Freedom of Information Request - Contracts for Firewall, Anti-virus, Microsoft Enterprise Agreement, and Power BI
Date: 23 June 2025
Our ref: SIR180481/A5220081
Information Request – Contracts for Firewall, Anti-virus, Microsoft Enterprise Agreement, and Power BI
Your Request
'1. Standard Firewall (Network)
Firewall services that protect the organisation’s network from unauthorised access and other internet security threats.
2. Anti-virus Software Application
Programs designed to prevent, detect, and remove viruses, malware, trojans, adware, and related threats.
3. Microsoft Enterprise Agreement
A volume licensing agreement that may include:
Microsoft 365 (Office, Exchange, SharePoint, Teams)
Windows Enterprise
Enterprise Mobility + Security (EMS)
Azure services (committed or pay-as-you-go)
4. Microsoft Power BI
Or any alternative business intelligence platform used for data connectivity, dashboards, and reporting.
For each of the above areas, I kindly request the following:
Who is the existing supplier for this contract?
What is the annual spend for each contract?
What is the description of the services provided?
Primary brand (where applicable)
What is the start date of the contract?
What is the expiry date of the contract?
What is the total duration of the contract?
Who is the responsible contract officer?
• Please include at least their job title, and where possible, name, contact number, and direct email address
How many licences or users are included (where applicable)?’
Our Response
We have undertaken a detailed search of the information that we hold and the information that we can release to you is provided below.
| Question | 1. Standard Firewall (Network) | 2. Anti-virus Software Application | 3. Microsoft Enterprise Agreement | 4. Microsoft Power BI |
|---|---|---|---|---|
| 1. Who is the existing supplier for this contract? | Cyberlab (Chess Cybersecurity LTD) | Cyberlab (Chess Cybersecurity LTD) | Softcat PLC / Microsoft | - |
| 2. What is the annual spend for each contract? | £10,014.55 | £24,237.36 | £320,000.00 | - |
| 3. What is the description of the services provided? | Firewall licence and support | Endpoint and server anti-virus | Enterprise Subscription Agreement M365 E5 x 830 | Power BI Pro included in 365 E5 |
| 4. Primary brand (where applicable) | Information withheld | Information withheld | - | - |
| 5. What is the start date of the contract? | 14/03/2025 | 14/06/2025 | 01/04/2024 | - |
| 6. What is the expiry date of the contract? | 12/06/2026 | 13/06/2026 | 31/03/2027 | - |
| 7. What is the total duration of the contract? | 15 months | 12 months | 36 months | - |
| 8. Who is the responsible contract officer? | Richard Betts, IT Operations Manager, richard.betts@nature. scot, 0774 7760011 | Richard Betts, IT Operations Manager, richard.betts@nature. scot, 0774 7760011 | Richard Betts, IT Operations Manager, richard.betts@nature. scot, 0774 7760011 | - |
| 9. How many licences or users are included (where applicable)? | - | 800 | 830 | - |
We have responded to part of your request as ‘Information withheld’. This is because we hold some information that we are unable to release; specifically, we will not release information that could expose the specific products and/or the versions in use, the hardware and software details, and supplier name(s) and where this would therefore directly identify the solution in place.
Release of this withheld information into the public domain, in response to a Freedom of Information request, would substantially increase the risk of a "targeted cyber-attack" against NatureScot. Any such cyber-attack would be highly damaging to NatureScot, and seriously affect our ability to deliver public services and keep our information secure. It is not in the public interest to expose NatureScots information systems to such a serious threat and risk. We are therefore withholding the information under FOISA Section 30(c) (Prejudice to the effective conduct of public affairs) and maintain that, in this case, it is in the public interest to do so.
Review and Appeal
I hope this information meets your requirements, but if you are dissatisfied with how we have responded to your information request, please write to us within 40 working days explaining your concerns. You can contact us at Battleby, Redgorton, Perth, PH1 3EW or email us at [email protected]. We will carry out a review of our response and contact you with our findings within 20 working days.
If you are not satisfied following this, you can make an appeal to the Scottish Information Commissioner within 6 months. The Scottish Information Commissioner can be contacted at:
Scottish Information Commissioner
Kinburn Castle
Doubledykes Road
St Andrews
Fife
KY16 9DS
Telephone: 01334 464610
Yours sincerely
FOI Officer,
NatureScot