We don't know whether the most recent response to this request contains information or not – if you are Jeffrey Thomas please sign in and let everyone know.

Cyber Security Awareness

We're waiting for Jeffrey Thomas to read recent responses and update the status.

Dear Hull City Council,

Under the Freedom of Information Act, could you please provide me with answers to the following questions.

1) Do you conduct any form of cyber security awareness training with your employees who have access to a computer?

2) Do you conduct simulated phishing campaigns with your employees to raise awareness and measure susceptibility of clicking on a malicious link?

3) Do you have any mandatory cyber security learning packages for your newly appointed employees?

4) Do you provide cyber security awareness to your employees in a face to face situation?

5) Do you do any other form of cyber awareness training for your employees that has not been covered by the previous quesitons?

6) Can you provide an organisational structure of your ICT, Information Governance and Cyber Security Teams?

7) How many employees do you have dedciated to the role of ICT / Cyber Security?

8) How many employees do you have dedicated to the role of ICT training?

9) Do you use ICT trainers to educate users in cyber security?

Yours faithfully,

Jeffrey Thomas

Information Governance, Hull City Council

We acknowledge receipt of your request for information which we will
process in accordance with the appropriate legislation below:

Freedom of Information Act
This covers general recorded information that is held by the Council.
Examples: budget information, staff structures, details of contracts etc

From the next working day that the request is received we have 20 working
days to respond. This does not take in to account any clarification we may
require or if we need to consider the Public Interest Test which allows us
up to a maximum of 20 additional working days.

Environmental Information Regulation
This covers all environmental information held by the Council.
Examples: Planning Applications, details of proposed road works, flood
information, pollution information etc.

From the next working day that the request is received we have 20 working
days to respond.

Section 7 of the Data Protection Act (Subject Access Request)
This section of the Data Protection legislation only relates to requests
for information about the requester or a client if you are acting on their
behalf.
Examples: Personnel file, Housing file, Council Tax/Housing Benefit
information etc.

We have 40 days from the date of receipt to respond.

Information Governance Team
Town Clerk's Service
Hull City Council
The Guildhall

 

Information Governance, Hull City Council

Dear Mr Thomas

 

Freedom of Information Act 2000 – Information Request - 002103/19

 

With regard to your Freedom of Information request received on 10/10/2019,
please find our response below. 

 

1) Do you conduct any form of cyber security awareness training with your
employees who have access to a computer?

 

All staff have to complete a data protection quiz on an annual basis. This
contains some IT security questions such as what to do when you receive
emails from an unknown source. We have a quarterly information security
bulletin which goes to all e-enabled staff and this contains reminders
about information security compliance – the topics chosen are usually
related to information security incidents which have occurred in the
previous months. These can consist of cyber security messages, for example
warnings about phishing emails.

 

2) Do you conduct simulated phishing campaigns with your employees to
raise awareness and measure susceptibility of clicking on a malicious
link?

 

Not at present but we are looking at implementing this in the near future.

 

3) Do you have any mandatory cyber security learning packages for your
newly appointed employees?

 

Yes, this is incorporated into our annual data protection e-learning
package.

 

4) Do you provide cyber security awareness to your employees in a face to
face situation?

 

Yes, our face to face data protection training covers elements of cyber
security.

 

5) Do you do any other form of cyber awareness training for your employees
that has not been covered by the previous questions?

 

No.

 

6) Can you provide an organisational structure of your ICT, Information
Governance and Cyber Security Teams?

 

Cyber Security is managed by a team within ICT. Information Governance is
a separate team which come under the Town Clerks Service; legal &
democratic services also form part of this service.

 

The head of ICT reports to the Director of Finance & Transformation. The
Head of the Town Clerks Service is the Town Clerk, also known as the
Director of Legal Services & Partnerships.

 

The Cyber Security Team work closely with the Information Governance Team
and both attend a monthly Information Governance Group meeting which is
chaired by the Town Clerk.

 

7) How many employees do you have dedicated to the role of ICT / Cyber
Security?

 

2

 

8) How many employees do you have dedicated to the role of ICT training?

 

2

 

9) Do you use ICT trainers to educate users in cyber security?

 

Yes

 

 

We hope that you will be satisfied with our response and should you
require any further information then please do not hesitate to contact
us. 

 

Should you wish to complain about our response in any way this must
initially be done by e-mailing [1][Hull City Council request email] or by
contacting us at The Information Governance Team, The Guildhall, Alfred
Gelder Street, Hull, HU1 2AA.

 

If you are not satisfied with the outcome of the internal review then you
may take your complaint to the Information Commissioner’s Office, the
government body established to enforce the legislation.

 

Information Commissioner’s Office

Wycliffe House Water Lane,

Wilmslow,

Cheshire,

SK9 5AF

 

Web site: [2]https://ico.org.uk

Report a concern: [3]https://ico.org.uk/concerns/

Email: [4][email address]

Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

 

ICO states that any emails you choose to send to them, or that they send
to you, are not secure as email messages can be intercepted.

ICO asks that you include a contact telephone number on any emails you
send to them. 

 

This information may be subject to copyright. The Freedom of Information
Act does not give you an automatic right to re-use this information in a
way that would infringe copyright, for example, by publishing it or
distributing copies.  You are free to use it for your own purposes
including any non-commercial research or private study or for the purposes
of news reporting.

If you wish to re-use this information and this was not specified in your
initial application please contact us to discuss conditions for re-use. In
most cases we will permit use and re-use in accordance with The Open
Government Licence which can be found at
[5]www.nationalarchives.gov.uk/doc/open-government-licence

 

 

Yours sincerely

 

 

Jane Barkworth

Information Governance Officer

Town Clerk's Service

Hull City Council

Tel: 01482 300300

 

 

show quoted sections

We don't know whether the most recent response to this request contains information or not – if you are Jeffrey Thomas please sign in and let everyone know.