{"id":787,"date":"2007-08-04T16:53:00","date_gmt":"2007-08-04T16:53:00","guid":{"rendered":"http:\/\/irdial.com\/blogdial\/?p=787"},"modified":"2007-08-22T11:34:01","modified_gmt":"2007-08-22T11:34:01","slug":"it-is-secret-because-it-is-evil","status":"publish","type":"post","link":"https:\/\/irdial.com\/blogdial\/?p=787","title":{"rendered":"It is secret because it is EVIL"},"content":{"rendered":"

ID cards – some of the main corporate beneficiaries so far<\/strong><\/p>\n

Some in the IT industry are concerned about facets of the ID cards programme: the costs, the lack of a robust business case, and uncertainties over how well the technologies will work when applied to millions of people.<\/p>\n

But not everyone is complaining. Indeed a by-product of the government’s decision to award a plethora of contracts under the ID Card scheme is that parts of the IT industry have signed up to non-disclosure terms, which has reduced significantly the number of cognoscente who could speak openly about the scheme even if they wanted to.<\/p>\n

These are some of the organisations and individuals that have won contracts so far under the Identity Cards scheme …<\/p>\n

PA Consulting<\/a> (in part including Electronic Commerce Associates Ltd.) Approx \u00a329.5m to \u00a333.5m
\nCapita Resourcing<\/a> – up to \u00a35m
\nField Fisher Waterhouse<\/a> Appox \u00a31.1m
\nAtos Origin IT Services UK Ltd<\/a> – \u00a31m+
\nParity Resources<\/a> – up to \u00a31m
\nGlotel Technology – up to \u00a31m
\nSirius consortium<\/a> (Fujitsu Services Ltd<\/a> and Global Crossing Ltd<\/a> and PWC) – \u00a3184,000
\nCESG Communications Electronic Security Group<\/a> – \u00a3140,000+
\nVeredus London<\/a> \u2014 \u00a3135,000+
\nErnst and Young<\/a> – \u00a3111,000
\nPartnerships UK<\/a> – \u00a393,000+
\nKPMG<\/a> – \u00a390,000+
\nCornwell Management Consultants<\/a> – \u00a348,000
\nShreeveport Management Consultancy – \u00a343,000+
\nSigma<\/a> – \u00a337,000+
\nThe Metropolitan Police – \u00a335,000
\nAxon Group Plc<\/a> – \u00a329,000
\nExcel Recruitment<\/a> – \u00a320,000
\nWhitehead Mann Ltd<\/a> – \u00a317,000
\nAlan Hughes<\/a> – \u00a316,000+
\nOffice of Government Commerce<\/a> – \u00a312,000
\nAbbey Consulting<\/a> – \u00a34,000
\nInterleader Ltd<\/a> – \u00a32,000<\/p>\n

Contracts worth up to \u00a3500,000<\/strong><\/p>\n

Adecco UK Ltd<\/a>
\nAllen Lane
\nASE Consulting Ltd<\/a>
\nCapita Interim Management<\/a>
\nChamberlain Beaumont<\/a>
\nComputer People<\/a>
\nCrystal UK Ltd<\/a>
\nElan Computing Ltd<\/a>
\nElectronic Computer Associates<\/a> (novated from PA Consulting contract)
\nHays Accounting<\/a>
\nHedra Ltd<\/a>
\nHudson Global Resources Ltd<\/a>
\nKelly Services<\/a>
\nLogica CMC<\/a>
\nMethods Consulting<\/a>
\nMontpelier Contracting and Consulting<\/a>
\nNorthern Recruitment Group plc<\/a>
\nOGC Accounting Service<\/a>
\nPendragon Information Systems<\/a>
\nReal-Time Consultants plc<\/a>
\nRuillion Computer<\/a>
\nSand Resources<\/a>
\nSearch Total Recruitment Solutions<\/a>
\nSecurity Printing Systems Ltd<\/a>
\nSpring Technology<\/a>
\nTAG TPS Ltd<\/a>
\nThe Nesco Group<\/a><\/p>\n

