WBONO0000739
WBON0000739
From: Steve Allchorn
To: "'andrew.parsons¢ GRO H
Subject: Fw: Follow up from call
Date: Thu, 20 Jun 2013 09:49:16 +0000
Importance: Normal
Attachments: SRO0S_V2.doc
Inline-Images: image001 jpg; image002.png; image003.png; image004.png; image005.png;
image006.png; image007.png; image008 jpg
From: Steve Allchorn
Sent: Thursday, June 20, 2013 09:46 AM
To: 'Parsons,.Andrew.I, GRO. }
i _ GRO ween
Subject: Fw: Follow up from call
Andy
Original list of questions provided by Second Sight regarding Spot Review 5 that drove the initial SR submission.
Email chain provides some context.
Thanks
Steve
From: Ian Henderson [;
Sent: Monday, June 03, 2013 04:36 PM
To: Steve Allchorn
Cc: Simon Baker; 'Ron Warmington’ <i GRO i
Subject: RE: Follow up from call
Steve
I'm sorry for the delay in replying. There's a lot going on at the moment...
I attach a copy of Spot Review 5 which describes the allegations that have been made.
The emails that have been forwarded to you appear to describe matters that may be relevant to the allegation.
Please note that we are primarily interested in finding out the following:
1. What capabilities did the POL Bracknell team have? (As far as TC or Rem Out type transactions or Journal
adjustments are concerned)
What were the PHYSICAL or LOGICAL controls over their use of the systems available to them?
3. What audit trail is available to show the extent that they posted TC or Rem Out type transactions, or
Journal adjustments?
4. Can we reply of the COMPLETENESS of the audit trail? i.e. does it record all transactions or just
transactions meeting certain criteria? Is it protected from user manipulation?
What USER ID was used if TC type transactions or journal adjustments were posted?
Could the POL Bracknell team log on with either super user or SMPR credentials?
7. How would TC, Rem Out or Journal Adjustment type transactions executed by the POL Bracknell team be
seen by SPMR of Branches affected by those actions?
N
au
There are probably other questions / issues that will arise after you have had a preliminary look at this.
WBD_000609.000001
WBONO0000739
WBON0000739
Please note that we're not really interested in what the procedures manual says about any of this. We need to look
at whether it would be possible for a rogue employee to do what is alleged and what log files would be generated
to record that activity. Please note that I have now been provided with a second batch of employee email and I
may find other emails that are potentially relevant to this matter.
Thank you for your help with this
With best wishes
Ian R Henderson CCE CISA FCA
Advanced Forensics - London, UK
Forensic computing expert witness and electronic disclosure specialist
GRO ~~
Website: http://advancedforensics.com
LinkedIn: http://linkedin.com/in/forensicgod
Twitter: http://twitter.com/forensicgod
CONFIDENTIALITY. This email and any attachments are confidential and may also be
privileged. If you are not the intended recipient, please notify me at
ind delete the email and any attachments.
From: Steve Allchorn [; GRO j
Sent: 30 May 2013 12:43
To: Ian Henderson { GRO i
Subject: FW: Follow up from call
Sensitivity: Confidential
Hi lan
I've been forwarded the email stream below however having not been party to prior conversations or spoken to
Susan as she is formally off-work I just need to understand the context of the enquiry as the email pdf's attached
are a collection of individual instances rather than a clear line.
My perception of what I think you need is;
1) Aclear documentation/articulation of the end-to-end Transaction Corrections process, how it is applied
and the sign-off authorities that are in place (e.g. subpostmaster acceptance etc.).
2) An understanding of how the attached email instances relate to that process and authorities.
Let me know if I'm on the right lines or not.
Thanks
Steve Allchorn I IT & Change Lead CPMO Manager
2" Fir, Central Wing, 148 Old Street, LONDON, ECIV 9HQ
Post Office stories
©0®OOGO®
@postofficenews
WBD_000609.000002
WBONO0000739
WBON0000739
————
From: Susan Crichton
Sent: 28 May 2013 15:00
To: Steve Allchorn
Cc: Alwen Lyons
Subject: FW: Follow up from call
Sensitivity: Confidential
Steve - copy of some of the emails as extracted by lan Henderson, please can you forward to FJ as appropriate.
Susan
From: Ian Henderson [/
Sent: 28 May 2013 09:35
To: Susan Crichton; Alwen Lyons
Ce: rwarming”
Subject: RE: Follow up from call
ity: Confidential
I attach 11 emails from our preliminary review of the Bracknell data. Please note that I only received the second
batch of Bracknell data on Friday and it will take 3 or 4 days to process.
With best wishes
Ian R Henderson CCE CISA FCA
Advanced Forensics - London, UK
Forensic computing expert witness and electronic disclosure specialist
UK Mobile:
Email
Website: http://advancedforensics.com
LinkedIn: http://linkedin.com/in/forensicgod
Twitter: http://twitter.com/forensicgod
CONFIDENTIALITY. This email and any attachments are confidential and may also be
privileged. If you are not the intended recipient, please notify me at
i and delete the email and any attachments.
From: Susan Crichton I” GRO I
Sent: 24 May 2013 17:54
To: ‘irhi '; Alwen Lyons
Cc: 'rwarming) “GRO:
Subject: Re: Follo
Sensitivity: Confidential
lan - thanks could you also send the details of the relevant emails to help us move forward this work next week.
Thanks
Susan
WBD_000609.000003
WBONO0000739
WBON0000739
From: Ian Henderson
Sent: Friday, May 24, 2013 09:35 AM
To: Alwen Lyons; Susan Crichton
Cc: 'Ron Warmington’ <!
Subject: Follow up from call
As requested, please find attached the letter from JA to JFSA received by us on 19 April
I also attach the Rudkin Spot Review sent to POL on 10 May
With best wishes
Ian R Henderson CCE CISA FCA
Advanced Forensics - London, UK
Forensic computing expert witness and electronic disclosure specialist
LinkedIn: http://linkedin.com/in/forensicgod
Twitter: http://twitter.com/forensicgod
CONFIDENTIALITY. This email and any attachments are confidential and may also be
privileged. If you are not the intended recipient, please notify me at
and delete the email and any attachments.
This email and any attachments are confidential and intended for the addressee only. If you are not the named
recipient, you must not use, disclose, reproduce, copy or distribute the contents of this communication. If you have
received this in error, please contact the sender by reply email and then delete this email from your system. Any views
or opinions expressed within this email are solely those of the sender, unless otherwise specifically stated.
POST OFFICE LIMITED is registered in England and Wales no 2154540. Registered Office: 148 OLD STREET,
LONDON EC1V 9HQ.
This email and any attachments are confidential and intended for the addressee only. If you are not the named
recipient, you must not use, disclose, reproduce, copy or distribute the contents of this communication. If you have
received this in error, please contact the sender by reply email and then delete this email from your system. Any views
or opinions expressed within this email are solely those of the sender, unless otherwise specifically stated.
POST OFFICE LIMITED is registered in England and Wales no 2154540. Registered Office: 148 OLD STREET,
LONDON EC1V 9HQ.
This email and any attachments are confidential and intended for the addressee only. If you are not the named recipient,
you must not use, disclose, reproduce, copy or distribute the contents of this communication. If you have received this in
error, please contact the sender by reply email and then delete this email from your system. Any views or opinions
expressed within this email are solely those of the sender, unless otherwise specifically stated.
POST OFFICE LIMITED is registered in England and Wales no 2154540. Registered Office: 148 OLD STREET,
LONDON EC1V 9HQ.
WBD_000609.000004