Commissioners' and Finance Risk and Audit Committee meeting minutes

Scott made this Official Information request to Waikato District Health Board

The request was refused by Waikato District Health Board.

From: Scott

Dear Waikato District Health Board,

I would like to make a request for copies of the minutes of all Commissioners' and Finance Risk and Audit Committee meetings, dated since the beginning of May.

Yours faithfully,

Scott

Link to this

From: Kylie Lewis
Waikato District Health Board

Hello Scott

Please take this email as confirmation that we have received your OIA.

Regards,

Kylie Lewis
Personal Assistant to:
Mark Cawthorne - Executive Director Finance, Procurement and Supply Chain
Mike Foley - Executive Director Digital Enablement
Neville Hablous - Company Secretary
P 07 839 8899 ext 97572 | m 021 228 9213 | e [email address]
Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200, Hamilton 3240

Waikato DHB vision: Healthy People. Excellent Care
Our values: People at heart - Te iwi ngakaunui | Give and earn respect - Whakamana | Listen to me talk to me - Whakarongo
| Fair play - Mauri Pai | Growing the good - Whakapakari | Stronger together - Kotahitanga

show quoted sections

Link to this

From: Kylie Lewis
Waikato District Health Board

Hello Scott,

 

As noted we have received your OIA request for the FYI site.

 

To enable us to respond to this request could we please request a scope
refinement to better target our response to your request.

Is there a  particular topic you are seeking the minutes on that we can
refine the scope to?

 

The request will then be collated and considered as per normal process.

 

I look forward to your response.

 

Regards,

 

Kylie Lewis

Personal Assistant to:

Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain

Mike Foley – Executive Director Digital Enablement

Neville Hablous – Company Secretary

P 07 839 8899 ext 97572 | m 021 228 9213 | e
[1][email address]

Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200,
Hamilton 3240

 

Waikato DHB vision: Healthy People. Excellent Care

Our values: People at heart - Te iwi ngakaunui | Give and earn respect -
Whakamana | Listen to me talk to me - Whakarongo

| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger
together – Kotahitanga

 

 

This electronic message, together with any attachments is confidential and
may be privileged. If you are not the intended recipient: 1.do not copy,
disclose or use the contents in any way. 2.please let me know by return
email immediately and then destroy the message. Waikato DHB is not
responsible for any changes made to this message and/or any attachments
after sending by Waikato DHB. Before opening or using attachments, check
them for viruses and effects. Waikato DHB takes no responsibility for
affected attachments. Click on link www.waikatodhb.health.nz/disclaimer to
view the company policy website. If you are not redirected to the company
policy website then copy and paste the URL into a new browser window.

References

Visible links
1. mailto:[email address]

Link to this

From: Scott

Hello Kylie,

Thank you for your follow up email. I was surprised to hear, though, that my request required refinement before Waikato DHB could answer it. The period of my request only covers 12 meetings.

However, if it helps speed up the process I would be willing to refine my request to be only for the parts of these minutes that deal with the topic of the Waikato DHB ransomware attack.

Depending on the response this refined request gets, I will decide if I need to make any follow up requests.

Yours sincerely,

Scott

Link to this

From: Scott

Hello Kylie,

I would just like to make an update on the refinement for this request that I sent through to you yesterday. I'd like my refined request to be for the parts of the requested meeting minutes that deal with the topics of

- The Waikato DHB ransomware attack and its aftermath
- Digital systems, digital investment and cybersecurity at Waikato DHB generally

When you're able, if you could please advise me that you have received this refined request that would be apreciated.

Yours sincerely,

Scott

Link to this

From: Kylie Lewis
Waikato District Health Board

Hello Scott,

This is to confirm I have received your email.

Regards,

Kylie Lewis
Personal Assistant to:
Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain
Mike Foley – Executive Director Digital Enablement
Neville Hablous – Company Secretary
P 07 839 8899 ext 97572 | m 021 228 9213 | e [email address]
Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200, Hamilton 3240

Waikato DHB vision: Healthy People. Excellent Care
Our values: People at heart - Te iwi ngakaunui | Give and earn respect - Whakamana | Listen to me talk to me - Whakarongo
| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger together – Kotahitanga

show quoted sections

Link to this

From: Kylie Lewis
Waikato District Health Board


Attachment 02 12 2021 OIA Response Scott.pdf
788K Download View as HTML

Attachment 02 12 2021 OIA Response Scott Appendix 1.pdf
320K Download View as HTML


Hello Scott,

 

Please find attached the response to your recent OIA to the Waikato DHB.