Contracts under \u00a350,000:<\/strong><\/p>\n

Angela Mortimer plc<\/a>
\nAnite Public Sector
\nBeamans Ltd<\/a>
\nBritish Print Industries Federation<\/a>
\nBrook Street<\/a>
\nBuchanan and Darby Associates<\/a>
\nBusiness in the Community<\/a>
\nCallcredit plc<\/a>
\nCE Williams<\/a>
\nCentral Office of Information<\/a>
\nCentre for Accessibility<\/a>
\nDiane Bailey Associates<\/a>
\nDonaldson’s<\/a>
\nDrivers Jonas<\/a>
\nER Consultants<\/a>
\nEquifax Ltd<\/a>
\nExcel Recruitment<\/a>
\nHome Office Cashiers<\/a>
\nIan Farrand HR Management Consultants<\/a>
\nIdeas UK<\/a>
\nIdentix Ltd<\/a>
\nInsight Consulting<\/a>
\nJosephine Sammons Ltd<\/a>
\nKingston Communications plc.<\/a>
\nLambert Smith Hampton<\/a>
\nManpower<\/a>
\nMichael Page UK Ltd<\/a>
\nMinority Matters Recruitment<\/a>
\nMcCrindle Associates Ltd<\/a>
\nOCS
\nOfficeforce Ltd<\/a>
\nParity Training Ltd<\/a>
\nPartnerships UK<\/a>
\nPlain English Campaign<\/a>
\nPicnicBox<\/a>
\nProcurement Services Ltd<\/a>
\nQDOS Computer Consultants<\/a>
\nQ1 Consulting<\/a>
\nReed Accounting Personnel<\/a>
\nResource Analysts Ltd<\/a>
\nRNA Ltd<\/a>
\nRobert Walters
\nSecurity Services Group<\/a>
\nSGS UK Ltd<\/a>
\nSiemens Business Services<\/a>
\nSt. John’s Ambulance Services<\/a>
\nStep Ahead<\/a>
\nStreamline Financial Solutions<\/a>
\nTelelogic UK Ltd<\/a>
\nTK Cobley
\nThe Whelan Partnership<\/a>
\nThe Whitehall and Industry Group<\/a>
\nTurner and Townsend Project Management Ltd<\/a>
\nWhite Young<\/a>
\nYale Data Management Consultant Ltd<\/a><\/p>\n

[…]<\/p>\n

http:\/\/www.computerweekly.com\/<\/a><\/p><\/blockquote>\n

It doesn’t matter how many people they corrupt and who have signed NDAs. It is the people who are going to suffer at the hands of these companies who matter. It is their rights that are central to this, and despite what anyone says, the answer to all of this is ‘NO’ and HMG is wasting your money because in the end, this scheme will be dismantled<\/strong> if it ever goes into production.<\/p>\n

There are some other interesting aspects of this list; the potential points for leaks are high in number. It cannot be possible that every one of the thousands of people who are going to be working on this will keep quiet. We can expect some leaks, if anyone decent works in any of these companies.<\/p>\n

And finally, all the talk about open government (not that anyone with a single brain cell believed it) is further put to rest by everyone in this list being held under an NDA.<\/p>\n

If this ID card scheme is so secure, then, like peer reviewed<\/a> crypto (GPG etc) it should be possible for everyone to know how it works without compromising security. Security through obscurity<\/a> is no security at all<\/strong>.<\/p>\n

But you know this…<\/p>\n

And now you can read about why this scheme is doomed to failure:<\/p>\n

BBC’s File on 4 reveals defects in ID Cards scheme – with wide implications for government IT<\/strong><\/p>\n

Analysis\/comment<\/p>\n

A BBC Radio Four \u201cFile on 4\u201d programme on 31 July 2007 on ID cards gave a useful insight into how ministers approve a major new IT-based project, then leave the rest to committed civil servants who have no clear what they\u2019re supposed to be doing.<\/p>\n

The broadcast included an interview with Computer Weekly\u2019s news editor and several experts from the identity and IT community. It was apparent from the interviews that co-ordination and genuine accountability were lacking, or even absent, from the ID cards scheme, and that civil servants were trying to implement something indefinable that their leaders had decided to implement, nobody having a clear idea of the task that lay ahead.<\/p>\n

This was the government machine at its worst: working in secret, having meetings whose minutes were secret, keeping secret \u201cgateway\u201d reviews of the scheme, and nobody having to account to ministers, stakeholders, the public, Parliament or the public over any decisions taken or not taken.<\/p>\n

Carl Jung said that in all disorder there\u2019s a secret order. Not in the case of the ID cards scheme, I suspect. Listening to the experts interviewed by the BBC I began to visualise the ID cards scheme as clusters of arms convulsing on an empty floor, none of them attached to a torso.<\/p>\n

Peter Tomlinson an IT consultant and specialist in smart card technology told File on 4 he had attended government meetings where the ID card programme was discussed.<\/p>\n

He was puzzled when officials from the Home Office, which was the department in charge of ID cards, didn\u2019t appear to be present. \u201cThe meetings were called by people in the Cabinet Office. There were topics on the agenda that were set by people in the Cabinet Office and we kept on thinking: why are we not seeing people from the Home Office. Why are we not seeing technical people from the Home Office, or people involved in technical management? Eventually they began to come along but they never produced anyone who had any technical understanding of large-scale systems. We were just completely puzzled.\u201d<\/p>\n

File on 4\u2019s researcher asked Tomlinson what questions had been asked at the government meetings he\u2019d attended.<\/p>\n

\u201cOther government departments were asking the basic question: how will we use this system, and never getting an answer. No answer at all. ..It was my first real introduction to silo government. Individual government departments were completely independent of each other and now they were going to have to start working together. But they just did not start to do it.\u201d<\/p>\n

One of the government\u2019s business justifications for the ID card scheme is that departments will be able to link into the National Identity Register to verify that citizens are who they say they are. But File on 4 found that departments have not assessed the costs of providing systems or software upgrades that integrate with the register.<\/p>\n

