The Horizon Scandal as Socio-Technical Failure: A Systematic Analysis Through Cyber Security and Digital Forensics Frameworks

The Post Office Horizon scandal represents one of the most severe miscarriages of justice in modern British legal history, rooted in the deployment of a defective IT system and the institutional suppression of evidence that exposed its unreliability. This paper provides a systematic analysis of the scandal through the combined lenses of cyber security, digital forensics, and IT governance, drawing directly on the Post Office Horizon Public Inquiry dataset—including witness testimony, technical documentation, audit records, and internal communications spanning more than two decades. While many of the technical and procedural failures discussed have been documented in prior scholarship, the paper’s principal contribution is the systematic mapping of those failures against recognised governance frameworks, and the Legally-Accountable Digital Systems (LADS) proposal this mapping motivates. We identify and analyse five interconnected failure categories: software defects and poor system design; deficient patch governance; inadequate audit logging and compromised evidence integrity; investigative failures and prosecutorial conflict of interest; and a systemic absence of technical expertise and independent oversight. Each category is mapped against nine governance framework documents, including ISO/IEC 27001, NIST SP 800-53 Rev. 5, NIST SP 800-218 (SSDF), COBIT 2019, ISO/IEC 27035, NIST SP 800-61, and ISO/IEC 27036, with ISO/IEC 27037 applied additionally to evidential handling failures and NIST SP 800-92 to log management failures. A counterfactual analysis indicates that compliance with these frameworks could plausibly have detected, exposed, or substantially reduced most of the documented failures, though this claim is necessarily inferential and conditional on good-faith implementation. The scandal was therefore not caused primarily by the absence of adequate frameworks, but by their wholesale non-application and by institutional incentives, examined later in the paper, that can undermine even fully compliant controls. However, the analysis also surfaces a governance gap that no existing framework addresses: the institutional failure mode in which the organisation responsible for system integrity holds active incentives to suppress evidence of failure rather than remediate it. To address this gap, we propose the concept of Legally-Accountable Digital Systems (LADS) — a governance category for systems whose outputs are used as evidence in legal proceedings — and outline three supplementary pillars: technical independence, institutional independence, and forensic admissibility governance. We draw a parallel with the Sarbanes-Oxley Act of 2002, arguing that the Horizon Inquiry dataset provides an equivalent empirical foundation for statutory reform of digital evidence governance. Finally, we outline the substantial research opportunities the Inquiry dataset presents across IT systems analysis, cyber security, forensic accounting, social network analysis, and legal informatics — a resource comparable in significance to the Enron materials that shaped a generation of corporate governance reform.