 

Regards,

 

Kylie Lewis

Personal Assistant to:

Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain

Mike Foley – Executive Director Digital Enablement

Neville Hablous – Company Secretary

P 07 839 8899 ext 97572 | m 021 228 9213 | e
[1][email address]

Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200,
Hamilton 3240

 

Waikato DHB vision: Healthy People. Excellent Care

Our values: People at heart - Te iwi ngakaunui | Give and earn respect -
Whakamana | Listen to me talk to me - Whakarongo

| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger
together – Kotahitanga

 

 

This electronic message, together with any attachments is confidential and
may be privileged. If you are not the intended recipient: 1.do not copy,
disclose or use the contents in any way. 2.please let me know by return
email immediately and then destroy the message. Waikato DHB is not
responsible for any changes made to this message and/or any attachments
after sending by Waikato DHB. Before opening or using attachments, check
them for viruses and effects. Waikato DHB takes no responsibility for
affected attachments. Click on link www.waikatodhb.health.nz/disclaimer to
view the company policy website. If you are not redirected to the company
policy website then copy and paste the URL into a new browser window.

References

Visible links
1. mailto:[email address]

Link to this

From: Scott

Dear Kylie Lewis,

Thank you for your reply. I would like to make a follow up request for copies of the following documents:

ONE: The minutes of the FRAC and Commissioner’s meetings scheduled to be held on 24 November.

TWO: The “Close Out” and “Lessons Learned” reports for the ransomware attack, mentioned on page 61 of your initial response: “…the close out report and lessons learned report would be submitted to the November informal Commissioner meeting for consideration.”

THREE: The June Chief Executive’s Report (23 June Commissioner’s meeting Item 4)

FOUR: The report titled “Governance Discussion and/or Decisions re Disaster Recovery and Cyber Security since 1 July 2018” (28 July FRAC meeting Item 10.1)

FIVE: The report titled “Programme Review – Recovery from Cyber Attack” (28 July FRAC meeting Item 10.3)

SIX: The report titled “Cyber Security Update and Future Plans” (28 July FRAC meeting Item 10.4)

SEVEN: The report titled “Cyber Incident: Legal and Regulatory Update” (28 July FRAC meeting Item 10.6)

EIGHT: The report titled “Cyber Security Update” (25 August FRAC meeting Item 10.1)

NINE: The report titled “Cyber Security Incident – Transition to Business as Usual and Lessons Learned” (22 September Commissioner’s meeting Item 6.2)

TEN: The report titled “Cyber Security Strategy” (27 October FRAC meeting Item 10.1)

ELEVEN: The report titled “Lessons Learned Update” (27 October FRAC meeting Item 10.4)

Yours sincerely,

Scott

Link to this

From: Kylie Lewis
Waikato District Health Board

Hello Scott,

I have logged your request as an OIA. Please note that the OIA closedown period has begun and the due date for this OIA is 24 January 2022.

Regards,

Kylie Lewis
Personal Assistant to:
Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain
Mike Foley – Executive Director Digital Enablement
Neville Hablous – Company Secretary
P 07 839 8899 ext 97572 | m 021 228 9213 | e [email address]
Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200, Hamilton 3240

Waikato DHB vision: Healthy People. Excellent Care
Our values: People at heart - Te iwi ngakaunui | Give and earn respect - Whakamana | Listen to me talk to me - Whakarongo
| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger together – Kotahitanga

show quoted sections

Link to this

From: Kylie Lewis
Waikato District Health Board


Attachment 24 01 22 OIA Response Scott.pdf
448K Download View as HTML


Hello Scott,

 

Please find attached the response from Waikato DHB in relation to your
recent request.

 

Regards,

 

Kylie Lewis

Personal Assistant to:

Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain

Mike Foley – Executive Director Digital Enablement

Neville Hablous – Company Secretary

P 07 839 8899 ext 97572 | m 021 228 9213 | e
[1][email address]

Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200,
Hamilton 3240

 

Waikato DHB vision: Healthy People. Excellent Care

Our values: People at heart - Te iwi ngakaunui | Give and earn respect -
Whakamana | Listen to me talk to me - Whakarongo

| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger
together – Kotahitanga

 

 

This electronic message, together with any attachments is confidential and
may be privileged. If you are not the intended recipient: 1.do not copy,
disclose or use the contents in any way. 2.please let me know by return
email immediately and then destroy the message. Waikato DHB is not
responsible for any changes made to this message and/or any attachments
after sending by Waikato DHB. Before opening or using attachments, check
them for viruses and effects. Waikato DHB takes no responsibility for
affected attachments. Click on link www.waikatodhb.health.nz/disclaimer to
view the company policy website. If you are not redirected to the company
policy website then copy and paste the URL into a new browser window.

References

Visible links
1. mailto:[email address]

Link to this

From: Scott

Dear Kylie Lewis,

I would like to make a follow up request. I would like to request:

ONE: On page 11 of your most recent release document, there is a reference to a Lessons Learned report action plan:

"...the recommendations from the Lessons Learned report will be prioritised and an action plan submitted to FRAC in December along with advice as to how future reporting is to occur both in regard to Lessons Learned and residual activity arising from the cyber security incident."

