IT Security Training Lapses in UK

Inadequate training is at least partially to blame for the British government losing 25 million child-benefit records in November, 2007, according to a Freedom of Information Act request.

 

The request was made to 16 government departments. It shows that most have not implemented even basic training on data handling, and that 11 departments do not have provisions for refresher courses.

 

The Department for Schools, Children and Families admitted it had no I.T. security training at all.

 

Robert Chapman, chief executive of Firebrand Training, which issued the FOI request, says the government was “failing to demonstrate a commitment to data protection.”

 

“The education of employees is essential to any organization’s security,” he notes. “We rely far too heavily on IT departments. It is clear that inadequate training and inconsistency between departments has produced a naiveté among government employees.”

 

---