedure.

ix. all Bureau Veritas IS027001 reports

x. all Payment Card Industry Data Security Standards reports.

Production of Documents

Documents i. to v. in the list above were sent to you under cover of my 13 January
2016 email.

I now enclose documents vi. and vii., being the Deloitte LLP draft report dated 23 May
2014 and the Deloitte LLP “Board Update” dated 4 June 2014.

Both documents are subject to legal privilege and are provided without waiving that
privilege. That privilege belongs to POL and does not extend to anyone beyond POL and
its professional advisors. This material is also highly sensitive in that in describes various
security aspects of the Horizon system. POL requires that the Commission does not

Post Office Limited is registered in England and Wales. Registered No. 2154540. "
Registered Office Finsbury Dials, 20 Finsbury Street, London. EC2Y 9AQ PostOffice.co.u k
Post Office and the Post Office logo are registered trade marks of Post Office Limited

POL-BSFF-0204357
POL00376964
POL00376964

disclose this material, the fact of its existence, or any information therein to any other
party without Post Office's prior written consent pursuant to section 25 CAA.

Preservation of Materials

I confirm that steps have been taken to preserve the material described at viii. to x.
above.

Please let me know if you require any clarification on the above.

Solicitor
For and on behalf of Post Office Limited

POL-BSFF-0204357_0001