I would like to request copies of the action plan and advice referred to here.

TWO: I would like to request a copy of the 2018 Business Case "Windows 10 Upgrade" which is referred to on the Ministry of Health website, here:

https://www.health.govt.nz/our-work/digi...

Yours sincerely,

Scott

Link to this

From: Scott

Dear Kylie Lewis,

Just emailing to make sure my follow up request of 25 January has been recieved and is being actioned. Could I have an acknowledgement of receipt for this please?

Thank you,

Scott

Link to this

From: Kylie Lewis
Waikato District Health Board

Hello,

Sorry for my delayed response. This was received and I have logged this as an OIA.

This will be responded to in the allocated timeframe for an OIA.

Regards,

Kylie Lewis
Personal Assistant to:
Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain
Mike Foley – Executive Director Digital Enablement
Neville Hablous – Company Secretary
P 07 839 8899 ext 97572 | m 021 228 9213 | e [email address]
Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200, Hamilton 3240

Waikato DHB vision: Healthy People. Excellent Care
Our values: People at heart - Te iwi ngakaunui | Give and earn respect - Whakamana | Listen to me talk to me - Whakarongo
| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger together – Kotahitanga

show quoted sections

Link to this

From: Kylie Lewis
Waikato District Health Board


Attachment 24 02 22 OIA Response Scott.pdf
10.0M Download View as HTML


Hello Scott,

 

Please find attached the response from the Waikato DHB in relation to your
request.

 

Regards,

 

Kylie Lewis

Personal Assistant to:

Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain

Mike Foley – Executive Director Digital Enablement

Neville Hablous – Company Secretary

P 07 839 8899 ext 97572 | m 021 228 9213 | e
[1][email address]

Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200,
Hamilton 3240

 

Waikato DHB vision: Healthy People. Excellent Care

Our values: People at heart - Te iwi ngakaunui | Give and earn respect -
Whakamana | Listen to me talk to me - Whakarongo

| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger
together – Kotahitanga

 

 

This electronic message, together with any attachments is confidential and
may be privileged. If you are not the intended recipient: 1.do not copy,
disclose or use the contents in any way. 2.please let me know by return
email immediately and then destroy the message. Waikato DHB is not
responsible for any changes made to this message and/or any attachments
after sending by Waikato DHB. Before opening or using attachments, check
them for viruses and effects. Waikato DHB takes no responsibility for
affected attachments. Click on link www.waikatodhb.health.nz/disclaimer to
view the company policy website. If you are not redirected to the company
policy website then copy and paste the URL into a new browser window.

References

Visible links
1. mailto:[email address]

Link to this

From: Scott

Dear Waikato District Health Board,

I would like to make a request for copies of the minutes of all Commissioners' and Finance Risk and Audit Committee meetings, dated since the beginning of December 2021. Specifically, the sections of these minutes that deal with the topics of:

- The Waikato DHB ransomware attack and its aftermath
- Digital systems, digital investment and cybersecurity at Waikato DHB generally

Yours faithfully,

Scott

Link to this

From: Kylie Lewis
Waikato District Health Board

Hello,

This email is to confirm we have received your OIA request as noted below.
We will respond to you in the allocated timeframe.

Regards,

Kylie Lewis
Personal Assistant to:
Mark Cawthorne - Executive Director Finance, Procurement and Supply Chain
Garry Johnston - Executive Director Digital Enablement
Neville Hablous - Company Secretary
P 07 839 8899 ext 97572 | m 021 228 9213 | e [email address]
Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200, Hamilton 3240

Waikato DHB vision: Healthy People. Excellent Care
Our values: People at heart - Te iwi ngakaunui | Give and earn respect - Whakamana | Listen to me talk to me - Whakarongo
| Fair play - Mauri Pai | Growing the good - Whakapakari | Stronger together - Kotahitanga

show quoted sections

Link to this

From: Kylie Lewis
Waikato District Health Board


Attachment 02 06 22 OIA Response to Scott Miller.pdf
477K Download View as HTML


Hello Scott,

 

Please find attached a letter to you in regards to our response to you on
24 January.  This letter also covers your recent request made to us on 17
May.

