UK Police Cybercrime Training

UK think tank Parliament Street has lifted the lid on spending by police forces on training staff to deal with cyber-crime and recommended greater collaboration in this regard

UK police forces have spent a total of £1,320,341 on cyber crime training courses in the past three years, according to a report from the Parliament Street think tank.

The Policing and Cybercrime policy paper, which is based on freedom of information (FoI) requests sent to all police forces in the UK, also reveals that a total of 39,483 police staff and officers underwent training across the UK in that period.

North Wales Police topped the list with £375,488 on cyber-crime training for officers and staff between 2015 and 2017. This included a dedicated five-day mainstream cyber training course for 147 key staff, costing £160,000.

There was also a one-day cyber-crime input course for all new Initial Police Learning and Development Programme (IPLDP) recruits for 183 officers which cost £29,900. An additional £52,300 was spent on a similar course for 68 criminal investigation department (CID) officers.

West Mercia and Warwickshire Police spent £125,633 on cyber-crime training, followed by Lincolnshire which stated it had spent £119,834. This was followed by West Midlands Police on £91,200 and Police Scotland on £83,121.

On the lower end of the scale, Norfolk and Suffolk police forces reported a combined spend of £71,100. This included sending 3,882 staff on a cyber-crime and digital policing first responder course, while 147 staff members were sent on a digital media investigator course costing £6,500. Some £15,000 was also spent on an open source level 2 course for 87 members of staff.

The report said while the majority of UK police forces responded to the FoI request, several were unable to provide specific data around training costs, and could only identify how many officers and staff had experienced the training programmes available.

South Yorkshire Police, for example, said it had sent 71 officers on a mainstream cyber-crime training programme, and provided a course on hacking and how cyber criminals operate.

The lowest level of spending was reported by the Port of Dover Police, a small organisation, which said none of its staff had been trained and no budget had been used on cyber-crime training.

Cyber skills essential for modern policing

Sheila Flavell, COO at professional services firm FDM Group, said with cyber crime on the rise, it is clear that all organisations are urgently seeking to recruit, train and equip staff with the latest security expertise and cyber skills.

“Whether it’s online courses or specialist programmes, it’s encouraging to see police forces taking steps to improve IT skills of serving officers and staff,” she said.

Flavell said these skills are not only vital for modern policing, they are also essential to support and protect businesses across the country.

“That’s why so much more needs to be done to address the UK’s chronic skills crisis, to ensure we have the highly skilled workers to protect companies and the public from malicious online attacks,” she said.  

Underlining the need for cyber-crime training for police forces, the report said the UK Office for National Statistics (ONS) reported that there were 4.7 million incidents of fraud and computer misuse in the 12 months to September 2017.

Other reports have estimated that 17 million Britons were targeted by phishing, ransomware, online fraud and hacking in 2017, while security firm Norton estimated that £130bn was stolen from consumers online.

Cyber crime is on the rise, the report said, and will continue to pose a serious threat to UK businesses, consumers and critical national infrastructure.

“This in turn, places huge pressure on our police forces to ensure that officers, staff, new recruits and trainees are fully prepared to handle increasingly complex investigations,” the report said.

Collaborating against cyber crime

The report quotes National Cyber Security (NCSC) chief Ciaran Martin as saying the agency cannot protect UK cyber space alone. “We can do it only by working with others, with the rest of government, law enforcement, the Armed Forces, our international allies and, crucially, with business and wider society,” he said.

The report notes that while some police forces are working together occasionally to develop cyber-crime training programmes, the majority are still working alone in this process.

“While we appreciate that individual forces have varying challenges in terms of crime, headcount and volume of citizens to protect, it would make sense to develop a more standardised approach to cyber-crime strategy,” the think tank said.

Parliament Street recommends:

  • The establishment of a national police cyber strategy to enable security specialist companies to provide an agreed standard of training for all officers and staff across the country.
  • An increase in the recruitment of officers with existing cyber skills.
  • That police forces work closely with schools, colleges, universities and private companies to ensure a pipeline of highly skilled workers are encouraged to join the police.
  • Sharing of key security training services with other police forces.

Computer Weekly

You Might Also Read: 

Police Arrest Bank Hacker Who Stole $1B:

 

« US Imposes Cyber Sanctions On Iran
How to Improve Cyber Security Awareness In Your Organisation »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

CyTech Services

CyTech Services

CyTech provides Forensics Incident Response, Cyber Security and Training services.

Cyber Together

Cyber Together

Cyber Together is dedicated to advancing the cyber security industry by giving businesses access to Israel’s leaders, innovators and great minds in the field of cyber security.

Kenna Security

Kenna Security

Kenna Security is a risk intelligence & vulnerability management platform that helps prioritize and remediate vulnerabilities.

Dubex

Dubex

Dubex is Denmark's leading business-oriented IT security specialist.

CUIng.org

CUIng.org

The CUIng initiative was launched to tackle the problem of criminal exploitation of information hiding techniques.

SGCyberSecurity

SGCyberSecurity

SGCyberSecurity is Singapore's No.1 Cyber Security portal. From this platform, you will be able to find useful articles, resources and connect with the security companies for your business needs.

Romanian Association for Electronic Industry & Software (ARIES)

Romanian Association for Electronic Industry & Software (ARIES)

ARIES is the Romanian Association for Electronic Industry and Software, the biggest and most influental organization created for the IT&C industry in Romania.

Sandline Discovery

Sandline Discovery

Sandline Discovery provides digital forensics, eDiscovery solutions, managed review and litigation consulting services.

Digital Beachhead

Digital Beachhead

Digital Beachhead has the expertise to provide a range of Cyber Risk Management and other Professional Services with specifically tailored solutions at competitive prices.

DoControl

DoControl

DoControl gives organizations the automated, self-service tools they need for SaaS applications data access monitoring, orchestration, and remediation.

Slamm Technologies

Slamm Technologies

Slamm Technologies is a trusted IT firm that offers Cyber Security Support, Corporate IT Solutions and Professional IT Training courses with international certification.

DeXpose

DeXpose

DeXpose is a hybrid dark/deep web monitoring and attack surface mapping platform to help you find compromised data or exposed assets related to your organization way before threat actors.

Versent

Versent

Versent is an Australian-born technology company, focused on architecting, building & operating cloud native applications, data streams, platforms, and services.

WillJam Ventures

WillJam Ventures

WillJam Ventures are a private equity firm focused on investing in world-class cybersecurity companies that will become the next generation of leaders in protecting the world’s digital assets.

Smarsh

Smarsh

Smarsh products are designed for user-friendly, efficient compliance. From archiving, supervision, and discovery to cybersecurity – Smarsh has you covered.

Illustria

Illustria

Illustria is your agent-less “watchdog” for all open source libraries. Our mission is becoming a dev-velocity company, enabled via cyber security.