UKGC IT Infrastructure Revealed in FOI

Article Content

A Freedom of Information (FOI) disclosure has provided a detailed look into the IT infrastructure that underpins the UK Gambling Commission (UKGC). The response, published following a request dated 25 April 2024, reveals the regulator's heavy reliance on Microsoft's cloud ecosystem for its communications, data storage, and core applications.

Why This Matters

As the regulator for the UK's gambling industry, the UKGC handles vast quantities of sensitive information. This includes data on licensed operators, ongoing investigations, financial details, and correspondence related to compliance and enforcement. The security, resilience, and efficiency of its IT systems are therefore critical to its ability to function effectively and protect the integrity of the data it holds. This disclosure offers consumers and the industry a rare, transparent view of the technological backbone of the UK's gambling regulator.

Key Findings from the Disclosure

The FOI response provides specific details across telephony, software, and data storage.

Communications and Collaboration

The Commission confirmed it uses a modern, unified communications setup:

• Telephony System: Microsoft Teams telephony is used for primary communications, integrated with an EICC contact centre and QMS for call recording.
• Maintenance: The system is maintained by Koris 365 Ltd, with the current contract renewal date set for 31 March 2026.
• Collaboration: Microsoft Teams is the sole Unified Communications tool listed.

This indicates a move away from traditional phone lines to an integrated, software-based system, which is common in modern organisations seeking efficiency and remote work capabilities.

Software and Data Hosting

The UKGC is deeply integrated into the Microsoft ecosystem, opting for a high-tier service package:

• Microsoft Licence: The regulator uses the M365 E5 licence. This is a premium-tier subscription that includes advanced security, compliance, and analytics tools, suggesting a strong focus on data protection.
• Hosting Environment: The UKGC operates a hybrid model, using a mix of on-premise infrastructure and cloud services. Its cloud applications are hosted by vendors or within the Microsoft Azure platform.
• Partner: The reseller for its Microsoft services is Insight.

Data Storage and Backup

Data management is primarily cloud-based, with significant investment in resilience:

• Cloud Storage: The main provider is SharePoint, which is included in the M365 licence cost. Additional cloud storage on Azure costs the Commission approximately £850 per month, or £10,200 annually.
• On-Premise Hardware: While primarily cloud-focused, the UKGC still maintains some on-premise hardware from HP (servers) and Cisco (Wi-Fi).
• Data Backup: The Commission employs a robust backup strategy, using both Azure (Microsoft's native cloud backup) and Rubrik, a third-party enterprise service known for data security and ransomware recovery.

Significance for the Industry

This disclosure demonstrates that the UKGC is operating a modern, cloud-centric IT strategy with a clear emphasis on security. The use of the M365 E5 licence and dual backup solutions like Azure and Rubrik highlights the priority placed on protecting the sensitive regulatory and commercial data under its control.

The specified contract renewal date of 31 March 2026 for its telephony system also provides a clear timeline for future procurement, a key detail for technology vendors in the public sector space. Ultimately, the full disclosure offers valuable public assurance that the regulator is investing in contemporary and secure technology to carry out its statutory duties.