 

Regards,

 

Kylie Lewis

Personal Assistant to:

Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain

Garry Johnston – Acting Executive Director Digital Enablement

Neville Hablous – Company Secretary

P 07 839 8899 ext 97572 | m 021 228 9213 | e
[1][email address]

Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200,
Hamilton 3240

 

Waikato DHB vision: Healthy People. Excellent Care

Our values: People at heart - Te iwi ngakaunui | Give and earn respect -
Whakamana | Listen to me talk to me - Whakarongo

| Fair play - Mauri Pai | Growing the good – Whakapakari | Stronger
together – Kotahitanga

 

 

This electronic message, together with any attachments is confidential and
may be privileged. If you are not the intended recipient: 1.do not copy,
disclose or use the contents in any way. 2.please let me know by return
email immediately and then destroy the message. Waikato DHB is not
responsible for any changes made to this message and/or any attachments
after sending by Waikato DHB. Before opening or using attachments, check
them for viruses and effects. Waikato DHB takes no responsibility for
affected attachments. Click on link www.waikatodhb.health.nz/disclaimer to
view the company policy website. If you are not redirected to the company
policy website then copy and paste the URL into a new browser window.

References

Visible links
1. mailto:[email address]

Link to this

From: Kylie Lewis
Waikato District Health Board


Attachment image002.jpg
4K Download

Attachment 12 07 22 Response to Scott Miller.pdf
248K Download View as HTML


Hello Scott,

 

Please find attached a response to your recent OIA requests.

 

Regards,

 

Kylie Lewis

Personal Assistant to:

Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain

Garry Johnston – Acting Executive Director Digital Enablement

Neville Hablous – Company Secretary

Waikato

waea pûkoro: +07 839 8899 ext 97572  +64 21 228 9213 | îmçra:
[email address]

Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200,
Hamilton 3240

Te Whatu Ora – Health New Zealand

TeWhatuOra.govt.nz

 

This electronic message, together with any attachments is confidential and
may be privileged. If you are not the intended recipient: 1.do not copy,
disclose or use the contents in any way. 2.please let me know by return
email immediately and then destroy the message. Waikato DHB is not
responsible for any changes made to this message and/or any attachments
after sending by Waikato DHB. Before opening or using attachments, check
them for viruses and effects. Waikato DHB takes no responsibility for
affected attachments. Click on link www.waikatodhb.health.nz/disclaimer to
view the company policy website. If you are not redirected to the company
policy website then copy and paste the URL into a new browser window.

Link to this

From: Scott

Dear Te Whatu Ora - Health New Zealand Waikato District,

I'm looking to follow up on this request, which on 12 July you advised me you had hoped would be completed within an extra 10 working days past the extended due date (by 26 July).

Could you please let me know when I can expect your response?

Yours sincerely,

Scott

Link to this

From: Kylie Lewis
Waikato District Health Board


Attachment image003.jpg
4K Download

Attachment 28 07 22 OIA Response to Scott Miller.pdf
261K Download View as HTML


Kia ora Scott,

 

Please find attached the response to your recent OIA requests relating to
Commissioner and FRAC meeting minutes on Cyber Security.

 

Regards,

 

Kylie Lewis

Personal Assistant to:

Mark Cawthorne – Executive Director Finance, Procurement and Supply Chain

Garry Johnston – Acting Executive Director Digital Enablement

Neville Hablous – Company Secretary

Waikato

waea pûkoro: +07 839 8899 ext 97572  +64 21 228 9213 | îmçra:
[email address]

Level 3, Hockin Building, Waikato Hospital Campus | Private Bag 3200,
Hamilton 3240

Te Whatu Ora – Health New Zealand

TeWhatuOra.govt.nz

 

This electronic message, together with any attachments is confidential and
may be privileged. If you are not the intended recipient: 1.do not copy,
disclose or use the contents in any way. 2.please let me know by return
email immediately and then destroy the message. Waikato DHB is not
responsible for any changes made to this message and/or any attachments
after sending by Waikato DHB. Before opening or using attachments, check
them for viruses and effects. Waikato DHB takes no responsibility for
affected attachments. Click on link www.waikatodhb.health.nz/disclaimer to
view the company policy website. If you are not redirected to the company
policy website then copy and paste the URL into a new browser window.

Link to this

From: Scott

Dear Kylie Lewis,

Thank you for this response. As you will be aware, I have already made a complaint to the Ombudsman for his office to review your decision to withhold the 9 items I requested on 7 December. Your letter doesn't satisfy me that the concerns you raise require a blanket refusal and I'd like to see the complaint through.

I would also note that Minister Little has stated his intention to have InPhySec's independent review of the incident made public, as well as the briefings he has received on the topic. You can see this in a letter sent to me by his office, here:

https://fyi.org.nz/request/19608/respons...

Given that these documents will cover some of the same information you have withheld I think this is further evidence that the blanket refusal approach Waikato has taken is not justified under the OIA.

On point two of your letter, I'm not sure I understand why you have decided to withhold the Commissioner's and FRAC meeting minutes dated since December, given that you released these minutes to me on 2 December and 25 January in response to my earlier requests. Is there a particular reason why the minutes dated prior to December were released, but the ones since then cannot be?

Yours sincerely,

Scott

Link to this

Things to do with this request

Anyone:
Waikato District Health Board only: