Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, how many mandatory cyber security training sessions civil servants working in his Department are required to undertake.

Departmental staff are not currently required to undertake mandatory training specifically relating to cyber security. Guidance on security culture, including cyber security and managing digital footprints, is available to staff through the Department’s intranet.

All Departmental staff are required to undertake learning related to the handling and protection of information and safe online practice at the point of induction and also on an annual basis. There is opportunity for learners to test their learning and knowledge at the end of the learning course.