request filled electronically, by e-mail attachment if ... · beacroft, melanie dr from: monck,...

request filled electronically, by e-mail attachment if available or CD-ROM if not.

http://www.defence.gov.au/FOI/Contact.asp

IMPORTANT: This email remains the property of the Department of Defence and is subject to the jurisdiction of section 70 of the Crimes Act 1914. If you have received this email in error, you are requested to contact the sender and delete the email.

URL:

of 2

12/01/2017

Beacroft, Melanie DR

From: McMahon, Mary MS

Sent: Friday, 26 August 2016 10:34 AM

To: FOI

Cc: McMahon, Mary MS

Subject: RE: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]

Follow Up Flag: Follow up

Flag Status: Completed

Page 1 of 2

12/01/2017

UNCLASSIFIED

Ack.

Mary McMahon | Assistant DirectorCIOG FOI Coordinator Group Governance & Reporting Branch Chief Information Officer Group | 02 614 44070Department of Defence | Anzac Park West | Constitution Avenue, Parkes ACT 2600


From: Matthews, Venessa MS On Behalf Of FOI Sent: Friday, 26 August 2016 9:48 AM To: McMahon, Mary MS Subject: FW: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Mary

FOI have received this request. I would like to know if this is information that Defence is normally happy to release administratively?

If so could you please let me know.

Kind regards

Venessa Matthews FOI Case Officer Information Management and Access Governance and Reform Division _______________________________________________________ CP1-6-002 PO Box 7910 Canberra BC ACT 2610 Phone: + 61 2 6266 2210 E-mail:[email protected]

http://www.defence.gov.au/FOI/privacy.asp

From:Sent: Thursday, 25 August 2016 20:56

FOI 194/16/17Item 1 Serial 2

To: FOI Subject: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]

FOI Request Internet Form

Name: Email: Subject:FOI request Address: Phone Fax: Country: Message:I am requesting the following document(s): an IT inventory of all workstations,

servers and mainframes (if applicable) that operate within the department of defence and allapplicable sub divisions of the department of defence. The requested documents will be madeavailable to the general public, and this request is not being made for commercial purposes.This is part of a research project. In the event that there are fees, I would be grateful if youwould inform me of the total charges in advance of fulfilling my request. I would prefer therequest filled electronically, by e-mail attachment if available or CD-ROM if not.

Referrer URL:http://www.defence.gov.au/FOI/Contact.asp


Page 2 of 2

12/01/2017


From: Matthews, Venessa MS on behalf of FOI

Sent: Monday, 29 August 2016 12:19 PM

To: CIOG FOI Coordinator

Subject: RE: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]



Categories: UNCLASSIFIED

Page 1 of 3

12/01/2017

UNCLASSIFIED

Hi Mary

Thank your for your response. I have sent your response to the case management team for consideration.

Kind regards



From: McMahon, Mary MS On Behalf Of CIOG FOI Coordinator Sent: Monday, 29 August 2016 12:11 To: FOI; Matthews, Venessa MS Cc: McMahon, Mary MS; Bolling, Carolyn MRS Subject: RE: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Vanessa

Administratively, CIOG is not in a position to provide the below information.

Also, the department is bound by the following section of the FOI act: ‘In accordance with Section 33 of the FOI Act, The Department of Defence does not respond to enquiries regarding operational activities pertaining to national security relating to the defence of the Commonwealth’.

Regards Mary


From: Matthews, Venessa MS On Behalf Of FOI


Sent: Friday, 26 August 2016 09:48 To: McMahon, Mary MS Subject: FW: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Mary

FOI have received this request. I would like to know if this is information that Defence is normally happy to release administratively?

If so could you please let me know.

Kind regards



From:Sent: Thursday, 25 August 2016 20:56 To: FOI Subject: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]


FOI request

I am requesting the following document(s): an IT inventory of all workstations,

servers and mainframes (if applicable) that operate within the department of defence and all applicable sub divisions of the department of defence. The requested documents will be made available to the general public, and this request is not being made for commercial purposes. This is part of a research project. In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.


Name:Email:Subject:Address:Phone:Fax:Country:Message:

Referrer URL:

Page 2 of 3

12/01/2017




Page 3 of 3

12/01/2017


From: Monck, Adam MR

Sent: Monday, 5 September 2016 11:36 AM


Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]




Page 1 of 2

12/01/2017

UNCLASSIFIED

Good morning Mary

Further to this email request and your response previously provided, if there is information contained within the documents that relates to operational activities and national security, then this information will be redacted under the FOI Act. However we do require CIOG to provide any documents that fall within scope of the request. An accredited FOI decision maker will then review the documents for potential sensitivities and redact this information. As CIOG does not have an accredited decision maker for FOI requests, we will provide someone from within the directorate for this request. The decision maker will then consult with the relevant SME's in CIOG regarding potential sensitivities in the documents.

If you can please provide a copy of documents matching the scope of this request to me, cc: [email protected] as soon as possible.

Please contact me if you have questions regarding the above.

Regards

Adam Monck Case Manager, Freedom of Information Information Management and Access Governance and Reform Division

Department of Defence CP1-06-005 PO Box 7910 Canberra ACT 2610 (02) 6266 2912

From: Monck, Adam MR Sent: Tuesday, 30 August 2016 09:07 To: CIOG FOI Coordinator Subject: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Dear CIOG FOI Coordinator

1. We have received a new request from under the Freedom of Information Act 1982 (FOIAct) seeking access to:

“I am requesting the following document(s): an IT inventory of all workstations, servers and mainframes (if applicable) that operate within the department of defence and all applicable sub divisions of the department of defence.”

2. The request is considered valid and was registered on 26 August 2016. (Passage of the 30 days forthe applicant to receive a response began on this day.)


3. If you consider that the scope of the request requires clarification or refining, please contact thisoffice immediately to discuss.

4. All contact with FOI applicants is to be undertaken by the FOI Directorate. Action areas MUST NOTcontact FOI applicants directly.

5. The applicant is liable to pay charges for the processing of their request. I ask that you provide acopy of documents matching the scope of this request to me, cc: [email protected] by noon Monday 5 September.

6. Please provide an estimate of your search time in your reply email.

7. Once you have provided the documents to this office, you will not be required to take any furtheraction on the applicant’s request until you have received further advice to that effect from the FOI Directorate.

8. Please let me know if you believe that another office should also be approached to obtain informationfor preparation of a preliminary assessment.

Regards





Page 2 of 2

12/01/2017


From: McMahon, Mary MS

Sent: Monday, 5 September 2016 1:24 PM

To: CIOG FOI Coordinator; CIOG ITIS

Cc: McMahon, Mary MS; Monck, Adam MR

Subject: URGENT RESPONSE REQUIRED: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

Importance: High



Attachments: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

Page 1 of 3

12/01/2017

UNCLASSIFIED

Hi Carolyn and Team

I’ve not heard back from your area regarding a response to my email below. Are you in a position to do so, as the deadline back to CIOG FOI was 1000 this morning?

Note: I have also attached FOI follow‐up email with their comments, please refer to it.

RegardsMary



From: McMahon, Mary MS On Behalf Of CIOG FOI Coordinator Sent: Tuesday, 30 August 2016 11:13 AM To: CIOG ITIS Cc: McMahon, Mary MS Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Carolyn and Team

Below is a request that we have received from Defence FOI. Originally CIOG received an Administration Inquiry re: WWW enquiry: FOI Request, which I responded on behalf of CIOG (refer attached).

The FOI applicant has now formalised it as a Formal Inquiry re: FOI 060/16/17 - Request for Documents. The applicant is asking for:



Are you able to either reiterate my response (refer attached), or provide another formal response?

Please note: CIOG FOI would require a response by 1000 Monday, 5 September as there is a set time frame in which Defence FOI has to respond back to the applicant.

I look forward to hearing from you.

Regards Mary



UNCLASSIFIED










8. Please let me know if you believe that another office should also be approached to obtaininformation for preparation of a preliminary assessment.

Regards

Adam Monck Case Manager, Freedom of Information

Page 2 of 3

12/01/2017

Information Management and Access Governance and Reform Division




Page 3 of 3

12/01/2017









Page 1 of 2

12/01/2017

UNCLASSIFIED

Good morning Mary

Further to this email request and your response previously provided, if there is information contained within the documents that relates to operational activities and national security, then this information will be redacted under the FOI Act. However we do require CIOG to provide any documents that fall within scope of the request. An accredited FOI decision maker will then review the documents for potential sensitivities and redact this information. As CIOG does not have an accredited decision maker for FOI requests, we will provide someone from within the directorate for this request. The decision maker will then consult with the relevant SME's in CIOG regarding potential sensitivities in the documents.

If you can please provide a copy of documents matching the scope of this request to me, cc: [email protected] as soon as possible.

Please contact me if you have questions regarding the above.

Regards




UNCLASSIFIED





FOI 194/16/17Item 1 Serial 6Attachment






8. Please let me know if you believe that another office should also be approached to obtain informationfor preparation of a preliminary assessment.

Regards





Page 2 of 2

12/01/2017


From: McMahon, Mary MS on behalf of CIOG FOI Coordinator

Sent: Tuesday, 6 September 2016 4:25 PM

To: Monck, Adam MR; FOIReview

Cc: McMahon, Mary MS

Subject: FW: URGENT RESPONSE REQUIRED: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]



Page 1 of 4

12/01/2017

UNCLASSIFIED

Good afternoon Adam

Please find attached CIOG's formal response in regards to FOI 060/16/17.

This now completes CIOG involvement in FOI 060/16/17 ‐ Request for Documents unless we receive further communication from DoD FOI.

Regards Mary


From: Bolling, Carolyn MRS On Behalf Of CIOG ITIS Sent: Monday, 5 September 2016 16:07 To: McMahon, Mary MS Cc: CIOG ITIS; CIOG FOI Coordinator Subject: RE: URGENT RESPONSE REQUIRED: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good afternoon Mary,

Apologies, we had a lot on last week and I missed your request for confirmation. Please find my response following:

CIOG is not in a position to provide the requested information. In accordance with Section 33 of the FOI Act, The Department of Defence does not respond to enquiries regarding operational activities pertaining to national security relating to the defence of the Commonwealth.

Providing a detailed response to this enquiry would be against Section 33 of the FOI Act as this would detail our operational ICT capabilities and would pose a major security concern. The main concerns would include but not necessarily be limited to:

Providing the requestor and anyone the information was shared with the ability to trawl the informationfor any possible weaknesses regarding our ICT infrastructure.

Providing the requestor and anyone the information was shared with details around our supply chainaspects as it would provide details (through acquisitions) of our commercial agreements and purchasing history.

In addition to the above there may also be a concern regarding the completeness of records able to be


provided as the request is for all details and our main CIOG database may not include all of the data for our stand alone systems etc.

Please advise if anything further is required on this matter.

Kind regards,

Carolyn Bolling Director Insider Threat & Investigative Support ICT Security Branch | CTO Division | CIOG | Department of Defence

R6 | Russell Offices | Russell Drive, Russell, ACT 2601

P: +61 2 612 70955 | E: [email protected]

From: McMahon, Mary MS Sent: Monday, 5 September 2016 13:24 To: CIOG FOI Coordinator; CIOG ITIS Cc: McMahon, Mary MS; Monck, Adam MR Subject: URGENT RESPONSE REQUIRED: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] Importance: High

UNCLASSIFIED

Hi Carolyn and Team

I’ve not heard back from your area regarding a response to my email below. Are you in a position to do so, as the deadline back to CIOG FOI was 1000 this morning?

Note: I have also attached FOI follow‐up email with their comments, please refer to it.

RegardsMary



From: McMahon, Mary MS On Behalf Of CIOG FOI Coordinator Sent: Tuesday, 30 August 2016 11:13 AM To: CIOG ITIS Cc: McMahon, Mary MS Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Page 2 of 4

12/01/2017

Good morning Carolyn and Team

Below is a request that we have received from Defence FOI. Originally CIOG received an Administration Inquiry re: WWW enquiry: FOI Request, which I responded on behalf of CIOG (refer attached).

The FOI applicant has now formalised it as a Formal Inquiry re: FOI 060/16/17 - Request for Documents. The applicant is asking for:


Are you able to either reiterate my response (refer attached), or provide another formal response?

