Relational Database Management Systems
KEYWORDS
Relational, Database, Management, Systems, Business, Applications, Functions, Oracle, MySQL, MS SQL Server, MS Access, Ingres, Actian X, PostgreSQL, Licences, Versions, Shared Service, Inhouse, Framework, Support
PUBLICATION NUMBER
PUB 1099
FOI REFERENCE NUMBERS
14824 and 14841
FOI REFERENCE NUMBER
14824
REQUEST TITLE
Relational Database Management Systems
DATE RANGE
N/A
INFORMATION REQUESTED
I am currently researching what relational database management systems are being used and would be grateful if you could provide me with the following information:
- What database management systems do you currently use?
- What business applications and functions are being supported by each database management system?
- Is each database management system supported by an inhouse team or an external company?
- Do you use Ingres / Actian X? If so, what business function is supported by it?
DISCLOSURE WITH EXEMPTIONS
Part Disclosure with Section 31 Exemption
INFORMATION CORRECT AS AT
21.09.20
DATE OF DISCLOSURE
06.10.20
RELATED DOCUMENTS
N/A
FOI 14824 RESPONSE
Having completed enquiries within Essex Police in respect of Section 1(1)(a), Essex Police does hold information relating to your request, Essex Police can confirm in respect of Section 1(1)(b) the following data:
- What database management systems do you currently use?
Oracle, MySQL, MS SQL Server, MS Access.
- Is each database management system supported by an inhouse team or an external company?
Inhouse for most systems. - Do you use Ingres / Actian X? If so, what business function is supported by it?
No.
No further information will be disclosed by virtue of the following exemption:
Section 31(1)(a)(b) – Law enforcement
Section 31 is a qualified prejudiced-based exemption and there is a requirement to articulate the harm that would be caused in disclosing this information as well as carrying out a public interest test, both of which are outlined below.
Harm
To disclose which business applications and functions are being supported by a particular database management system would identify vulnerable computer systems and processes which in turn would put knowledge about what software is used within the force and how, into the public domain. This would have a huge impact on the effective delivery of operational law enforcement as it would leave forces open to cyber-attacks and hacking which could render computer devices obsolete.
This type of information would be extremely beneficial to offenders, including terrorists and terrorist organisations. It is vitally important that information sharing takes place with other Police forces and security bodies within the UK to support counter-terrorism measures in the fight to deprive terrorist networks of their ability to commit crime.
Policing is an information-led activity and information assurance (which includes information security) is fundamental to how the Police Service manages the challenges faced. In order to comply with statutory requirements, the College of Policing Authorised Professional Practice for Information Assurance has been put in place to ensure the delivery of core operational policing by providing appropriate and consistent protection for the information assets of member organisations, see below link:
https://www.app.college.police.uk/app-content/information-management/
Public Interest Considerations
Factors favouring disclosure (Section 31)
Confirming that information exists relevant to this request would lead to a better informed public which may encourage individuals to provide intelligence in order to reduce the risk of Police networks being hacked.
Factors against disclosure (Section 31)
Disclosing information about which business applications and functions are being supported by a particular database management system shows that Essex Police take their responsibility to protect information and information systems from unauthorised access, destruction, etc., dismissively and inappropriately.
Balancing Test
The Police Service is charged with enforcing the law, preventing and detecting crime and protecting the communities we serve. As part of that policing purpose, information is gathered which can be highly sensitive relating to high profile investigative activity.
Weakening the mechanisms used to monitor any type of criminal activity and specifically terrorist activity would place the security of the country at an increased level of danger.
In order to comply with statutory requirements and to meet NPCC expectation of the Police Service with regards to the management of information security, a national policy approved by the College of Policing titled National Policing Community Security Policy has been put in place. This policy has been constructed to ensure the delivery of core operational policing by providing appropriate and consistent protection for the information assets of member organisations. A copy of this can be found at the below link:
http://library.college.police.uk/docs/APP-Community-Security-Policy-2014.pdf
Anything that places that confidence at risk, no matter how generic, would undermine any trust or confidence individuals have in the Police Service. Therefore, at this moment in time, it is our opinion that for these issues the balance test favours non-disclosure.
FOI REFERENCE NUMBER
14841
REQUEST TITLE
Oracle Database
DATE RANGE
N/A
INFORMATION REQUESTED
Please may I request the following information under the Freedom of Information Act.
- Do you currently use an Oracle Database? If so, what Versions?
- Do you own perpetual Oracle Licences, do you Pay Oracle directly or through a shared service or other framework?
- What is the value of the Oracle support contract and when does it renew?
- Do you have a preference to consider open-source software over proprietary vendors?
- Do you use PostgreSQL?
DISCLOSURE WITH EXEMPTIONS
Full Disclosure
INFORMATION CORRECT AS AT
28.09.20
DATE OF DISCLOSURE
06.10.20
RELATED DOCUMENTS
N/A
FOI 14841 RESPONSE
Having completed enquiries within Essex Police in respect of Section 1(1)(a), Essex Police does hold information relating to your request, Essex Police can confirm in respect of Section 1(1)(b) the following data:
- Do you currently use an Oracle Database? If so, what Versions?
Yes. We have databases running Oracle Version 8 through to Version 19. - Do you own perpetual Oracle Licences, do you Pay Oracle directly or through a shared service or other framework?
We own perpetual ‘Named User’ licenses, annual support/maintenance is paid directly to Oracle. - What is the value of the Oracle support contract and when does it renew?
Please see below links to the Bluelight Procurement Database – this covers licenses (software) and hardware support:
https://www.blpd.gov.uk/foi/foicontractview.aspx?contractid=43948
https://www.blpd.gov.uk/foi/foicontractview.aspx?contractid=44090 - Do you have a preference to consider open-source software over proprietary vendors?
No. - Do you use PostgreSQL?
Yes.