Key Takeaways
- A rapid review of police information security (Infosec) controls was initiated following the conviction of former Deputy Police Commissioner McSkimming for possessing child sexual exploitation and bestiality material, including on work devices.
- Investigations conducted by the National Integrity Unit have examined 22 related cases, with 12 resolved through disciplinary action or performance management processes.
- Four individuals have resigned during the course of these investigations, and three police staff members remain stood down from duties while three separate investigations are still ongoing.
- The lead investigator, Anderson, acknowledged the professionalism and commitment of the National Integrity Unit team, particularly highlighting their analysis of a significant volume of web activity as part of the inquiry.
- Anderson emphasized that further details cannot be shared at this stage to allow matters to progress through the formal court process, which imposes limitations on public information disclosure.
Context of the Initial Investigation Triggering the Review
The current situation stems directly from the legal proceedings against former Deputy Police Commissioner McSkimming, who held his senior role from 2020 until his resignation last year. McSkimming was subsequently convicted on serious charges related to possessing child sexual exploitation material and bestiality content. Critically, the investigation revealed that some of this illegal material was accessed or stored on his official police work devices. This discovery raised immediate and significant concerns about potential breaches of internal police protocols, specifically regarding information security (Infosec) controls and the monitoring of staff usage of force resources. The severity of the offenses, combined with the involvement of a high-ranking official using work equipment for such illicit purposes, prompted police leadership to order an urgent, comprehensive examination of existing safeguards. This was not merely a review of McSkimming’s individual actions but a systemic look at whether weaknesses in Infosec infrastructure, policies, or oversight allowed such behavior to occur or go undetected, necessitating the "rapid review" explicitly mentioned in the official statements.
Scope and Focus of the Rapid Infosec Review
The "rapid review" launched in response to the McSkimming case was specifically designed to scrutinize the police force’s information security framework. Its primary objectives included evaluating the effectiveness of technical controls (such as firewalls, access logs, endpoint monitoring, and data loss prevention systems), assessing the adequacy and enforcement of policies governing device and internet usage, reviewing audit trails and incident response procedures, and examining staff training and awareness programs related to cybersecurity and appropriate resource use. A critical component of this review, as highlighted by Anderson, involved the detailed analysis of a substantial volume of web activity data. This entailed examining logs, browsing histories, download records, and other digital footprints across police networks and devices to identify any patterns of misuse, policy violations, or potential security threats that might indicate broader issues beyond the initial McSkimming case. The depth of this web activity analysis underscores the seriousness with which the force approached the review, aiming to uncover any latent vulnerabilities or misconduct that could compromise operational integrity or public trust.
Breakdown of Investigated Cases and Outcomes
As a direct outcome of the rapid Infosec review and associated integrity inquiries, police have formally investigated a total of 22 distinct cases linked to concerns over information security breaches, inappropriate use of work devices, or related misconduct. Anderson provided a clear breakdown of the current status of these investigations. Significantly, 12 of these 22 cases have already reached a conclusion through internal processes. These resolutions were achieved either via formal disciplinary action (which could range from warnings and demotions to dismissal, depending on the severity and nature of the findings) or through performance management procedures (which might involve retraining, increased supervision, or formal performance improvement plans aimed at correcting behavior without necessarily invoking the harshest disciplinary measures). This indicates that for over half of the cases examined, the force has determined sufficient evidence existed to warrant internal corrective action, demonstrating the review’s effectiveness in identifying and addressing specific instances of policy non-compliance or misconduct.
Personnel Actions: Resignations and Stand-Downs
Concurrent with the resolution of cases, the investigation process has led to notable personnel changes. Anderson confirmed that four individuals have resigned from their positions within the police force during the course of these ongoing investigations and reviews. While the specific roles or ranks of these resigning individuals were not detailed in the provided statement, their departure during an active integrity process suggests they may have been subjects of inquiry or chosen to leave amid scrutiny. Furthermore, three police staff members remain explicitly stood down from their duties as a direct result of the investigations. Being "stood down" typically means they are relieved of their operational responsibilities, often placed on administrative leave, while the investigations into their specific conduct or potential involvement continue. This status is a serious interim measure, indicating that the allegations against these three individuals are considered sufficiently significant to warrant removing them from active duty pending the outcome of the inquiry, reflecting the force’s commitment to maintaining integrity during the investigative process.
Ongoing Investigations and the National Integrity Unit’s Role
Despite the progress made in resolving 12 cases, Anderson clarified that three investigations remain active and ongoing as part of the rapid review initiative. These ongoing inquiries likely represent the more complex or serious allegations uncovered during the initial web activity analysis and case assessments, requiring deeper forensic examination, witness interviews, or coordination with other oversight bodies before conclusions can be reached. The fact that these investigations are being conducted by the National Integrity Unit (NIU) is significant. The NIU is a specialized internal division tasked with investigating serious allegations of misconduct, corruption, or breaches of discipline within the police force itself. Anderson’s explicit acknowledgment of the “professionalism and commitment” demonstrated by the NIU investigators serves to validate the rigor and credibility of their work. This praise is particularly important given the sensitive nature of investigating one’s own colleagues and underscores that the force views the NIU’s efforts as thorough, impartial, and conducted to the highest standards expected of such a critical internal oversight function.
Limitations on Information Sharing Due to Court Process
Anderson concluded his remarks with a crucial caveat regarding the current limitations on what information can be publicly disclosed. He stressed that it is now imperative to allow the matters under investigation to progress to the formal court process. This statement implies that some of the ongoing NIU inquiries, or potentially the outcomes of resolved cases that may still face external scrutiny or appeal, are either headed for or currently involved in judicial proceedings. Anderson explicitly noted that this progression through the court system “limits the level of information we can provide at this point.” This is a standard and necessary constraint in any legal context; premature or detailed public disclosure of evidence, investigative techniques, or suspect information could jeopardize the fairness of trials, prejudice potential jurors, compromise ongoing police operations, or violate legal privileges and privacy rights. By emphasizing this limitation, Anderson is managing public expectations for transparency while upholding the fundamental principle that legal processes must be allowed to run their course without undue external interference or prejudicial commentary, balancing accountability with the integrity of the justice system. The focus, for now, shifts to letting the judiciary handle the next phases of these serious matters.