Please note: CIOG FOI would require a response by 1000 Monday, 5 September as there is a set time frame in which Defence FOI has to respond back to the applicant.

I look forward to hearing from you.

Regards Mary



UNCLASSIFIED









Page 3 of 4

12/01/2017


8. Please let me know if you believe that another office should also be approached to obtaininformation for preparation of a preliminary assessment.

Regards







Page 4 of 4

12/01/2017



Sent: Tuesday, 13 September 2016 10:15 AM

To: Buckman, Harley MR

Subject: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]




Page 1 of 1

12/01/2017

UNCLASSIFIED

Good morning Harley

As discusssed, we have received a request under the Freedom of Information Act 1982 seeking access to the following documents:

“IT inventory of all workstations, servers and mainframes (if applicable) that operate within the department of defence and all applicable sub divisions of the department of defence.”

If possible, can you please provide by email a copy of the documents matching the scope of this request to me by noon Wednesday 14 September 2016. If this timeframe cannot be achieved then please contact me immediately to discuss

If you can please provide an estimate of your search time in your reply email it would be much appreciated.

If you have any questions or require further information then please let me know.

Thanks for your assistance








To: Buckman, Harley MR

Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]




Page 1 of 2

12/01/2017

UNCLASSIFIED

Hey Harley

I require the actual documents that specifies this information (i.e. a spreadsheet or print out from a database), not just the total numbers. This information may not neccesarily be released, but we here at FOI need to be able to determine what the information is first before we can make that decision.

I hope this clarifies the information

If you will need more time to provide this information to me then please let me know.

Thanks



From: Buckman, Harley MR Sent: Tuesday, 13 September 2016 10:24 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Adam,

After reading the request below can I ask that you clarify to what level of detail you require this information.

I would assume that Defence is highly unlikely to hand over a detailed account of these assets and so I will assume for the time being that this information is required in an aggregated form such as the following.

Mainframes - x Servers - x Workstations - x

With regards to the timeframe below I should not have any issue providing you this aggregated information in the time stated.

Regards Harley Buckman


Director Fleet Operations Chief Information Officer Group APW-4-177 ANZAC Park West on Constitution Avenue Reid 2612 ACT Mobile

From: Monck, Adam MR Sent: Tuesday, 13 September 2016 10:15 To: Buckman, Harley MR Subject: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Harley












Page 2 of 2

12/01/2017

s22



Sent: Thursday, 15 September 2016 3:35 PM

To: Scarborough, Mark MR 1





Page 1 of 3

12/01/2017

UNCLASSIFIED

Good afternoon Mark

I note that you are acting in Harley's role in his absence.

I sent the following to Harley on Tuesday. Someone from your area called me about it yesterday, but I do not recall their name.

Can you please provide advice on when you're likely be able to provide this information?




From: Monck, Adam MR Sent: Thursday, 15 September 2016 15:23 To: Buckman, Harley MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hey there Harley

I am just following up on this request from Tuesday.

Are you able to let me know when you're likely be able to provide this information?

Thanks for your assistance.




From: Monck, Adam MR Sent: Tuesday, 13 September 2016 10:36 To: Buckman, Harley MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,






Director Fleet Operations Chief Information Officer Group APW-4-177 ANZAC Park West on Constitution Avenue Reid 2612 ACT

Page 2 of 3

12/01/2017

Mobile


UNCLASSIFIED

Good morning Harley














Page 3 of 3

12/01/2017

s22



Sent: Friday, 16 September 2016 8:15 AM






Page 1 of 5

12/01/2017

UNCLASSIFIED

Hey Mark

The original request went to CIOG FOI Coordinator back on 30 August 2016. There has been subsequent correspondence since that time between Mary McMahon, Carolyn Bolling and myself and eventually I was put in touch with Harley Buckman, who I spoke to about this on Tuesday. Harley said to me that he would provide me with the information.

I hope this clarifies the situation.

Thanks



From: Scarborough, Mark MR 1 Sent: Thursday, 15 September 2016 16:02 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

HI Adam,

I am just confirming our internal process to manage your request. It is my understanding these requests are meant to go to the CIOG FOI coordinator group mailbox in the first instance.

I should be able to provide you an update tomorrow.

Thanks.

Regards,

Mark Scarborough Acting Director – Fleet Management Operations Directorate of Fleet Operations (Hardware) ETOB, ICTOD, CIOG, Department of Defence email: [email protected]


phone: 02 6144 4521 office: APW-4-129

'Asset management is a systematic, structured process covering the whole life of an asset. The underlying assumption is that assets exist to support program delivery' - ANAO, Asset Management Handbook (1996)

From: Monck, Adam MR Sent: Thursday, 15 September 2016 15:35 To: Scarborough, Mark MR 1 Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good afternoon Mark

I note that you are acting in Harley's role in his absence.

I sent the following to Harley on Tuesday. Someone from your area called me about it yesterday, but I do not recall their name.

Can you please provide advice on when you're likely be able to provide this information?




From: Monck, Adam MR Sent: Thursday, 15 September 2016 15:23 To: Buckman, Harley MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hey there Harley

I am just following up on this request from Tuesday.

Are you able to let me know when you're likely be able to provide this information?



Page 2 of 5

12/01/2017



UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,






Director Fleet Operations

Page 3 of 5

12/01/2017

Chief Information Officer Group APW-4-177 ANZAC Park West on Constitution Avenue Reid 2612 ACT Mobile


UNCLASSIFIED

Good morning Harley













IMPORTANT: This email remains the property of the Department of Defence and is subject to the jurisdiction of section 70 of the Crimes Act 1914. If you have received this email in error, you are requested to contact the

Page 4 of 5

12/01/2017

s22

sender and delete the email.



Page 5 of 5

12/01/2017


From: Scarborough, Mark MR 1


To: Monck, Adam MR

Cc: CIOG FOI Coordinator




Attachments: FOI-14SEP16.zip; RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

Page 1 of 4

12/01/2017

UNCLASSIFIED

Hi Adam,

Please see attached files and the notes below from Robert Dunne.

Regards,

Mark Scarborough Acting Director – Fleet Management Operations Directorate of Fleet Operations (Hardware) ETOB, ICTOD, CIOG, Department of Defence email: [email protected] phone: 02 6144 4521 office: APW-4-129


From: Dunne, Robert MR Sent: Wednesday, 14 September 2016 09:03 To: CIOG NAMO; Buckman, Harley MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Harley

I've run a report that I run for the ROMAN folks for IN USE servers and computers. The server file you can open normally in excel, the computers file you'll need to open in excel 2010 due to size.

Let me know if you need anything further.

Cheers

Robert Dunne Team Leader Asset Management

ANZAC PARK WEST02 6144 4505


[email protected] Resource - Fujitsu Australia Limited

Contractor to Defence

From: Cavanagh, Shane MR On Behalf Of CIOG NAMO Sent: Wednesday, 14 September 2016 08:19 To: Dunne, Robert MR Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

From: Buckman, Harley MR Sent: Tuesday, 13 September 2016 15:07 To: Frizza, Jason MR 1; Cavanagh, Shane MR Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Jason, Shane

Sorry guys but we will need to compile a few spreadsheets.

Jason do you have anything which details the four mainframes?

Shane can you please produce a spreadsheet of all the desktops.




UNCLASSIFIED

Hey Harley



Page 2 of 4

12/01/2017

s22


Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley


“IT inventory of all workstations, servers and mainframes (if applicable) that operate within the

Page 3 of 4

12/01/2017

s22

department of defence and all applicable sub divisions of the department of defence.”















Page 4 of 4

12/01/2017


From: Ireton, Tania MISS

Sent: Wednesday, 14 September 2016 1:20 PM

To: Nieuwendyk, Jason MR 1

Cc: Buckman, Harley MR; Ireton, Tania MISS


Page 1 of 4

12/01/2017

UNCLASSIFIED

Good afternoon gentlemen,

The mainframes are :

IBM IBMIBM

Unisys UNISYS UNISYS

Regards, Tania

Tania Ireton Service Delivery Manager - Mainframe, Configuration Management, Service Continuity & Disaster RecoveryDirectorate of Platform Services (DPS)Enterprise Technology Operations Branch (ETOB)Information and Communications Technology Operations Division (ICTOD) Chief Information Officer Group (CIOG)

Department of Defence VBM-KP: 03 9282 5080M: F : 03 9690 6525E: [email protected]

From: Nieuwendyk, Jason MR 1 Sent: Tuesday, 13 September 2016 17:12 To: Ireton, Tania MISS Cc: Buckman, Harley MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Tania,

Can you please provide additional details on the Mainframes?

Harley is it just the model numbers that need to be provided?

Thank you

Jason Nieuwendyk Service Delivery Manager - Midrange Platform Services Enterprise Technology Operations Branch Department of Defence | CIOG | ICTOD


s33 s33

s33 s33

s22

APW-04-192 - Phone: +61 2614 44549 Mobile:


From: Frizza, Jason MR 1 Sent: Tuesday, 13 September 2016 3:18 PM To: Nieuwendyk, Jason MR 1 Cc: Buckman, Harley MR Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

I assume you meant this for the other Jason??


From: Buckman, Harley MR Sent: Tuesday, 13 September 2016 3:07 PM To: Frizza, Jason MR 1; Cavanagh, Shane MR Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Jason, Shane







UNCLASSIFIED

Hey Harley

Page 2 of 4

12/01/2017

s22

s22




Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Page 3 of 4

12/01/2017

s22

Good morning Harley














Page 4 of 4

12/01/2017



Sent: Friday, 16 September 2016 2:07 PM






Attachments: FOI-14SEP16.zip

Page 1 of 5

12/01/2017

UNCLASSIFIED

Hey Mark

When I open the document in the zip folder named COMPUTERS.csv, it comes up with an error and it appears that the amount of date is too much to be shown in one Excel document. As a result, I presume that not all the documentation is coming up in that one Excel file?

Are you able to have someone look into this and maybe split the data into multiple files so that we can get all the data?




From: Scarborough, Mark MR 1 Sent: Friday, 16 September 2016 08:43 To: Monck, Adam MR Cc: CIOG FOI Coordinator Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Adam,

Please see attached files and the notes below from Robert Dunne.

Regards,

Mark Scarborough Acting Director – Fleet Management Operations Directorate of Fleet Operations (Hardware) ETOB, ICTOD, CIOG, Department of Defence email: [email protected] phone: 02 6144 4521 office: APW-4-129




UNCLASSIFIED

Harley



Cheers






UNCLASSIFIED


UNCLASSIFIED

Hi Jason, Shane



Page 2 of 5

12/01/2017





UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,



Mainframes - x Servers - x

Page 3 of 5

12/01/2017

s22

Workstations - x





UNCLASSIFIED

Good morning Harley











IMPORTANT: This email remains the property of the Department of Defence and is subject to the jurisdiction

Page 4 of 5

12/01/2017

s22

of section 70 of the Crimes Act 1914. If you have received this email in error, you are requested to contact the sender and delete the email.







Page 5 of 5

12/01/2017


From: Deghelli, Martine MISS


To: Monck, Adam MR

Cc: Lee, Peter MR 1; Buckman, Harley MR; Scarborough, Mark MR 1




Attachments: Servers.csv; Work Stations.csv

Page 1 of 4

12/01/2017

UNCLASSIFIED

Hi Adam

I have attached the spreadsheets relating to workstations and servers and mainframe info below. Please see the email below with advice from our Division head. I have already removed DSN info and locations however we would feel more comfortable if there were just figures given without detail attached as this may be the missing piece in someone's puzzle and we do not want to leave ourselves venerable. eg. the model of the equipment can provide info about the age of the equipment and what it can and can't do etc. Please let us know what information you decide to disclose before releasing it.


IBM - IBM- IBM

Unisys UNISYS - UNISYS

Kidn regards

Martine Deghelli

Communication & Change Manager Business Engagement & Coordination Team Enterprise Technology Operations Branch Chief Information Officer Group Department of Defence

Level 2 | Desk 40 | Anzac Park West | Constitution Ave | Canberra | ACT 2600 P: (02) 6144 4140 | M: | E: [email protected]

From: Lee, Peter MR 1 Sent: Friday, 16 September 2016 08:01 To: Deghelli, Martine MISS; Buckman, Harley MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Martine/Harley,

If they want the database then HICTO would insist that no information regarding the location of the items be included in the spreadsheet.


s33 s33

s33 s33

s22

FOI do not mean that they can have security classified information such the location of our DSN terminal.

