On a program of this scale, I have considered that risk and put plans and contracts in place, which have been reviewed by OGC and the NAO.

BBC

The Washington Post has since reported that at some point, the Office of General Counsel (OGC) at FDA became involved and authorized the computer surveillance.

FORBES: FDA SpyGate -- New Revelations Challenge The New York Times Investigation of Agency "Enemies List," Raise More Questions About the 'Government's Most Dysfunctional Agency'

We have contracts in place with our suppliers, which you mention Sir Peter Gershon have been adopted by the OGC as the gold standard for securing the delivery of IT service and are going to be rolled out across the rest of the public sector.

BBC