23-1593 - Information Security Training Content (23-1593)

In 2022, The City launched an annual mandatory information security training program to all staff, including “non-wired” staff whose jobs do not typically involve the use of computers in their day-to-day jobs. All City staff who have an assigned @calgary.ca account are subject to this annual mandatory training. The City seeks to not only protect its own information and systems, but also enrich the lives of City staff by strengthening what The City sees as critical life skills. The mandatory training for 2022 consisted of foundational information security topics such as passwords, phishing, social engineering, ransomware, and others that was about 1 hour in length. This was delivered by eLearning for staff who regularly use computers, and in-person from an instructor for “non-wired” staff.

Given The City leadership’s mandate of annual training, it is preferred that this training program evolve yearly and provide a variety of information security knowledge to City staff without repeating the same training material year after year. The City is an organization with a diverse workforce in terms of job duties and work sites. There is a desire to provide job-specific training content that addresses the most important information security risks for a given role, while also demonstrating the importance of information security life skills for staff that may not see a connection between the mandatory training and their day-to-day jobs.

The City is seeking proposals from experienced Proponents for an information security training program consisting of the following components:
1. Information Security Training eLearning content that can be hosted on The City’s Learning Management System, provided by SumTotal Systems.
2. A cloud-based eLearning platform that can be accessed by City contractors that do not have access to The City’s LMS.
3. A reporting solution for training taken through the Proponent’s eLearning platform.
4. A comprehensive training program that can be delivered through instructor-led sessions for Offline Staff.