Neil Fisher, vice president of identity management at Unisys, was also interviewed for the broadcast. Unisys is one of the companies that hope to join consortia bidding for ID scheme contracts.<\/p>\n

Fisher had been talking to the Home Office about other computer projects he was involved in. He believed that work on these projects should have fed into the identity scheme. He, too, criticised a lack of co-ordination. He said it was difficult to find out who was in charge.<\/p>\n

\u201cI think there has been a realisation, as they have gone through this, that there are a lot of projects, even within the Home Office, being run by awful lots of different and smaller divisions in perhaps immigration, in law enforcement, in passport, and in ID cards, all of whom have a sort of relationship which was ill-defined.<\/p>\n

\u201cSo [when I went] into a meeting invariably the wrong person from the wrong department would be there who could not speak for their colleagues in some other silo.\u201d<\/p>\n

He added that suppliers liked to talk to those who work within a well-organised chain of command. \u201cBut it just isn\u2019t like that. I am not giving away any secrets here. The Home Office is quite a difficult department to run. It is like a herd of cats and it\u2019s very difficult to herd cats as you know.\u201d<\/p>\n

Tomlinson said that as he sat listening to officials discussing the ID project at Cabinet Office meetings, he began to wonder whether it had really been thought through.<\/p>\n

\u201cWe were asking questions like: how does one government department that is not the Home Office connect up to the identity card system? Where are the specifications for the communications protocols? How does the equipment get to be security certified? There was no work going on any of these technical topics\u2026<\/p>\n

\u201cIf you are going to design a large-scale system like this you first go and look at the volumes of transactions that are going to take place, how often are they going to take place and then we would see roughly how big it was going to be. You can\u2019t specify a system unless you have these figures. There were about four of us who used to go to those meetings and we were all very puzzled. We said that this project is empty. It has no content.\u201d<\/p>\n

None of this can be blamed on James Hall, the affable, experienced, open and business-minded Chief Executive of the Identity and Passport Service. James Hall did not join the ID cards scheme until last October \u2013 three years after its inception; and in any case no individual civil servant, however deft his skills, can resolve the deep-rooted problems on the ID cards scheme which are arguably more to do with the anachronistic, cosy, closed-door culture of government than the action or inaction of any one person.<\/p>\n

Several times during the File on 4 programme, Hall ably defended the scheme saying that it would continue to evolve. But some of those listening to him could be forgiven for thinking that he was saying in essence: things are not clearly defined at the moment and we\u2019re at least partially reliant on suppliers defining things for us.<\/p>\n

It\u2019s the salesmen and consultants from suppliers that have pushed for ID cards; and so it will be, it seems, the technical people from some of the same companies that will be largely responsible for setting the specifications they will contracted to deliver against.<\/p>\n

Very odd.<\/p>\n

James Hall told the BBC\u2019s researchers: \u201cWe have published a plan laying out our approach to the national identity scheme last December. Since January we have been in continuous dialogue with the technology industry and we have taken on board some of their thinking about the shape of the scheme and that\u2019ll be reflected in procurement activity. And I have no doubt that once we into the procurement process we will continue to get innovation and good ideas from the market which will continue to refine our thinking about the precise details of how we deliver this.\u201d<\/p>\n

Martyn Thomas, a Fellow of the Royal Academy of Engineering and visiting professor of software engineering at Oxford University Computing Laboratory, said the requirements for the ID cards scheme \u201care still not being articulated\u201d.<\/p>\n

He added: \u201cWithout a very clear statement of what the requirements are it won\u2019t be possible to build a system that meets those requirements cost effectively.\u201d<\/p>\n

File on 4\u2019s programme was specific to ID cards, so it\u2019s easy to forget that there are much wider implications of the disclosures made in the broadcast. The civil servants we have met have been bright and committed. But it\u2019s not their fault if they work without clear tasks, without leadership and in secret \u2013 so mistakes and inefficiency are hidden.<\/p>\n

If the machinery of government is in such poor condition \u2013 and some parts of it seem to be \u2013 how can it be exploited for the purposes of huge, complex, risky, costly and ambitious IT-projects such as ID cards?<\/p>\n

[…]<\/p>\n

http:\/\/www.computerweekly.com\/<\/a><\/p><\/blockquote>\n

Tony Collins is really on the ball. Astonishing stuff.<\/p>\n","protected":false},"excerpt":{"rendered":"

ID cards – some of the main corporate beneficiaries so far Some in the IT industry are concerned about facets of the ID cards programme: the costs, the lack of a robust business case, and uncertainties over how well the technologies will work when applied to millions of people. But not everyone is complaining. Indeed […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[34,53,27],"tags":[],"_links":{"self":[{"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=\/wp\/v2\/posts\/787"}],"collection":[{"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=787"}],"version-history":[{"count":0,"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=\/wp\/v2\/posts\/787\/revisions"}],"wp:attachment":[{"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=787"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=787"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/irdial.com\/blogdial\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=787"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}