Evidence
The record.
Documents as held. Redacted copies. Dates and facts only.
Phillips Solicitors
IT asset inventory brought to Cyber Essentials standard.
- Offer emails, 9 and 10 October 2024.
- Cyber Essentials certificate, 22 December 2025, whole organisation.
Inventory work
- Every computer in the office checked at the machine: software and patch status confirmed against the standard.
- Shared admin logins replaced with user accounts, so access to each asset is controlled and attributable.
Information Commissioner's Office
Statutory disclosure audited for data integrity.
- Internal review under the Freedom of Information Act 2000, ss.19(2A) and 77, 2 June 2026.
- ICO, 31 July 2026: case accepted for investigation without waiting for the internal review, outstanding more than 40 working days.
Inventory work
- The authority's disclosed dataset audited against its own signed determinations; the missing record identified.
- The stock-take control applied to records: the ledger is tested against the source documents, and a mismatch is traced to its cause.
National Audit Office
Attendance-data controls audited, control failure reported to the NAO.
- Audit findings on attendance-data self-assurance and funding in franchised higher education, submitted to the NAO.
- NAO reply, 7 July 2026: cites its 2024 franchised higher education work, paragraph 14, and confirms it will return to the area.
Inventory work
- Records held by the provider alone, with no independent standard to count against.
- Funding released against a record that cannot be verified: stock issued against an unchecked ledger.