FOI Request - Data Security Spending

Request 101002669117

1. The total number of full-time and part-time employees employed by your organisation (as of 1st January 2021 or latest figures available)

2. The total number of full-time and part-time employees employed by your organisation with professional data security / cybersecurity qualifications (as of 1st January 2021 or latest figures available) - Common qualifications may include any cyber or IT security related qualifications such as CISSP, SSCP, CSA, CEH, CISA, CISM, Security+

3. The total number of full-time and part-time employees employed by your organisation who have completed cyber security training between 1stJanuary 2020 and 31stDecember 2020 (or latest annual figures available)

4. How much money (in pounds sterling) has been spent on cyber security training between 1stJanuary 2020 and 31stDecember 2020 (or latest annual figures available) this may include GDPR-related training

5. How many data breaches did your organisation report to the ICO between 1st January 2019 and 1st January 2020

6. How many data breaches did your organisation report to the ICO between 1st January 2020 and 1st January 2021

7. Was your organisation victim to a successful ransomware attack between 1st January 2020 and 31st December 2020? As for the definition of a “successful ransomware attack”, please include any incident in which an attacker requesting a ransom/payment managed to successfully encrypt, steal or leak any data/systems/assets that your organisation processes/holds.

8. If you answered yes to the previous question, did your organisation agree to pay a ransom? Yes/No

9. Did your organisation suffer a cyber security incident between 1st January 2020 and 31st December 2020 which resulted in disruption to the council’s services? This refers to any cyber incident that forced usual services to go offline or become unavailable. Yes/No
 

Response 16-02-2021

1.

Full time staff 2141
Part time staff 2784
Supply/Relief, etc 832

Please note, this is the total number of roles as some employees may have more than one position with the council.

2.. Zero

3.. Zero

4.. Nil – some information security and GDPR content is available on the Council’s Learning Management System  

5.. 1

6.. 1

7. No

8. N/A

9. No