A Freedom of Information request from cybersecurity company Citrix indicates that some U.K. councils spend up to eight times more for health care and safety training than on IT and data protection training, SC Magazine reports. Eighty six percent of councils didn't pay for any type of IT security training in 2016. "Another revelation from this particular FOI campaign has also revealed that over a third of devices issued by councils could be vulnerable, due not only to a lack of security spending, but to having no enterprise grade software installed," the report states.“Sadly investing in IT security usually falls quite low in the spending list for most local authorities, said ESET's Mark James. "The consequences for failures in IT security are significantly lower than other areas with no clear guidelines on what constitutes a failure." 
Full Story