Please ensure that they consult with you before they release the info.

If they still push for the information, please consult Defence Security Authority.

Cheers

Peter Lee a/XO HICTOPh: (02) 614 44344ICT Capability Coordination ManagerICT Operations DivisionChief Information Officer Group _____________________________________________________________ • APW-02-239 • Anzac Park West • Constitution Avenue Parkes ACT 2600• Phone: +61 2 614 44211 | Mobile: • Email: [email protected]

From: Deghelli, Martine MISS Sent: Thursday, 15 September 2016 15:05 To: Lee, Peter MR 1 Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Peter

Please see the trail below on what information is actually required.

Martine Deghelli


Level 2 | Desk 40 | Anzac Park West | Constitution Ave | Canberra | ACT 2600 P: (02) 6144 4140 | M: E: [email protected]


UNCLASSIFIED

Hey Harley



Page 2 of 4

12/01/2017

s22

s22


Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley


“IT inventory of all workstations, servers and mainframes (if applicable) that operate within the

Page 3 of 4

12/01/2017

s22

department of defence and all applicable sub divisions of the department of defence.”
















Page 4 of 4

12/01/2017




To: Monck, Adam MR




Attachments: Work Stations.xlsx

Page 1 of 7

12/01/2017

UNCLASSIFIED

Hi Adam

Hopefully this one is better. I have split the info across the sheets. No wonder it was so difficult to open. There's a lot of data in there.

Let me know if there is anything else you need. :)

Martine

From: Monck, Adam MR Sent: Friday, 16 September 2016 14:48 To: Deghelli, Martine MISS Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hey Martine

I was only going to use the one that you provided, as it appeared to match the scope of the request, whereas the one Mark provided had additional information in that was not part of the scope of the request.

Thanks for looking into this work station data file



From: Deghelli, Martine MISS Sent: Friday, 16 September 2016 14:47 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Please only use the one I sent you. That is the one that has been approved.

I'll see what I can do with the data.


Martine Deghelli



From: Monck, Adam MR Sent: Friday, 16 September 2016 14:31 To: Deghelli, Martine MISS Cc: Scarborough, Mark MR 1 Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

UNCLASSIFIED

Hey Martine

Thanks for these two documents. I received some similar files earlier from Mark Scarborough.

It appears that not all the data associated with work stations is coming up in the file named "Work Stations.csv", as there it too much data for Excel to handle.

Can you please see if we can split the data into multiple files or sheets so that we can be sure that we have all the date relating to work stations?




From: Deghelli, Martine MISS Sent: Friday, 16 September 2016 14:08 To: Monck, Adam MR Cc: Lee, Peter MR 1; Buckman, Harley MR; Scarborough, Mark MR 1 Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Adam

I have attached the spreadsheets relating to workstations and servers and mainframe info below. Please see the email below with advice from our Division head. I have already removed DSN info and locations however

Page 2 of 7

12/01/2017

s22

we would feel more comfortable if there were just figures given without detail attached as this may be the missing piece in someone's puzzle and we do not want to leave ourselves venerable. eg. the model of the equipment can provide info about the age of the equipment and what it can and can't do etc. Please let us know what information you decide to disclose before releasing it.


IBM - IBM - IBM

Unisys UNISYS

- UNISYS

Kidn regards

Martine Deghelli




UNCLASSIFIED

Hi Martine/Harley,





Cheers

Peter Lee a/XO HICTOPh: (02) 614 44344ICT Capability Coordination ManagerICT Operations DivisionChief Information Officer Group _____________________________________________________________ • APW-02-239 • Anzac Park West • Constitution Avenue Parkes ACT 2600• Phone: +61 2 614 44211 | Mobile:• Email: [email protected]

Page 3 of 7

12/01/2017

s33 s33

s33 s33

s22

s22


UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Hey Harley




Thanks




Page 4 of 7

12/01/2017

s22

UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley








Department of Defence CP1-06-005 PO Box 7910 Canberra ACT 2610

Page 5 of 7

12/01/2017

s22

(02) 6266 2912
















Page 6 of 7

12/01/2017


Page 7 of 7

12/01/2017




To: Deghelli, Martine MISS






Attachments: Work Stations.xlsx; Servers.csv

Page 1 of 7

12/01/2017

UNCLASSIFIED

Good morning Martine

Can you please confirm that the information that was provided in the attached spreadsheets can be provided to the applicant as is (i.e. without any further redactions)?

Can you also confirm that the below information relating to the Mainframes can be provided to the applicant as is:

"The mainframes are : IBM

- IBM- IBM

Unisys UNISYS - UNISY

If you can please let me know as soon as possible on this as we need to establish if further work needs to be done with these documents before notifying the applicant of any charges.

Thanks




UNCLASSIFIED

Hi Adam



s33 s33

s33 s33


Martine


UNCLASSIFIED

Hey Martine






UNCLASSIFIED



Martine Deghelli



From: Monck, Adam MR Sent: Friday, 16 September 2016 14:31

Page 2 of 7

12/01/2017

s22

To: Deghelli, Martine MISS Cc: Scarborough, Mark MR 1 Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

UNCLASSIFIED

Hey Martine








UNCLASSIFIED

Hi Adam



IBM - IBM- IBM


Kidn regards

Page 3 of 7

12/01/2017

s33 s33

s33 s33

Martine Deghelli




UNCLASSIFIED

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli

Communication & Change Manager Business Engagement & Coordination Team

Page 4 of 7

12/01/2017

s22

s22

Enterprise Technology Operations Branch Chief Information Officer Group Department of Defence



UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,





Regards

Page 5 of 7

12/01/2017

s22

Harley Buckman



UNCLASSIFIED

Good morning Harley













Page 6 of 7

12/01/2017

s22














Page 7 of 7

12/01/2017




To: Deghelli, Martine MISS; CIOG FOI Coordinator





Attachments: FOI 060 1617 - Draft Statement of Reasons.docx

Page 1 of 8

12/01/2017

UNCLASSIFIED

Good afternoon Martine and Jody

Please find attached a Draft Statement of Reasons for FOI 060/16/17, which will deny access to the requested documents under Section 33 of the FOI Act.

Can you please review the Draft Statement of Reasons to confirm that all the information contained in the document is considered acceptable to CIOG.

Please be aware that the ADM may want to seek further advice/clarification once they have reviewed the Statement of Reasons and Documentation.

If you could please respond with comments by no later than COB Wednesday 21 September 2016.




From: Deghelli, Martine MISS Sent: Monday, 19 September 2016 12:24 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

I'm seeking further advice. Please hold

From: Monck, Adam MR Sent: Monday, 19 September 2016 10:35 To: Deghelli, Martine MISS Cc: CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED






IBM IBM



Thanks




UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine


Page 2 of 8

12/01/2017

s33 s33

s33 s33





UNCLASSIFIED



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine




Page 3 of 8

12/01/2017

s22





UNCLASSIFIED

Hi Adam



IBM IBM IBM


Kidn regards

Martine Deghelli




Page 4 of 8

12/01/2017

s33 s33

s33 s33

s22

UNCLASSIFIED

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Page 5 of 8

12/01/2017

s22

s22

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Page 6 of 8

12/01/2017

s22

Good morning Harley


















Page 7 of 8

12/01/2017












Page 8 of 8

12/01/2017

Defending Australia and its National Interests

Reference: [insert objective ID/out number]

FOI 060/16/17 STATEMENT OF REASONS UNDER THE FREEDOM OF INFORMATION ACT

1. I refer to the application by under the Freedom of Information Act1982 (FOI Act), for access to:

“... the following document(s): an IT inventory of all workstations, servers and mainframes (if applicable) that operate within the department of defence and all applicable sub divisions of the department of defence.”

FOI decision maker

2. I am the accredited officer pursuant to section 23 of the FOI Act to make a decision onthis FOI request.

Documents identified

3. I identified three documents as matching the description of the request.

Decision

4. I have decided to deny access to the requested documents, as they are consideredexempt under section 33 [documents affecting national security, defence or international relations of the Commonwealth] of the FOI Act.

Material taken into account

5. In making my decision, I had regard to:

a. the terms of the request;

b. the content of the identified documents in issue;

c. relevant provisions in the FOI Act;

d. the Guidelines published by the Office of the Australian InformationCommissioner under section 93A of the FOI Act (the Guidelines); and

e. advice from Defence’s Chief Information Officer Group (CIOG).

Reasons for decision

Sub-Section 33(a)(ii) – defence of the Commonwealth

6. The Chief Information Officer Group advised that the material contained in theidentified documents would detail Defence’s operational Information and Communications Technology (ICT) capabilities and would therefore pose a major security concern regarding operational activities pertaining to the defence of the Commonwealth.

Comment [DoD1]: ADM: Use if required or delete


2

7. I have taken into consideration 5.28 of the Guidelines, which states:

The Act does not define ‘defence of the Commonwealth’. Previous AAT decisionsindicate that the term includes:

meeting Australia’s international obligations

ensuring the proper conduct of international defence relations

deterring and preventing foreign incursions into Australian territory

protecting the Defence Force from hindrance or activities which wouldprejudice its effectiveness.

8. In deciding that material was exempt under section 33 of the FOI Act, I alsoconsidered the mosaic effect: The Guidelines state that:

5.33 Normally when assessing the potential harm in releasing a document, a decision maker looks at the contents of the document in question. But when evaluating potential harmful effects of disclosing documents that affect Australia’s national security, defence or international relations, decision makers may take into account the intelligence technique usually known as the ‘mosaic theory’. This theory holds that individually harmless pieces of information, when combined with other pieces, can generate a composite – a mosaic – that can damage Australia’s national security, defence or international relations. Therefore, decision makers may need to consider other sources of information when considering this exemption.

5.34 The mosaic theory does not relieve decision makers from evaluating whether there are real and substantial grounds for the expectation that the claimed effects will result from disclosure. It is a question of fact whether the disclosure of the information, alone or in conjunction with other material, could reasonably be expected to enable a person to ascertain the identity or existence of a confidential source. This is not always simple. For example, in Re Slater and Cox the evidence that persuaded the AAT of a ‘mosaic effect’ claim was an analysis of 22 thirty-five-year-old documents.

9. I have taken into account that disclosure of this information may add to what isalready known, or already in the public domain, which could lead to an adversary applying a mosaic effect to information relating to the Defence’s ICT capabilities and undermine its effectiveness.

10. Taking all of the above into consideration, I am satisfied that the requestedinformation is exempt under section 33(a)(ii) of the FOI Act.

Jan Andrews [electronic signature – refer to SOP – how to do electronic signature) Accredited Decision Maker Associate Secretary Group

September 2016

Enclosure 1 Schedule of documents


From: Bonnar, Jodi MRS on behalf of CIOG FOI Coordinator


To: Monck, Adam MR





Attachments: FOI 060 1617 - Draft Statement of Reasons.docx; RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

Page 1 of 9

12/01/2017

UNCLASSIFIED

Good afternoon Adam,

Response from ICT Security Branch is:

I have reviewed the draft statement and would consider this acceptable from a CIOG ICT Security standpoint.

Regards Jodi

Jodi Bonnar | A/CIOG Group Information Manager CIOG FOI Coordinator Directorate Communications and Change Management Reform Chief Information Officer Group | 02 614 44968Department of Defence | APW-05-064 | Parkes ACT 2600Please Note: I do not currently work on Thursday’s

From: Monck, Adam MR Sent: Tuesday, 20 September 2016 16:02 To: Deghelli, Martine MISS; CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED







Adam Monck Case Manager, Freedom of Information Information Management and Access


Governance and Reform Division



UNCLASSIFIED



UNCLASSIFIED





- IBM IBM



Thanks



From: Deghelli, Martine MISS Sent: Friday, 16 September 2016 15:26

Page 2 of 9

12/01/2017

s33 s33

s33 s33

To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine






UNCLASSIFIED



Martine Deghelli


Page 3 of 9

12/01/2017



UNCLASSIFIED

UNCLASSIFIED

Hey Martine








UNCLASSIFIED

Hi Adam



IBM IBM

Page 4 of 9

12/01/2017

s22

s33 s33

- IBM


Kidn regards

Martine Deghelli




UNCLASSIFIED

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Page 5 of 9

12/01/2017

s33 s33

s33 s33

s22

s22

Hi Peter


Martine Deghelli




UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,


I would assume that Defence is highly unlikely to hand over a detailed account of these assets and so I will

Page 6 of 9

12/01/2017

s22

assume for the time being that this information is required in an aggregated form such as the following.






UNCLASSIFIED

Good morning Harley











Page 7 of 9

12/01/2017

s22

















Page 8 of 9

12/01/2017





Page 9 of 9

12/01/2017






FOI decision maker




Decision













FOI 194/16/17Item 1 Serial 18Attachment 1

2













September 2016


From: Bolling, Carolyn MRS on behalf of CIOG ITIS



Cc: CIOG ITIS


Page 1 of 9

12/01/2017

UNCLASSIFIED

Good Afternoon Jodi,

Thank you for the opportunity to comment. I have reviewed the draft statement and would consider this acceptable from a CIOG ICT Security standpoint.

Please advise if you need anything further.

Kind regards,

Carolyn Bolling Director ITIS ICT Security Branch | CTO Division | CIOG | Department of Defence



From: Bonnar, Jodi MRS On Behalf Of CIOG FOI Coordinator Sent: Wednesday, 21 September 2016 09:01 To: CIOG ITIS Cc: CIOG FOI Coordinator; Deghelli, Martine MISS Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning

Could you please review and advise by 1500 today Wednesday 21 September.




I have included the formal response that Carolyn provided on Monday 5 September.

Thanks in Advance Jodi

Jodi Bonnar | A/CIOG Group Information ManagerCIOG FOI Coordinator


Directorate Communications and Change Management Reform Chief Information Officer Group | 02 614 44968Department of Defence | APW-05-064 | Parkes ACT 2600Please Note: I do not currently work on Thursday’s


UNCLASSIFIED










UNCLASSIFIED



UNCLASSIFIED


Page 2 of 9

12/01/2017




- IBM IBM



Thanks




UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine


Page 3 of 9

12/01/2017

s33 s33

s33 s33





UNCLASSIFIED



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine




Page 4 of 9

12/01/2017

s22





UNCLASSIFIED

Hi Adam



IBM - IBM- IBM


Kidn regards

Martine Deghelli




Page 5 of 9

12/01/2017

s33 s33

s33 s33

s22

UNCLASSIFIED

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Page 6 of 9

12/01/2017

s22

s22

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Page 7 of 9

12/01/2017

s22

Good morning Harley


















Page 8 of 9

12/01/2017














Page 9 of 9

12/01/2017






FOI decision maker




Decision














2













September 2016

major security concern.

Can you please review the attached Draft Statement of Reasons, along with the documents. If you would like to make any amendments or would like further information then please let me know.

We are required to provide a decision to the applicant by no later than Tuesday 27 September 2016, so if you could please review as soon as possible it would be much appreciated.





Page 2 of 2

12/01/2017





Cc: Bolling, Carolyn MRS





Attachments: 060 1617 - .obr

Page 1 of 9

12/01/2017

UNCLASSIFIED

Good afternoon Jodi and Carolyn

The Accredited Decision Maker has reviewed the attached documents relating to Servers and Work Stations within the scope of the request and considers that the information contained in Column C (Model Name) of the Excel documents could be excluded from the document and the remaining information contained in Columns A, B & D (Status, Asset Type and Brand) are acceptable to release to the applicant, as the information does not meet the requirements for an exception under Section 33 of the FOI Act.

As result, the Accredited Decision Maker intends that column C be removed from the Excel documents and the remaining information within the documents be provided to the applicant.

Regards



From: Bonnar, Jodi MRS On Behalf Of CIOG FOI Coordinator Sent: Wednesday, 21 September 2016 13:08 To: Monck, Adam MR Cc: CIOG FOI Coordinator Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED




Regards Jodi

Jodi Bonnar | A/CIOG Group Information Manager CIOG FOI Coordinator Directorate Communications and Change Management Reform


Chief Information Officer Group | 02 614 44968Department of Defence | APW-05-064 | Parkes ACT 2600Please Note: I do not currently work on Thursday’s


UNCLASSIFIED










UNCLASSIFIED



UNCLASSIFIED


Page 2 of 9

12/01/2017




IBM IBM



Thanks




UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine


Page 3 of 9

12/01/2017

s33 s33

s33 s33





UNCLASSIFIED



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine




Page 4 of 9

12/01/2017

s22





UNCLASSIFIED

Hi Adam



IBM IBM IBM


Kidn regards

Martine Deghelli




Page 5 of 9

12/01/2017

s33 s33

s33 s33

s22

UNCLASSIFIED

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Page 6 of 9

12/01/2017

s22

s22

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Page 7 of 9

12/01/2017

s22

Good morning Harley


















Page 8 of 9

12/01/2017














Page 9 of 9

12/01/2017



Sent: Thursday, 22 September 2016 8:44 AM

To: Bolling, Carolyn MRS

Cc: Pattison-Levi, Cecilia MRS; CIOG FOI Coordinator





Attachments: Work Stations.xlsx; Servers.csv

Page 1 of 10

12/01/2017

UNCLASSIFIED

Good morning Carolyn

I have attached the two documents indicated in the email below.

The draft Statement of Reasons that I provided on Tuesday is now not current and will need to be amended

As indicated the Accredited Decision Maker intends to provide these documents with Column C removed, but with the information in Column A, B & D retained.



From: Bolling, Carolyn MRS Sent: Wednesday, 21 September 2016 17:00 To: Monck, Adam MR Cc: Pattison-Levi, Cecilia MRS; CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED


I do not seem to be able to open this objective link. Can you please send myself and Cecilia (Cc'd) the document for review.

Thank you.

Kind regards,





From: Monck, Adam MR Sent: Wednesday, 21 September 2016 16:45 To: CIOG FOI Coordinator Cc: Bolling, Carolyn MRS Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED




Regards




UNCLASSIFIED




Regards Jodi


Page 2 of 10

12/01/2017


UNCLASSIFIED










UNCLASSIFIED



UNCLASSIFIED



Page 3 of 10

12/01/2017

Can you also confirm that the below information relating to the Mainframes can be provided to the applicant as is: "The mainframes are : IBM - IBM - IBM Unisys UNISYS UNISYS If you can please let me know as soon as possible on this as we need to establish if further work needs to be done with these documents before notifying the applicant of any charges. Thanks Adam Monck Case Manager, Freedom of Information Information Management and Access Governance and Reform Division Department of Defence CP1-06-005 PO Box 7910 Canberra ACT 2610 (02) 6266 2912

From: Deghelli, Martine MISS Sent: Friday, 16 September 2016 15:26 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] UNCLASSIFIED

Hi Adam Hopefully this one is better. I have split the info across the sheets. No wonder it was so difficult to open. There's a lot of data in there. Let me know if there is anything else you need. :) Martine

From: Monck, Adam MR Sent: Friday, 16 September 2016 14:48 To: Deghelli, Martine MISS Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] UNCLASSIFIED

Hey Martine I was only going to use the one that you provided, as it appeared to match the scope of the request, whereas the one Mark provided had additional information in that was not part of the scope of the request. Thanks for looking into this work station data file

Page 4 of 10

12/01/2017

s33 s33

s33 s33




UNCLASSIFIED



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine





Page 5 of 10

12/01/2017

s22




UNCLASSIFIED

Hi Adam



IBM IBMIBM


Kidn regards

Martine Deghelli




UNCLASSIFIED

Page 6 of 10

12/01/2017

s33 s33

s33 s33

s22

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Hey Harley

I require the actual documents that specifies this information (i.e. a spreadsheet or print out from a database),

Page 7 of 10

12/01/2017

s22

s22

not just the total numbers. This information may not neccesarily be released, but we here at FOI need to be able to determine what the information is first before we can make that decision.



Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley

Page 8 of 10

12/01/2017

s22


















Page 9 of 10

12/01/2017















Page 10 of 10

12/01/2017


From: Bolling, Carolyn MRS


To: Monck, Adam MR

Cc: CIOG FOI Coordinator; Pattison-Levi, Cecilia MRS; Brookes, Chris MR 3




Page 1 of 11

12/01/2017

UNCLASSIFIED

Hi Adam,

Thank you for providing these documents and for the information.

It is still our area's view that we should not be providing this type of information as it provides significant detail that can be leveraged against Defence about the departments infrastructure and suppliers.

It is the line areas view that a section 15 notice should have been sent to the applicant as the FOI request was not strictly valid.

However, the information extracted from our database provides detail into Defences internal systems and suppliers. It allows for potential cyber and system attackers to gain significant insight into our ICT capability and allows targeting of known weaknesses in the specific infrastructure equipment that we utilise. This may seriously impact the effectiveness of some of our protective measures.

I am unsure why the "mosaic effect" that was called out in the previous draft decision letter I saw, seems to have been discounted..

Knowing that people piece information together to create a larger picture, the question needs to be considered about how this release could be used. For once the information is made public it cannot be retracted and others can use it. I am also unsure why the operational risk that the line area gave advise on does not seem to be of further consideration at this point.

Can you please send me a copy of the amended decision letter and advise who the current decision maker is.

If the intent of the decision-maker is to release this information remains, then I would also like to see the redacted version of the documents to be provided before they are released.

I assume that these will be printed and sent for redaction rather than released in a softcopy version?

I look forward to hearing further from you and am happy to discuss.

Kind regards,






Sent: Thursday, 22 September 2016 08:44 To: Bolling, Carolyn MRS Cc: Pattison-Levi, Cecilia MRS; CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED


I have attached the two documents indicated in the email below.

The draft Statement of Reasons that I provided on Tuesday is now not current and will need to be amended

As indicated the Accredited Decision Maker intends to provide these documents with Column C removed, but with the information in Column A, B & D retained.




UNCLASSIFIED



Thank you.

Kind regards,





Page 2 of 11

12/01/2017

UNCLASSIFIED




Regards




UNCLASSIFIED




Regards Jodi



UNCLASSIFIED

Page 3 of 11

12/01/2017










UNCLASSIFIED



UNCLASSIFIED





IBM IBM

Unisys - UNISYS

Page 4 of 11

12/01/2017

s33 s33

s33 s33

UNISYS


Thanks




UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine






Page 5 of 11

12/01/2017

s33 s33

Sent: Friday, 16 September 2016 14:47 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine








Page 6 of 11

12/01/2017

s22

Sent: Friday, 16 September 2016 14:08 To: Monck, Adam MR Cc: Lee, Peter MR 1; Buckman, Harley MR; Scarborough, Mark MR 1 Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Adam



IBM IBMIBM


Kidn regards

Martine Deghelli




UNCLASSIFIED

Hi Martine/Harley,





Cheers

Page 7 of 11

12/01/2017

s33 s33

s33 s33

s22



UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Hey Harley




Thanks


Page 8 of 11

12/01/2017

s22

s22




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley





Page 9 of 11

12/01/2017

s22

















Page 10 of 11

12/01/2017













Page 11 of 11

12/01/2017




To: Pattison-Levi, Cecilia MRS

Cc: Bolling, Carolyn MRS; Brookes, Chris MR 3





Page 1 of 11

12/01/2017

UNCLASSIFIED

Good morning Cecilia

Thanks for your questions.

At this stage no charges have been determined for this request and the clock is still running. The original request was made on 26 August 2016 and the statutory deadline for the applicant to receive a response to this request is 25 September 2016. As this date is a Sunday and next Monday is a public holiday, then the actual date the applicant is due to be provided a response is next Tuesday 27 September 2016.

Although the information contained in the documents is quite large, the redaction process in this instance should be fairly simple, as it is proposed to redact an entire column. We will undertake the redaction of the information here in FOI.

As there is not an Accredited Decision Maker (ADM) within CIOG, then an ADM was appointed from within Information Management and Access Branch.

The draft Statement of Reasons (the Decision Letter) that was provided to CIOG for comment will now need to be re-written, given the advice from the ADM to partially release the information. So please ignore the information contained in this draft document if you were provided it.

