Our ref: FOI-0753-2425
Thank you for your request received by Transport for London (TfL) on 04 June 2024 asking for information about our network system.
Your request has been considered under the requirements of the Freedom of Information Act 2000 and our information access policy.
I can confirm that we do hold the information you require. Please see the attached spreadsheet.
However, a complete response to the requested information is exempt from release under section 31 of the Freedom of Information Act, which relates to information whose disclosure would be likely to prejudice the prevention or detection of crime. This reflects the fact that release of information under the Freedom of Information Act is considered to be to the public at large, rather than the individual applicant. Therefore, TfL must consider how any potential recipient of the information might use it, rather than the person directly asking for it. In this instance the exemption has been applied as disclosure of the information you have requested would pose a threat to our cyber security and, consequently, to the prevention or detection of crime as it would assist a third party to mount an attack on our IT systems by using the data provided to infer potential vulnerability.
The London transport system is a critical piece of national infrastructure and as such we employ rigorous safeguards to protect it from cyber-attack. Like other organisations we are subject to these regularly. These attacks are unlawful under the Computer Misuse Act, and whilst the motive is not always apparent, we are aware of the risk to critical national infrastructure that may result from a successful attack. We consider that releasing the information you have asked for would be likely to prejudice our efforts to prevent and detect future attacks and undermine our ability to safeguard our information systems.
The use of this exemption is subject to an assessment of the Public Interest Test, to determine whether the overall balance of public interest rests in the exemption applying and the information being withheld, or in releasing it in any event. We recognise the need for openness and transparency by public authorities, and the fact you have requested the information is in itself an argument in favour of release. However, in this instance we consider that there is greater public interest in safeguarding our information systems and to ensure that cyber-attacks, or any other criminal activity, is prevented wherever possible.
If you are not satisfied with this response please see the attached information sheet for details of your right to appeal.
Yours sincerely,
Tahsin Prima
FOI Case Officer
General Counsel
Transport for London