Gloucestershire Health and Care- NHS Trust logo
with you, for you
Responses > Web Filtering and Security Awareness

Freedom of Information request Web Filtering and Security Awareness

Response published: 18 March 2025

FOI Request

Please could you provide the following information: General: * Number of Sites * Number of Employees * Number of IT Staff * Annual IT Budget Web Security 1. Who is the provide of your current web security solution? 2. Does your current web security provide you visibility in to cloud and/or business application usage? 3. When is the contract up for renewal? 4. Typically, what is the chosen duration of these contracts 12, 24, or 36 Months? 5. Name and contact details of the person responsible? 6. Current annual spend for this contract? 7. Current number of licenses for this contract? 8. Did you purchase via a reseller, or partner (if yes, please specify who e.g. Phoenix, Softcat etc.)? 9. Are you planning on assigning specific budgets for securing web security in 2025? 10. Do you procure this technology through the G-Cloud framework (if not, how do you procure & plan to procure Web security in the future?) Security Awareness Training 1. Do you current undertake cyber security awareness training with your staff? 2. Who is your current Security Awareness Training provider? 3. When is the contract up for renewal? 4. Typically, what is the chosen duration of these contracts 12, 24, or 36 Months? 5. Name and contact details of the person responsible? 6. Current annual spend for this contract? 7. Current number of licenses for this contract? 8. Did you purchase via a reseller, or partner (if yes, please specify who e.g. Phoenix, Softcat etc.)? 9. Are you planning on assigning specific budgets for Security Awareness Training in 2025? 10. Do you procure this technology through the G-Cloud framework (if not, how do you procure & plan to procure Security Awareness Training in the future?)

FOI Response

Freedom of Information Request – Ref: FOI 305-2024

Thank you for your recent Freedom of Information request. Please find our response below.

You asked:

General

Our response:

* Number of Sites:  60

* Number of Employees: 6500

* Number of IT Staff Within IT Operations: 37

* Annual IT Budget Within IT Operations: £5,500,000

You asked:

Web Security

Our response:

1. Who is the provide of your current web security solution?

Having carried out a public interest test, we apply the exemption, S(2) 43 – commercial interests

2. Does your current web security provide you visibility in to cloud and/or business application usage?

Yes

3. When is the contract up for renewal?

June 2026

4. Typically, what is the chosen duration of these contracts 12, 24, or 36 Months?

36 Months

5. Name and contact details of the person responsible?

Head of IT Operations, 0300 421 8100

Having carried out a public interest test, we apply the exemption, S(2) 36 – prejudice to effective conduct of public affairs.

6. Current annual spend for this contract?

Costs are integrated with other systems

7. Current number of licenses for this contract?

5,500

8. Did you purchase via a reseller, or partner (if yes, please specify who e.g. Phoenix, Softcat etc.)?

Yes, Bytes

9. Are you planning on assigning specific budgets for securing web security in 2025?

No

10. Do you procure this technology through the G-Cloud framework (if not, how do you procure & plan to procure Web security in the future?)

Not yet confirmed

You asked:

Security Awareness Training

Our response:

1. Do you current undertake cyber security awareness training with your staff?

Yes

2. Who is your current Security Awareness Training provider?

NHS produced Data Security Awareness course

3. When is the contract up for renewal?

Not applicable

4. Typically, what is the chosen duration of these contracts 12, 24, or 36 Months?

Not applicable

5. Name and contact details of the person responsible?

Not applicable

6. Current annual spend for this contract?

Not applicable

7. Current number of licenses for this contract?

Not applicable

8. Did you purchase via a reseller, or partner (if yes, please specify who e.g. Phoenix, Softcat etc.)?

Not applicable

9. Are you planning on assigning specific budgets for Security Awareness Training in 2025?

No

10. Do you procure this technology through the G-Cloud framework (if not, how do you procure & plan to procure Security Awareness Training in the future?)

Not applicable

Next steps:

Should you have any queries in relation to our response, please do not hesitate to contact us. If you are unhappy with the response you have received in relation to your request and wish to ask us to review our response, you should write to:

Louise Moss
Head of Legal Services / Associate Director of Corporate Governance
c/o Gloucestershire Health and Care NHS Foundation Trust
Edward Jenner Court
1010 Pioneer Avenue
Gloucester Business Park
Brockworth, GL3 4AW
E-mail: louise.moss@ghc.nhs.uk

If you are not content with the outcome of any review, you may apply directly to the Information Commissioner’s Office (ICO) for further advice/guidance. Generally, the ICO will not consider your case unless you have exhausted your enquiries with the Trust which should include considering the use of the Trust’s formal complaints procedure. The ICO can be contacted at: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.