Question to the Department for Transport:

To ask the Secretary of State for Transport, how many mandatory cyber security training sessions civil servants working in his Department are required to undertake.

All Department for Transport employees are required to undertake the ‘Responsible for Information’ e-learning course. This course is designed to make civil servants aware of their responsibilities when it comes to handling information, being alert to the dangers of fraud, ensuring information is protected and handled responsibly without preventing it from being shared appropriately, and how best to protect themselves and the information they hold when they are working remotely on online. All new starters are required to complete this training within 1 month of joining the Department.

All new staff with elevated access privileges are provided with enhanced, role-specific cyber and information security training and awareness.

Information security policies and procedures are kept updated, and all staff are required to undertake refresher security training at least every 3 years.