Devices
Case reference FOI2026/01395
Received 24 August 2026
Published 1 September 2026
Request
Definitions "Device" — an end-user computer in active use by your own staff, officers and elected or appointed members in delivering your organisation's services: desktops, laptops, tablets and thin clients. Include devices used in frontline and public-facing services you run directly. Include devices used by your staff but managed on your behalf by a third party, shared service or managed service provider. Under s.3(2)(b) FOIA, information held by another person on your behalf is held by you. Exclude servers, mobile phones, medical devices, operational technology, and any device in storage or awaiting disposal. Exclude devices used by schools and academies, whether or not you provide their IT support. If fire and rescue services are delivered within your organisation, please include them and confirm this below. "Unsupported" — the operating system has passed its vendor end-of-support date. Count a device as unsupported even if you hold Extended Security Updates for it. Windows 10 reached end of support on 14 October 2025 and counts as unsupported for the purposes of this request.
*QUESTIONS* 1) How many devices in total? 2) How many of those devices are unsupported? 3) Please break the Q2 figure down by operating system. 4) Have you purchased Microsoft Extended Security Updates for Windows 10? If yes, how many devices are covered? 5) How much have you paid, or contracted to pay, for Year 1 ESU coverage (15 October 2025 to 13 October 2026), excluding VAT? 6) By what date do you expect all devices to be running a supported operating system? If no date has been set, please say so — that is a valid answer. 7) Please link to any report or paper addressing Windows 10 end of support or operating system migration considered in the public part of a board, committee, authority or panel meeting since 1 January 2025.
Response
1) How many devices in total?
We are unable to provide you with this information under section 31(1) (a) of the FOI Act, which exempts information if its disclosure is likely to prejudice the prevention or detection of crime.
Section 31 is a qualified exemption, and we are required to conduct a public interest test when applying any qualified exemption. This means that after it has been decided that the exemption is engaged, the public interest in releasing the information must be considered. If the public interest in disclosing the information outweighs the public interest in withholding it then the exemption does not apply, and the information must be released. In the FOI Act there is a presumption that information should be released unless there are compelling reasons to withhold it.
The public interest has now been concluded, and the balance of the public interest has been found to fall in favour of withholding information covered by the section 31(1) (a) exemption.
Considerations in favour of the release of the information included the principle that there is a public interest in transparency and accountability in disclosing information held by public sector organisations, including but not limited to, allowing public scrutiny and to demonstrate that public funds are being used in an efficient and effective way and the assets are correctly managed.
However, release of this information would make the Council more vulnerable to crime. The crime in question would be both theft, and a malicious attack on Council's computer systems and infrastructure. As such, release of this information would be seen to prejudice the prevention or detection of crime by making Council's premises and computer systems more vulnerable to an attack therefore facilitating the possibility of a criminal offence being carried out.
In conclusion, there is a public interest in keeping computer systems and infrastructure secure, which would be served by non-disclosure. It has therefore been decided that the balance of the public interest lies in favour of withholding the material on this occasion.
2) How many of those devices are unsupported?
None
3) Please break the Q2 figure down by operating system.
We are unable to provide you with this information under section 31(1) (a) of the FOI Act, which exempts information if its disclosure is likely to prejudice the prevention or detection of crime.
Section 31 is a qualified exemption, and we are required to conduct a public interest test when applying any qualified exemption. This means that after it has been decided that the exemption is engaged, the public interest in releasing the information must be considered. If the public interest in disclosing the information outweighs the public interest in withholding it then the exemption does not apply, and the information must be released. In the FOI Act there is a presumption that information should be released unless there are compelling reasons to withhold it.
The public interest has now been concluded, and the balance of the public interest has been found to fall in favour of withholding information covered by the section 31(1) (a) exemption.
Considerations in favour of the release of the information included the principle that there is a public interest in transparency and accountability in disclosing information held by public sector organisations, including but not limited to, allowing public scrutiny and to demonstrate that public funds are being used in an efficient and effective way and the assets are correctly managed.
However, release of this information would make the Council more vulnerable to crime. The crime in question would be both theft, and a malicious attack on Council's computer systems and infrastructure. As such, release of this information would be seen to prejudice the prevention or detection of crime by making Council's premises and computer systems more vulnerable to an attack therefore facilitating the possibility of a criminal offence being carried out.
In conclusion, there is a public interest in keeping computer systems and infrastructure secure, which would be served by non-disclosure. It has therefore been decided that the balance of the public interest lies in favour of withholding the material on this occasion.
4) Have you purchased Microsoft Extended Security Updates for Windows 10? No If yes, how many devices are covered?
N/A
5) How much have you paid, or contracted to pay, for Year 1 ESU coverage (15 October 2025 to 13 October 2026), excluding VAT?
None
6) By what date do you expect all devices to be running a supported operating system? If no date has been set, please say so — that is a valid answer.
All devices are on a supported operating system.
7) Please link to any report or paper addressing Windows 10 end of support or operating system migration considered in the public part of a board, committee, authority or panel meeting since 1 January 2025.
N/A
Documents
This is Tunbridge Wells Borough Council's response to a freedom of information (FOI) or environmental information regulations (EIR) request.