Cyber Security Training - Find a freedom of information request

1. For each of the last five financial years, including the present financial year (regardless of completion), please would you provide available data on the:

• Gross training expenditure on all county council employees.
• Gross expenditure spent on cyber security training and awareness programmes for all county council employees.
• Number - and if recorded, the type - of cyber and non-cyber data breaches reported to the Information Commissioner’s Office (ICO).
• Number - and if recorded, the type - of personal data related ‘incidents’.

Notes for clarification:

• By ‘incident’, I mean cases when sensitive information is threatened, but not necessarily compromised. Incidents may not be reported to the ICO.
• By ‘type’, I mean the nature of a security breach or incident. Examples of type might be ‘malware’, ‘phishing’, ‘misconfigured software/hardware’, ‘data emailed to incorrect recipient’ or ‘verbal disclosure of sensitive information’.

In your response, please would you also confirm the dates of your financial year.

1. Lincolnshire County Council do not hold this information centrally as the budgets for training are delegated to individual service areas

With regard to cyber security training – this is an e learning course which was developed as part of a suite of on-line training and LCC do not have a specific cost for this