Windows XP support deal not renewed by UK government, leaves PCs open to attack

[Arthur]

How much longer are they going to take to migrate away from XP?

 

Source: V3

 

The government has not renewed its £5.5m Windows XP support deal with Microsoft despite thousands of computers across Whitehall still running the ancient software, leaving them wide open to cyber attacks. The contract was negotiated last year between Microsoft and the Crown Commercial Service (CCS), which is part of the Cabinet Office, to provide one year’s additional support after the general support deadline for XP expired. The CCS made it plain at the time that it would not renew the deal, and urged all departments to ensure that they migrated in time.

 

“It is important to note that there are no plans to negotiate a further national extension of XP support beyond April 2015," the CCS said in a letter to departments. "It is therefore essential that all NHS organisations put in place robust plans to migrate away from Windows XP, Office 2003 and Exchange 2003 by that date."

 

This contract expired on 14 April and sources have told V3 that it has not been renewed. However, this is despite the fact that many government departments are still in the process of migrating, the source said, indicating that many government computers are still running Windows XP and risking the inherent security threats.

 

V3 contacted the Cabinet Office for comment but was told that it is not able to comment on the situation as the government is currently in purdah in the run-up to the General Election. The Department of Health had not responded. Microsoft issued a statement to V3, seemingly confirming that the deal had come to an end, although using the future tense.

 

“On 14 April 2015 the UK Crown Custom Support Agreement for Windows XP, Office 2003 and Exchange 2003 will expire and will not be renewed for a second year,” the firm said. “Consequently, support will no longer be offered for Windows XP, Office 2003 and Exchange 2003, all of which are well over a decade old and reached end of support on 8 April 2014.” However, this is not to say that Microsoft will not offer more custom support deals, and the company said that this is an option for any department still struggling to migrate. “Individual government departments and agencies are also able to purchase extended support as they see fit,” the statement continued.

 

This Metropolitan Police Service (MPS) is currently negotiating a support deal after it was revealed that the organisation still has 35,000 laptops and desktops running XP. "Since Windows XP support will still be required the MPS has requested a direct option with Microsoft to continue a Custom Support Agreement for Windows XP for the next 12 months," the force told V3. "This is currently being negotiated directly with Microsoft."

 

UK security industry veteran Graham Cluley told V3 that the situation is “disturbing” and suggests that the UK rates security as a low priority. “It's disturbing that the UK government's ‘last chance saloon’ for XP support appears to have run dry,” he said. “The failure by government to move on from Windows XP shows a troubling lack of regard for security.” Cluley added that the government was well briefed on the need to migrate but had clearly not done the necessary work. “We've known since 2007 that Microsoft was going to drop support for XP in 2014, so why did the government fail to achieve what every other business and home user is expected to do?" he said. “And given an extra year's grace, they still haven't moved on. Every day that passes with government computers still running XP seems to me to increase the risk.”

 

The UK government is not alone in running Windows XP despite the security deadline passing. Recent data showed that there are still millions of machines running the ancient platform. Microsoft will be hoping that the launch of Windows 10 entices people to finally ditch XP and move to a newer operating system.

[FN-GM]

What on earth are the government doing?

 

I find it interesting that a PSN requirement is to have all computers running a supported OS, the cabinet office does not practise what they preach.