If you have any other questions or require further information then please let me know.

Regards



From: Pattison-Levi, Cecilia MRS Sent: Wednesday, 21 September 2016 17:22 To: Monck, Adam MR Cc: Bolling, Carolyn MRS; Brookes, Chris MR 3 Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED


Dear Adam,

Hi! I am an FOI tragic. Do you have the charges letter for this request?

The request seems remarkably big when considering the size of the documents that need to be printed and sent for redaction.

Also, I am wondering why you are not multiple claiming on exemptions as requested by AGS advice in this area.

It is also unclear as to the decision maker - should it not be the AS or FAS of our area in ICTSB as they have a full understanding of the mosaic affect of this request and its view inside systems and information capability.

Also, it is unclear as to when (the date) the FOI request was made to the Department.

And, if no charges, how have you stopped the clock on this request?

The decision letter is very light on with legally required detail.

I have completed some of the largest FOIs in the Commonwealth jurisdiction and am happy to assist my area in this matter.

Happy to discuss.

Regards,

Cecilia

Cecilia Pattison-Levi

Cecilia Pattison-Levi ICT Security Branch | Chief Information Security Officer | Department of Defence

CIOG | APW-3-249 | Anzac Park West | Constitution Avenue, Parkes ACT 2610P: +61 2 6144 4846 | E: [email protected]


UNCLASSIFIED



Thank you.

Kind regards,



Page 2 of 11

12/01/2017



UNCLASSIFIED




Regards




UNCLASSIFIED




Regards Jodi

Jodi Bonnar | A/CIOG Group Information Manager CIOG FOI Coordinator Directorate Communications and Change Management Reform Chief Information Officer Group | 02 614 44968

Page 3 of 11

12/01/2017

Department of Defence | APW-05-064 | Parkes ACT 2600Please Note: I do not currently work on Thursday’s


UNCLASSIFIED










UNCLASSIFIED



UNCLASSIFIED


Page 4 of 11

12/01/2017




IBM IBM



Thanks




UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine



Page 5 of 11

12/01/2017

s33 s33

s33 s33




UNCLASSIFIED



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine





Page 6 of 11

12/01/2017

s22




UNCLASSIFIED

Hi Adam



IBM IBMIBM


Kidn regards

Martine Deghelli




UNCLASSIFIED

Page 7 of 11

12/01/2017

s33 s33

s33 s33

s22

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Hey Harley

I require the actual documents that specifies this information (i.e. a spreadsheet or print out from a database),

Page 8 of 11

12/01/2017

s22

s22

not just the total numbers. This information may not neccesarily be released, but we here at FOI need to be able to determine what the information is first before we can make that decision.



Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley

Page 9 of 11

12/01/2017

s22


















Page 10 of 11

12/01/2017
















Page 11 of 11

12/01/2017




To: Andrews, Jan MS

Subject: FOI 060/16/17 - Advice from CIOG [SEC=UNCLASSIFIED]




Page 1 of 2

12/01/2017

UNCLASSIFIED

Good morning Jan

We advised CIOG of your planned decision to partically provide the information to the applicant (with the Model Name information excluded).

They have provided the response below.

Will this information change your planned decision?

If you wish to discuss then please let me know.



From: Bolling, Carolyn MRS Sent: Thursday, 22 September 2016 11:19 To: Monck, Adam MR Cc: CIOG FOI Coordinator; Pattison-Levi, Cecilia MRS; Brookes, Chris MR 3 Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Adam,












Kind regards,





Page 2 of 2

12/01/2017


From: Andrews, Jan MS


To: Monck, Adam MR

Subject: RE: FOI 060/16/17 - Advice from CIOG [SEC=UNCLASSIFIED]



Page 1 of 3

12/01/2017

UNCLASSIFIED

AdamI have given due consideration to the CIOG argument , however my decision stands in relation to the release of the information to the applicant as there is nothing substantiating the concerns of CIOG in relation to ‘operational risk.When searching the internet there are huge volumes of information relating to Defence ICT, numbers , ICT strategy in relation to ICT upgrades, infrastructure, locations etc. With reasonable time and searching of the internet (whether the information is accurate or not) a reasonable person could piece together a relative understanding of Defence ICT.

Warm Regards Jan

Jan Andrews Director Information Management Governance Information Management and Access Governance and Reform Division _____________________________________________________________ Department of Defence CP1‐6‐031 | PO Box 7909 – Canberra ACT 2610 phone +61 2 6266 2707 | email [email protected] __________________________________________________________


From: Monck, Adam MR Sent: Thursday, 22 September 2016 11:43 AM To: Andrews, Jan MS Subject: FOI 060/16/17 - Advice from CIOG [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Jan









UNCLASSIFIED

Hi Adam,











Kind regards, Carolyn Bolling Director ITIS

Page 2 of 3

12/01/2017

ICT Security Branch | CTO Division | CIOG | Department of Defence




Page 3 of 3

12/01/2017




To: Andrews, Jan MS

Subject: RE: FOI 060/16/17 - Updated Draft Statement of Reasons [SEC=UNCLASSIFIED]




Attachments: FOI 060 1617 - Draft Statement of Reasons#2.docx; Work Stations.pdf; Servers.pdf; Mainframes.pdf

Page 1 of 3

12/01/2017

UNCLASSIFIED

Jan

Please find attached an updated Draft Statement of Reasons for FOI 060/16/17 and associated documents.

Can you please review and make amendments as neccessary.

If you want me to send you the unredacted documents again then let me know.

If you are happy with the documents I propose sending the documents to CIOG, as they asked to see the redacted documents prior to them being provided to the applicant.

Regards



From: Andrews, Jan MS Sent: Thursday, 22 September 2016 12:06 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Advice from CIOG [SEC=UNCLASSIFIED]

UNCLASSIFIED


Warm Regards


Jan




UNCLASSIFIED

Good morning Jan








UNCLASSIFIED

Hi Adam,

Page 2 of 3

12/01/2017











Kind regards, Carolyn Bolling Director ITIS ICT Security Branch | CTO Division | CIOG | Department of Defence





Page 3 of 3

12/01/2017






FOI decision maker




4. The decision in relation to each document is detailed in a schedule of documents.

5. I have added an FOI reference number and Item number to each of the documents,which corresponds with the schedule.

Decision

6. I have decided to:

a. partially release three documents in accordance with section 22(1)(a)(ii)[access to edited copies with exempt or irrelevant matter deleted] of the FOIAct, on the grounds that the deleted material is considered exempt undersection 33(a)(ii) [Documents affecting the defence of the Commonwealth] ofthe FOI Act; and

b. remove irrelevant material as referred to in the scope of the request inaccordance with section 22(1)(a)(ii) of the FOI Act.







2
















11. I found that part of all three documents contained information that disclosure of thisinformation may add to what is already known, or already in the public domain, which could

3

lead to an adversary applying a mosaic effect to information relating to the Defence’s ICT capabilities and undermine its effectiveness.

12. Taking the above into account, I consider that disclosure of the material would, orcould reasonably be expected to, cause damage to the defence of the Commonwealth. Accordingly, I consider the material to be exempt under section 33(a)(ii) of the FOI Act.


September 2016

4

FREEDOM OF INFORMATION REQUEST NO. 060/16/17

Item Document title

Number of pages

Document description Decision under the Act Reason for decision

1 Work Stations 2658 A list of all Work Stations Partial access

Deletions made in accordance with section 22 of the FOI Act, on the grounds that the deleted material is exempt, under section 33 [Documents affecting national security, defence or international relations] of the FOI Act

2 Servers 115 A list of all Servers Partial access


3 Mainframes 4 A list of all Mainframes Partial access










Page 1 of 9

12/01/2017

UNCLASSIFIED

Good morning Jodi

I am just wondering if you could indicate approximately how much time was spent on searching for, extracting from the system and reviewing the information relating to this request?

If you could please let me know as soon as possible it would be much appreciated.





UNCLASSIFIED




Regards Jodi




UNCLASSIFIED










UNCLASSIFIED



UNCLASSIFIED




Page 2 of 9

12/01/2017


IBM IBM



Thanks




UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine




Page 3 of 9

12/01/2017

s33 s33

s33 s33



UNCLASSIFIED



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine






Page 4 of 9

12/01/2017

s22



UNCLASSIFIED

Hi Adam



IBM IBMIBM


Kidn regards

Martine Deghelli




UNCLASSIFIED

Hi Martine/Harley,


Page 5 of 9

12/01/2017

s33 s33

s33 s33

s22




Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Hey Harley



Page 6 of 9

12/01/2017

s22

s22


Thanks




UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley



Page 7 of 9

12/01/2017

s22

















Page 8 of 9

12/01/2017












Page 9 of 9

12/01/2017




To: Monck, Adam MR




Page 1 of 10

12/01/2017

UNCLASSIFIED

ack

Jodi Bonnar | A/CIOG Group Information ManagerDirectorate Communications and Change Management Reform Chief Information Officer Group | 02 614 44968Department of Defence | APW-05-064 | Parkes ACT 2600Please Note: I do not currently work on Thursday’s

From: Monck, Adam MR Sent: Friday, 23 September 2016 08:44 To: CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Jodi







UNCLASSIFIED





Regards Jodi



UNCLASSIFIED










UNCLASSIFIED


Page 2 of 10

12/01/2017


UNCLASSIFIED





IBMIBM



Thanks




UNCLASSIFIED

Hi Adam



Martine

From: Monck, Adam MR Sent: Friday, 16 September 2016 14:48

Page 3 of 10

12/01/2017

s33 s33

s33 s33

To: Deghelli, Martine MISS Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] UNCLASSIFIED

Hey Martine I was only going to use the one that you provided, as it appeared to match the scope of the request, whereas the one Mark provided had additional information in that was not part of the scope of the request. Thanks for looking into this work station data file Adam Monck Case Manager, Freedom of Information Information Management and Access Governance and Reform Division Department of Defence CP1-06-005 PO Box 7910 Canberra ACT 2610 (02) 6266 2912

From: Deghelli, Martine MISS Sent: Friday, 16 September 2016 14:47 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] UNCLASSIFIED

Please only use the one I sent you. That is the one that has been approved. I'll see what I can do with the data.

Martine Deghelli



From: Monck, Adam MR Sent: Friday, 16 September 2016 14:31 To: Deghelli, Martine MISS Cc: Scarborough, Mark MR 1 Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] UNCLASSIFIED

UNCLASSIFIED

Page 4 of 10

12/01/2017

s22

Hey Martine Thanks for these two documents. I received some similar files earlier from Mark Scarborough. It appears that not all the data associated with work stations is coming up in the file named "Work Stations.csv", as there it too much data for Excel to handle. Can you please see if we can split the data into multiple files or sheets so that we can be sure that we have all the date relating to work stations? Thanks for your assistance. Adam Monck Case Manager, Freedom of Information Information Management and Access Governance and Reform Division Department of Defence CP1-06-005 PO Box 7910 Canberra ACT 2610 (02) 6266 2912

From: Deghelli, Martine MISS Sent: Friday, 16 September 2016 14:08 To: Monck, Adam MR Cc: Lee, Peter MR 1; Buckman, Harley MR; Scarborough, Mark MR 1 Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] UNCLASSIFIED

Hi Adam I have attached the spreadsheets relating to workstations and servers and mainframe info below. Please see the email below with advice from our Division head. I have already removed DSN info and locations however we would feel more comfortable if there were just figures given without detail attached as this may be the missing piece in someone's puzzle and we do not want to leave ourselves venerable. eg. the model of the equipment can provide info about the age of the equipment and what it can and can't do etc. Please let us know what information you decide to disclose before releasing it. The mainframes are : IBM

IBMIBM


Kidn regards

Martine Deghelli


Level 2 | Desk 40 | Anzac Park West | Constitution Ave | Canberra | ACT 2600

Page 5 of 10

12/01/2017

s33 s33

s33 s33

P: (02) 6144 4140 | M: | E: [email protected]


UNCLASSIFIED

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli



Page 6 of 10

12/01/2017

s22

s22

s22


UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,







Page 7 of 10

12/01/2017

s22


UNCLASSIFIED

Good morning Harley















Page 8 of 10

12/01/2017

















Page 9 of 10

12/01/2017


Page 10 of 10

12/01/2017




To: Bolling, Carolyn MRS

Cc: CIOG FOI Coordinator; Pattison-Levi, Cecilia MRS; Brookes, Chris MR 3





Attachments: Mainframes.pdf; Servers.pdf; Work Stations.pdf

Page 1 of 12

12/01/2017

UNCLASSIFIED


I apologise for not getting back to you sooner

The attached documents are what the Accredited Decision Maker has decided to provide to the applicant, including all redactions indicated within the documentation.




UNCLASSIFIED

Hi Adam,





I am unsure why the "mosaic effect" that was called out in the previous draft decision letter I saw, seems to


have been discounted.. Knowing that people piece information together to create a larger picture, the question needs to be considered about how this release could be used. For once the information is made public it cannot be retracted and others can use it. I am also unsure why the operational risk that the line area gave advise on does not seem to be of further consideration at this point. Can you please send me a copy of the amended decision letter and advise who the current decision maker is. If the intent of the decision-maker is to release this information remains, then I would also like to see the redacted version of the documents to be provided before they are released. I assume that these will be printed and sent for redaction rather than released in a softcopy version? I look forward to hearing further from you and am happy to discuss. Kind regards,

Carolyn Bolling Director ITIS ICT Security Branch | CTO Division | CIOG | Department of Defence R6 | Russell Offices | Russell Drive, Russell, ACT 2601 P: +61 2 612 70955 | E: [email protected]

From: Monck, Adam MR Sent: Thursday, 22 September 2016 08:44 To: Bolling, Carolyn MRS Cc: Pattison-Levi, Cecilia MRS; CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED] UNCLASSIFIED

Good morning Carolyn I have attached the two documents indicated in the email below. The draft Statement of Reasons that I provided on Tuesday is now not current and will need to be amended As indicated the Accredited Decision Maker intends to provide these documents with Column C removed, but with the information in Column A, B & D retained. Adam Monck Case Manager, Freedom of Information Information Management and Access Governance and Reform Division Department of Defence CP1-06-005 PO Box 7910 Canberra ACT 2610 (02) 6266 2912

From: Bolling, Carolyn MRS Sent: Wednesday, 21 September 2016 17:00 To: Monck, Adam MR Cc: Pattison-Levi, Cecilia MRS; CIOG FOI Coordinator

Page 2 of 12

12/01/2017


UNCLASSIFIED



Thank you.

Kind regards,





UNCLASSIFIED




Regards



From: Bonnar, Jodi MRS On Behalf Of CIOG FOI Coordinator Sent: Wednesday, 21 September 2016 13:08 To: Monck, Adam MR

Page 3 of 12

12/01/2017

Cc: CIOG FOI Coordinator Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED




Regards Jodi



UNCLASSIFIED









From: Deghelli, Martine MISS Sent: Monday, 19 September 2016 12:24 To: Monck, Adam MR

Page 4 of 12

12/01/2017


UNCLASSIFIED



UNCLASSIFIED





IBM IBM



Thanks




UNCLASSIFIED

Hi Adam


Page 5 of 12

12/01/2017

s33 s33

s33 s33


Martine


UNCLASSIFIED

Hey Martine






UNCLASSIFIED



Martine Deghelli



From: Monck, Adam MR Sent: Friday, 16 September 2016 14:31 To: Deghelli, Martine MISS

Page 6 of 12

12/01/2017

s22

Cc: Scarborough, Mark MR 1 Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

UNCLASSIFIED

Hey Martine








UNCLASSIFIED

Hi Adam



IBM IBMIBM

Unisys UNISYS UNISY

Kidn regards

Martine Deghelli

Page 7 of 12

12/01/2017

s33 s33

s33 s33




UNCLASSIFIED

Hi Martine/Harley,





Cheers



UNCLASSIFIED

Hi Peter


Martine Deghelli

Communication & Change Manager Business Engagement & Coordination Team Enterprise Technology Operations Branch Chief Information Officer Group

Page 8 of 12

12/01/2017

s22

s22

Department of Defence



UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,






Page 9 of 12

12/01/2017

s22



UNCLASSIFIED

Good morning Harley














Page 10 of 12

12/01/2017

s22

















Page 11 of 12

12/01/2017







Page 12 of 12

12/01/2017




To: Andrews, Jan MS





Attachments: FOI 060 1617 - Statement of Reasons.docx; Mainframes.pdf; Servers.pdf; Work Stations.pdf

Page 1 of 4

12/01/2017

UNCLASSIFIED

Good morning Jan

Please find attached the Final Version of the Statement of Reasons for your signature.

Also attached are the documents for release

Thanks



From: Andrews, Jan MS Sent: Friday, 23 September 2016 09:31 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Updated Draft Statement of Reasons [SEC=UNCLASSIFIED]

UNCLASSIFIED

AdamHappy with the decision letter, if you can add the Obj ID# and return I am happy to sign

Warm Regards Jan

Jan Andrews Director Information Management Governance Information Management and Access Governance and Reform Division _____________________________________________________________ Department of Defence CP1‐6‐031 | PO Box 7909 – Canberra ACT 2610 phone +61 2 6266 2707 | email [email protected]


__________________________________________________________


From: Monck, Adam MR Sent: Thursday, 22 September 2016 3:24 PM To: Andrews, Jan MS Subject: RE: FOI 060/16/17 - Updated Draft Statement of Reasons [SEC=UNCLASSIFIED]

UNCLASSIFIED

Jan





Regards




UNCLASSIFIED


Warm Regards

Page 2 of 4

12/01/2017

Jan




UNCLASSIFIED

Good morning Jan








UNCLASSIFIED

Hi Adam,

Page 3 of 4

12/01/2017

















Page 4 of 4

12/01/2017


Reference: R27298229




FOI decision maker






Decision









2

















3




September 2016

4


Item Document title

Number of pages

Document description Decision under the Act Reason for decision








From: Andrews, Jan MS


To: Monck, Adam MR




Attachments: FOI 060 1617 - Statement of Reasons FINAL.pdf

Page 1 of 5

12/01/2017

UNCLASSIFIED

Morning AdamThank you for your time with this.Attached is the signed decision letter

Warm Regards Jan



From: Monck, Adam MR Sent: Tuesday, 27 September 2016 8:35 AM To: Andrews, Jan MS Subject: RE: FOI 060/16/17 - Updated Draft Statement of Reasons [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Jan

Please find attached the Final Version of the Statement of Reasons for your signature.

Also attached are the documents for release

Thanks





From: Andrews, Jan MS Sent: Friday, 23 September 2016 09:31 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Updated Draft Statement of Reasons [SEC=UNCLASSIFIED]

UNCLASSIFIED

AdamHappy with the decision letter, if you can add the Obj ID# and return I am happy to sign

Warm Regards Jan



From: Monck, Adam MR Sent: Thursday, 22 September 2016 3:24 PM To: Andrews, Jan MS Subject: RE: FOI 060/16/17 - Updated Draft Statement of Reasons [SEC=UNCLASSIFIED]

UNCLASSIFIED

Jan





Page 2 of 5

12/01/2017

Regards




UNCLASSIFIED


Warm Regards Jan




Page 3 of 5

12/01/2017

UNCLASSIFIED

Good morning Jan








UNCLASSIFIED

Hi Adam,










Page 4 of 5

12/01/2017








Page 5 of 5

12/01/2017



FOI 060/16/17 STATEMENT OF REASONS UNDER THE FREEDOM OF

INFORMATION ACT

1. I refer to the application by under the Freedom of Information Act

1982 (FOI Act), for access to:

“... the following document(s): an IT inventory of all workstations, servers and

mainframes (if applicable) that operate within the department of defence and all

applicable sub divisions of the department of defence.”

FOI decision maker

2. I am the accredited officer pursuant to section 23 of the FOI Act to make a decision on

this FOI request.




5. I have added an FOI reference number and Item number to each of the documents,

which corresponds with the schedule.

Decision


a. partially release three documents in accordance with section 22(1)(a)(ii)

[access to edited copies with exempt or irrelevant matter deleted] of the FOI

Act, on the grounds that the deleted material is considered exempt under

section 33(a)(ii) [Documents affecting the defence of the Commonwealth] of

the FOI Act; and

b. remove irrelevant material as referred to in the scope of the request in

accordance with section 22(1)(a)(ii) of the FOI Act.






2


d. the Guidelines published by the Office of the Australian Information

Commissioner under section 93A of the FOI Act (the Guidelines); and




8. The Chief Information Officer Group advised that the material contained in the

identified documents would detail Defence’s operational Information and Communications

Technology (ICT) capabilities and would therefore pose a major security concern regarding

operational activities pertaining to the defence of the Commonwealth.


The Act does not define ‘defence of the Commonwealth’. Previous AAT decisions

indicate that the term includes:




protecting the Defence Force from hindrance or activities which would

prejudice its effectiveness.

10. In deciding that material was exempt under section 33 of the FOI Act, I also

considered the mosaic effect: The Guidelines state that:

5.33 Normally when assessing the potential harm in releasing a document, a

decision maker looks at the contents of the document in question. But when evaluating

potential harmful effects of disclosing documents that affect Australia’s national

security, defence or international relations, decision makers may take into account the

intelligence technique usually known as the ‘mosaic theory’. This theory holds that

individually harmless pieces of information, when combined with other pieces, can

generate a composite – a mosaic – that can damage Australia’s national security,

defence or international relations. Therefore, decision makers may need to consider

other sources of information when considering this exemption.

5.34 The mosaic theory does not relieve decision makers from evaluating whether

there are real and substantial grounds for the expectation that the claimed effects will

result from disclosure. It is a question of fact whether the disclosure of the

information, alone or in conjunction with other material, could reasonably be

expected to enable a person to ascertain the identity or existence of a confidential

source. This is not always simple. For example, in Re Slater and Cox the evidence that

persuaded the AAT of a ‘mosaic effect’ claim was an analysis of 22 thirty-five-year-

old documents.

11. I found that part of all three documents contained information that disclosure of this

information may add to what is already known, or already in the public domain, which could

3



Jan Andrews Accredited Decision Maker Associate Secretary Group

27 September 2016

jan.andrewsDigitally signed by jan.andrewsDN: c=AU, o=GOV, ou=DoD, ou=PKI, ou=Personnel, cn=jan.andrews Date: 2016.09.27 09:13:44 +10'00'

4


Item Document

title Number of pages

Document description

Decision under the Act Reason for decision


Deletions made in accordance with section

22 of the FOI Act, on the grounds that the

deleted material is exempt, under section 33

[Documents affecting national security,

defence or international relations] of the FOI

Act







Act







Act









Page 1 of 10

12/01/2017

UNCLASSIFIED

Good afternoon Jodi

Thanks for letting me know.



From: Bonnar, Jodi MRS On Behalf Of CIOG FOI Coordinator Sent: Tuesday, 27 September 2016 13:57 To: Monck, Adam MR Cc: CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED


CIOG has spent 5 hours searching for, extracting from the system and reviewing the information relating to this request.

Regards, Jodi


From: Monck, Adam MR Sent: Friday, 23 September 2016 08:44 To: CIOG FOI Coordinator Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED


Good morning Jodi







UNCLASSIFIED




Regards Jodi



UNCLASSIFIED



Can you please review the Draft Statement of Reasons to confirm that all the information contained

Page 2 of 10

12/01/2017

in the document is considered acceptable to CIOG.







UNCLASSIFIED



UNCLASSIFIED





IBM IBM



Thanks

Page 3 of 10

12/01/2017

s33 s33

s33 s33




UNCLASSIFIED

Hi Adam



Martine


UNCLASSIFIED

Hey Martine






UNCLASSIFIED

Page 4 of 10

12/01/2017



Martine Deghelli




UNCLASSIFIED

UNCLASSIFIED

Hey Martine








UNCLASSIFIED

Page 5 of 10

12/01/2017

s22

Hi Adam



IBM IBMIBM


Kidn regards

Martine Deghelli




UNCLASSIFIED

Hi Martine/Harley,





Cheers

Peter Lee a/XO HICTOPh: (02) 614 44344ICT Capability Coordination ManagerICT Operations DivisionChief Information Officer Group _____________________________________________________________ • APW-02-239 • Anzac Park West • Constitution Avenue Parkes ACT 2600

Page 6 of 10

12/01/2017

s33 s33

s33 s33

s22

• Phone: +61 2 614 44211 | Mobile: • Email: [email protected]


UNCLASSIFIED

Hi Peter


Martine Deghelli




UNCLASSIFIED

Hey Harley




Thanks



From: Buckman, Harley MR

Page 7 of 10

12/01/2017

s22

s22

Sent: Tuesday, 13 September 2016 10:24 To: Monck, Adam MR Subject: RE: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Adam,








UNCLASSIFIED

Good morning Harley








Page 8 of 10

12/01/2017

s22

















Page 9 of 10

12/01/2017











Page 10 of 10

12/01/2017




To: Morgan, Lorraine MS 1

Subject: FOI 060/16/17 - Disclosure Log Documents [SEC=UNCLASSIFIED]



Attachments: 04 Disclosure Log.obr

Page 1 of 1

12/01/2017

UNCLASSIFIED

Lorraine

Please find attached a link to the Objective folder with documents to be uploaded to the Disclosure Log for FOI 060/16/17.

It is due to be published on 5 October 2016.

If you need more information then let me know.

Thanks








1. I refer to the application by under the Freedom of Information Act 1982 (FOI Act), for access to:


FOI decision maker






Decision









2












protecting the Defence Force from hindrance or activities which would prejudice its effectiveness.





3




27 September 2016


4

FR

EE

DO

M O

F I

NF

OR

MA

TIO

N R

EQ

UE

ST

NO

. 0

60/1

6/17

Item

D

ocu

men

t ti

tle

Num

ber

of

pag

es

Doc

um

ent

des

crip

tion

D

ecis

ion

un

der

the

Act

Rea

son

for

dec

isio

n

1 W

ork

Sta

tion

s 26

58

A li

st o

f al

l Wor

k S

tati

ons

Par

tial

acc

ess

Del

etio

ns m

ade

in a

ccor

danc

e w

ith

sect

ion

22 o

f th

e F

OI

Act

, on

the

grou

nds

that

the

dele

ted

mat

eria

l is

exem

pt, u

nder

sec

tion

33

[Doc

umen

ts a

ffec

ting

nat

iona

l sec

urit

y,

defe

nce

or in

tern

atio

nal r

elat

ions

] of

the

FO

I A

ct

2 S

erve

rs

115

A li

st o

f al

l Ser

vers

P

arti

al a

cces

s

Del

etio

ns m

ade

in a

ccor

danc

e w

ith

sect

ion

22 o

f th

e F

OI

Act

, on

the

grou

nds

that

the

dele

ted

mat

eria

l is

exem

pt, u

nder

sec

tion

33

[Doc

umen

ts a

ffec

ting

nat

iona

l sec

urit

y,

defe

nce

or in

tern

atio

nal r

elat

ions

] of

the

FO

I A

ct

3 M

ainf

ram

es

4 A

list

of

all M

ainf

ram

es

Par

tial

acc

ess

Del

etio

ns m

ade

in a

ccor

danc

e w

ith

sect

ion

22 o

f th

e F

OI

Act

, on

the

grou

nds

that

the

dele

ted

mat

eria

l is

exem

pt, u

nder

sec

tion

33

[Doc

umen

ts a

ffec

ting

nat

iona

l sec

urit

y,

defe

nce

or in

tern

atio

nal r

elat

ions

] of

the

FO

I A

ct

LORRAINE MORGAN


CP1-6-002 PO Box 7910 CANBERRA BC ACT 2610 Telephone: 02 626 63948 e-mail: [email protected]

[email protected] http://www.defence.gov.au/FOI/privacy.asp


Page 2 of 2

12/01/2017


From: Morgan, Lorraine MS 1

Sent: Wednesday, 5 October 2016 11:40 AM

To: DWIC.Team; Carpenter, Natalie MS

Cc: Corcoran, Tony MR; Davidson, Melissa MRS; Monck, Adam MR; Stinson, Theresa MRS

Subject: RE: FOI Disclosure FOI 060/16/17 - Inventory of Defence IT Hardware [SEC=UNCLASSIFIED]




Tracking: Recipient Read

DWIC.Team

Carpenter, Natalie MS

Corcoran, Tony MR Read: 5/10/2016 11:42 AM

Davidson, Melissa MRS Read: 5/10/2016 1:35 PM

Monck, Adam MR

Stinson, Theresa MRS

Page 1 of 2

12/01/2017

UNCLASSIFIED

Hi Andy,

The UAT has been reviewed. Please proceed with publishing at 1500h today.

Thanks,

LORRAINE MORGAN




From: Preston, Andrew MR On Behalf Of DWIC.Team Sent: Wednesday, 5 October 2016 11:15 To: Morgan, Lorraine MS 1; Carpenter, Natalie MS Cc: Corcoran, Tony MR; Davidson, Melissa MRS; Monck, Adam MR; Stinson, Theresa MRS; DWIC.Team Subject: RE: FOI Disclosure FOI 060/16/17 - Inventory of Defence IT Hardware [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hey Everyone,

060/16/17 is in UAT for review: http://uat.defence.gov.au/FOI/Decisions/DisclosureLog.asp

Cheers,


LORRAINE MORGAN





Page 2 of 2

12/01/2017


From: Morgan, Lorraine MS 1

Sent: Thursday, 6 October 2016 11:14 AM


Cc: Andrews, Jan MS; Corcoran, Tony MR; Carpenter, Natalie MS

Subject: FOI Disclosure Log Notification FOI 060/16/17 - Inventory of Defence IT Hardware [SEC=UNCLASSIFIED]




Page 1 of 1

12/01/2017

UNCLASSIFIED

Good morning,

This notification is to advise you that the redacted decision letter and documents for FOI 060/16/17 is now available on the FOI Disclosure Log at http://www.defence.gov.au/FOI/decisions/disclosurelog.asp

Regards,

LORRAINE MORGAN








Sent: Monday, 10 October 2016 8:23 AM

To: FOIReview

Subject: FW: FOI Request 060/16/17 - Decision and documents [SEC=UNCLASSIFIED]



Page 1 of 2

12/01/2017

UNCLASSIFIED

Please see below a request from for an internal review of FOI 060/16/17.



From:Sent: Friday, 7 October 2016 16:25 To: Monck, Adam MR Subject: Re: FOI Request 060/16/17 - Decision and documents [SEC=UNCLASSIFIED]

Hello Adam,

Thank you for the data provided. In my original FOI I stated:

"I am requesting the following document(s): an IT inventory of all workstations, servers and mainframes (if applicable) thatoperate within the department of defence and all applicable sub divisions of the department of defence. The requested documents will be made available to the general public, and this request is not being made for commercial purposes. This is part of a research project. In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not."

I received a PDF containing the following fields: STATUS, Asset Type, <unknown censored field> and brand.

I am grateful for the data received, however it is more generic in nature than expected. Therefore, I would like to request an internal review for additional fields and detail. An IT inventory typically contains upwards of 30+ data fields including but not limited to: department ownership, brand, model, IP address, MAC address and system specifications (hard drives, memory etc). While requesting all applicable field may be considered unreasonable, I would be particularly interested in obtaining the following fields: brand, hostname, MAC address, IP address, model (eg, IBM OptiPlex 755), ownership (eg, which department is using the resource) and system specifications (memory size, hard drives etc).

As a reminder, the requested documents will be made available to the general public and this request is not being made for commercial purposes. This is part of a research project.

I look forward to hearing back.

On Tue, Sep 27, 2016 at 3:09 PM, Monck, Adam MR <[email protected]> wrote:

UNCLASSIFIED

Good afternoon

1. The purpose of this email is to provide you with the decision on your request.



From: Elphick, Vanessa MRS on behalf of FOIReview


To: Corcoran, Tony MR; Carpenter, Natalie MS; Davidson, Melissa MRS

Cc: Kopec, Joanne MS





Tracking: Recipient Read

Corcoran, Tony MR Read: 10/10/2016 8:42 AM

Carpenter, Natalie MS

Davidson, Melissa MRS Read: 10/10/2016 8:46 AM

Kopec, Joanne MS

Page 1 of 3

12/01/2017

UNCLASSIFIED

Good morning

We have a new Internal Review

FOI 060/16/17

Kind Regards

Vanessa ElphickCase OfficerFOI Review and GuidanceInformation Management and Access Governance and Reform DivisionTelephone: 02 6266 2526 | CP1-6-009A| CAMPBELL PARK |Mon-Fri [email protected]

From: Monck, Adam MR Sent: Monday, 10 October 2016 08:23 To: FOIReview Subject: FW: FOI Request 060/16/17 - Decision and documents [SEC=UNCLASSIFIED]

UNCLASSIFIED





From: Sent: Friday, 7 October 2016 16:25 To: Monck, Adam MR Subject: Re: FOI Request 060/16/17 - Decision and documents [SEC=UNCLASSIFIED]

Hello Adam,


"I am requesting the following document(s): an IT inventory of all workstations, servers and mainframes (if applicable) thatoperate within the department of defence and all applicable sub divisions of the department of defence. The requested documents will be made available to the general public, and this request is not being made for commercial purposes. This is part of a research project. In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not."






UNCLASSIFIED

Good afternoon


2. The statement of reasons detailing the Accredited Decision Maker’s decision is at Attachment 1. Thedocuments in the form approved for release are at Attachment 2, 3 and 4 respectively.

3. In summary, the Accredited Decision Maker decided to partially release three documents in accordancewith section 22(1)(a)(ii) [access to edited copies with exempt or irrelevant matter deleted] of the FOI Act, on the grounds that the deleted material is considered exempt under section 33(a)(ii) [Documents affecting the defence of the Commonwealth] of the FOI Act.

FOI Disclosure Log

4. In accordance with the requirements of section 11C of the FOI Act, Defence is required to publish detailsof information released under the FOI Act. Defence publishes identified documents relating to requests within five working days of receipt by the applicant. Defence will also publish this decision notice with privacy deletions. This request will be published on 5 October 2016.

Rights of Review

5. Under the provisions of section 54 of the FOI Act, you are entitled to request a review of this decision.Your review rights are detailed at Attachment 5.

6. Should you have any questions in regard to this matter please contact this office.

Kind regards,


Page 2 of 3

12/01/2017

7. In assisting ASIMA in conducting the internal review and taking into account the information providedby in his internal review application, could you arrange to undertake searches for additional information relating to the document. Could you also please address the following:

In a "normal" IT inventory, what is the general information captured? In the original searches, what information was captured? Is it possible to conduct a search that captures all of the additional fields requested? If so please

provide the documents.

Time Limit

8. The FOI Act only allows 30 days to conduct and finalise the internal review application. If thirty dayshave passed since an application for internal review was received by an agency, and the applicant has not been notified of the decision on the review, he may apply to the Australian Information Commissioner for review. In light of the above, I would appreciate if you could provide the information and details of searches as requested in paragraph 13 above by cob Monday 24 Oct 16 to enable ASIMA to inform of his decision by the deadline.

Further Review

9. If you do not locate any additional documents that are the subject of application for review, hewill, as mentioned above be entitled to apply to the Australian Information Commissioner for review. Should this occur, your assistance may be required in responding to such an application. The onus will be on the Department to justify the decision under review. You may be asked to provide written evidence and appear as a witness at a hearing.

10. If you have any questions in relation to the above request please do not hesitate to contact me.



Page 2 of 2

12/01/2017




INFORMATION ACT






FOI decision maker


this FOI request.






Decision






the FOI Act; and








2





































old documents.



3




27 September 2016


4


Item Document










Act







Act







Act

Elphick, Vanessa MRS



To: FOIReview




Page 1 of 2

17/10/2016

UNCLASSIFIED





Hello Adam,


"I am requesting the following document(s): an IT inventory of all workstations, servers and mainframes (if applicable) that operatewithin the department of defence and all applicable sub divisions of the department of defence. The requested documents will be made available to the general public, and this request is not being made for commercial purposes. This is part of a research project. In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not."






UNCLASSIFIED

Good afternoon


2. The statement of reasons detailing the Accredited Decision Maker’s decision is at Attachment 1. The documents inthe form approved for release are at Attachment 2, 3 and 4 respectively.

3. In summary, the Accredited Decision Maker decided to partially release three documents in accordance withsection 22(1)(a)(ii) [access to edited copies with exempt or irrelevant matter deleted] of the FOI Act, on the grounds that the deleted material is considered exempt under section 33(a)(ii) [Documents affecting the defence of the Commonwealth] of the FOI Act.

FOI Disclosure Log



From:

Sent: Thursday, 25 August 2016 8:56 PM

To: FOI

Subject: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]



Page 1 of 1

17/10/2016


FOI request





Referrer URL:




Sent: Monday, 24 October 2016 2:56 PM

To: Elphick, Vanessa MRS

Cc: CIOG FOI Coordinator; FOI

Subject: FW: Internal Review - FOI 060/16/17 - Fresh searches request [SEC=UNCLASSIFIED]



Attachments: Attachment A - SOR.pdf; Attachment B - Ir Request.pdf; Attachment C - FOI Request.pdf; TAMIT-Fields-Descriptions-24Oct16.xls; FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

Page 1 of 4

12/01/2017

UNCLASSIFIED

UNCLASSIFIED

Good afternoon Vanessa,

Please see responses below from Director Fleet Operations and a/Assistant Secretary ICT Reform Branch AIRCDRE Nick Barneveld.

In a "normal" IT inventory, what is the general information captured? Attached is a list of the fields thatwe utilise in TAMIT for each hardware asset.

In the original searches, what information was captured? (Email attached please retract as required). Is it possible to conduct a search that captures all of the additional fields requested? If so please


a. I'm grateful for the data received but would like to request additional fields and detail. Inparticularly interested in obtaining the following fields: Brand, hostname, MAC address, IP address, model, ownership and system specifications.

Brand name was provided in the original documentation to the applicant. Model number was retracted due to Section 33 of the FOI Act. Hostname, MAC address, IP address, ownership and system specifications would detail Defence's operational ICT capabitlities and would therefore pose a mayor security concern regarding operational activities pertaining to the defence of the Commonwealth.

Regards, Jodi Jodi Bonnar | A/CIOG Group Information ManagerDirectorate Communications and Change Management Reform Chief Information Officer Group | 02 614 44968Department of Defence | APW-05-064 | Parkes ACT 2600Please Note: I do not currently work on Thursday’s

From: Buckman, Harley MR Sent: Monday, 24 October 2016 13:50 To: CIOG FOI Coordinator Subject: FW: Internal Review - FOI 060/16/17 - Fresh searches request [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Jodi,

In response to your questions below:


1) Attached is a list of the fields that we utilise in TAMIT for each hardware asset.2) I will see if I can track down the email that was sent to Martine and forward it to yourself.3) I don't recall there being a definitive list of fields defined for this request but if you would provide such a list Iam happy to give you a view of the data. Please be aware that due to the number of assets involved the size of the spreadsheet will increase rapidly in proportion to the number of fields selected and it is easy to reach the emailable limit.



From: Bonnar, Jodi MRS On Behalf Of CIOG FOI Coordinator Sent: Monday, 24 October 2016 09:15 To: Buckman, Harley MR Cc: CIOG FOI Coordinator; Barneveld, Nick AIRCDRE Subject: FW: Internal Review - FOI 060/16/17 - Fresh searches request [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good morning Harley,

As just discussed could you please provide a response for the following questions.


provide the documents.a. I'm grateful for the data received but would like to request additional fields and detail. Inparticularly interested in obtaining the following fields: Brand, hostname, MAC address, IP address, model, ownership and system specifications.

Thanks in Advance, Jodi


From: Elphick, Vanessa MRS On Behalf Of FOIReview Sent: Thursday, 20 October 2016 15:00 To: CIOG FOI Coordinator Subject: Internal Review - FOI 060/16/17 - Fresh searches request [SEC=UNCLASSIFIED]

UNCLASSIFIED

Good afternoon CIOG

Page 2 of 4

12/01/2017

s22

1. The purpose of this email is to seek your urgent assistance, on behalf of Mr Tony Corcoran, AssistantSecretary Information Management and Access (ASIMA), in conducting fresh searches for documents subject to an internal review application under the Freedom of Information Act 1982 (FOI Act). Your response is due by cob Monday 24 Oct Oct 16.

2. In ASIMA conducting the internal review and making his decision in respect to this matter, underinstruction from the Secretary, he is at liberty to direct any action and enter into such consultation as he believes to be necessary. The assistance of yourself is requested in conducting fresh searches for documents captured by request.

Introduction

3. has applied for internal review of the decision made by Ms Jan Andrews on 27September 2016 on the grounds that further information or documents relating to the FOI request exist. A copy of the FOI statement of reasons is at ‘Attachment A’. The application for internal review, made pursuant to section 54 of the FOI Act, is at ‘Attachment B’.

Background

4. requested access to the following documents under the FOI Act:

"I am requesting the following document(s): an IT inventory of all workstations, servers and mainframes (if applicable) that operate within the department of defence and all applicable sub divisions of the department of defence.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes. This is part of a research project.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not."

5. A copy of the FOI request is at ‘Attachment C’.

6. has contended he believes further information relating to the request which should beprovided to him. Specifically, states:

a. I'm grateful for the data received but would like to request additional fields and detail. Inparticularly interested in obtaining the following fields: Brand, hostname, MAC address, IP address, model, ownership and system specifications.

Request to undertake and document searches for documents

7. In assisting ASIMA in conducting the internal review and taking into account the information providedby in his internal review application, could you arrange to undertake searches for additional information relating to the document. Could you also please address the following:



Time Limit

8. The FOI Act only allows 30 days to conduct and finalise the internal review application. If thirty dayshave passed since an application for internal review was received by an agency, and the applicant has not been notified of the decision on the review, he may apply to the Australian Information Commissioner for review. In light of the above, I would appreciate if you could provide the information and details of searches as requested in paragraph 13 above by cob Monday 24 Oct 16 to enable ASIMA to inform of his

Page 3 of 4

12/01/2017

decision by the deadline.

Further Review

9. If you do not locate any additional documents that are the subject of application for review, hewill, as mentioned above be entitled to apply to the Australian Information Commissioner for review. Should this occur, your assistance may be required in responding to such an application. The onus will be on the Department to justify the decision under review. You may be asked to provide written evidence and appear as a witness at a hearing.

10. If you have any questions in relation to the above request please do not hesitate to contact me.








Page 4 of 4

12/01/2017




INFORMATION ACT






FOI decision maker


this FOI request.






Decision






the FOI Act; and








2





































old documents.



3




27 September 2016


4


Item Document










Act







Act







Act




To: FOIReview




Page 1 of 2

17/10/2016

UNCLASSIFIED





Hello Adam,


"I am requesting the following document(s): an IT inventory of all workstations, servers and mainframes (if applicable) that operatewithin the department of defence and all applicable sub divisions of the department of defence. The requested documents will be made available to the general public, and this request is not being made for commercial purposes. This is part of a research project. In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not."






UNCLASSIFIED

Good afternoon


2. The statement of reasons detailing the Accredited Decision Maker’s decision is at Attachment 1. The documents inthe form approved for release are at Attachment 2, 3 and 4 respectively.

3. In summary, the Accredited Decision Maker decided to partially release three documents in accordance withsection 22(1)(a)(ii) [access to edited copies with exempt or irrelevant matter deleted] of the FOI Act, on the grounds that the deleted material is considered exempt under section 33(a)(ii) [Documents affecting the defence of the Commonwealth] of the FOI Act.

FOI Disclosure Log



From:

Sent: Thursday, 25 August 2016 8:56 PM

To: FOI

Subject: WWW enquiry: FOI Request [SEC=UNCLASSIFIED]



Page 1 of 1

17/10/2016


FOI request





Referrer URL:



From: Buckman, Harley MR

Sent: Monday, 24 October 2016 1:53 PM



Attachments:

Page 1 of 5

12/01/2017

UNCLASSIFIED

Hi Jodi,

Please find attached the original asset cut from TAMIT.



From: Buckman, Harley MR Sent: Wednesday, 14 September 2016 10:18 To: Deghelli, Martine MISS Cc: Scarborough, Mark MR 1 Subject: FW: FOI 060/16/17 - Request for Documents [SEC=UNCLASSIFIED]

UNCLASSIFIED

Hi Martine,

As discussed just now I was approached by Adam Monck from (Case Manager, Freedom of Information, Information Management and Access, Governance and Reform Division) requesting the following information as a result of an FOI:


Attached is a spreadsheet compiled from TAMIT which covers this area but I would imagine there is someone in CIOG who needs to approve the release of such information before it can be sent to Adam.

Can you please determine who this is and ultimately get the information requested to Adam.




s22

s22

s22


UNCLASSIFIED

Harley



Cheers






UNCLASSIFIED


UNCLASSIFIED

Hi Jason, Shane





Director Fleet Operations Chief Information Officer Group APW-4-177

Page 2 of 5

12/01/2017

ANZAC Park West on Constitution Avenue Reid 2612 ACT Mobile


UNCLASSIFIED

Hey Harley




Thanks




UNCLASSIFIED

Hi Adam,






Director Fleet Operations

Page 3 of 5

12/01/2017

s22

Chief Information Officer Group APW-4-177 ANZAC Park West on Constitution Avenue Reid 2612 ACT Mobile


UNCLASSIFIED

Good morning Harley














Page 4 of 5

12/01/2017

s22





Page 5 of 5

12/01/2017

2


Internal review decision

9. I have decided to vary the original decision by partially releasing three documentswith material considered exempt under subparagraph 33(a)(i) [Documents affecting the security of the Commonwealth] of the FOI Act.

10. Information considered irrelevant in Document 3, as it does not specifically relate tothe scope, has been removed under subparagraph 22(1)(b)(ii) [Access to edited copies with exempt or irrelevant matter deleted] of the FOI Act.

11. As the applicant was provided with a copy of the pages in the form I have decided torelease (but exempted under subparagraph 33(a)(ii), I have not provided another copy of these pages.


12. In arriving at my decision, I had regard to:

a. the terms of the applicant’s original request;b. the applicant’s subsequent contentions for internal review;b. the original decision;d. relevant provisions in the FOI Act;e. the Guidelines published by the Office of the Australian Information

Commissioner under section 93A of the FOI Act (the Guidelines); andf. advice from the Chief Information Officer Group (CIOG).

Findings and reasons for the decision

Under subparagraph 33(a)(i)

13. Subparagraph 33(a)(i) of the FOI Act relevantly provides:“A document is an exempt document if disclosure of the document under this Act:

(a) would, or could reasonably be expected to, cause damage to: (i) the security of the Commonwealth…”

14. I was satisfied that some material in the documents is exempt undersubparagraph 33(a)(i) of the FOI Act, because it provides detail on Defence’s operational information communication technology capabilities. Specifically, this relates to the model names of equipment which, if released, would provide a potential adversary detailed information on the capabilities of that equipment.

15. These capabilities, if combined with other pieces of information available to the publicgenerally, could generate a composite that would prejudice the effectiveness of those operational activities and would create a serious security concern to the Commonwealth.

16. In deciding that material was exempt under section 33 of the FOI Act, I considered theintelligence technique known as the ‘mosaic theory’. This theory holds that individual harmful pieces of information, when combined with other pieces, can generate a mosaic that can damage Australia’s national security. I note the Information Commissioner’s Guidelines state:

3



17. I considered that, if this information were to be released, it would inform potentialadversaries of current Defence technical capabilities, which would be a significant security risk and would expose Australia to unnecessary risk.

Further information

18. I note the applicant wishes to request additional fields, as stated in his contentions inparagraph 5 above. Mrs Vanessa Elphick of the FOI Review team contacted the applicant to advise that the internal review process would only review the original scope and documents and she therefore suggested that the applicant withdraw his internal review application and submit a fresh request. Even though no response has been received to Mrs Elphick’s email to the applicant of 2 November 2016, I wish to advise the applicant that the option to submit a fresh request for the additional fields is still available.

Tony Corcoran PSM Accredited Decision Maker – Internal Review

4 November 2016

TonyCorcoranDigitally signed by TonyCorcoranDN: c=AU, o=GOV, ou=DoD, ou=PKI, ou=Personnel, cn=TonyCorcoran Date: 2016.11.04 14:06:43 +11'00'