QLD Department of Transport seeking cyber security awareness training

Queensland's Department of Transport and Main Roads (TMR) is calling for expressions of interest (EOI) to procure cyber security awareness training.

TMR has a workforce of approximately 11,000 employees who rely on information systems, applications and digital services to perform their roles.

To protect information assets, maintain operational resilience and meet internal and external compliance obligations, TMR requires ongoing cyber security awareness training that enables staff to understand their responsibilities and recognise and respond to cyber threats.

General user training will be delivered to all staff in order to establish baseline cyber security awareness and expected behaviours, via mandatory, annual interactive online training.

Privileged user training will also be delivered to system administrators; network and database administrators; developers; OT engineers and administrators; and other users with elevated or administrative access.

This will address heightened cyber security risks associated with privileged access.

The learning scope for the general user training must address password and identity security (including MFA); common attack techniques; safe internet browsing and cloud service use; device and mobile security; physical security and information protection; secure remote working practices; incident identification and reporting; secure use of AI.

The learning design must incorporate gamification, scenario‑based learning or other interactive instructional methods, as well as allowing learners, during annual recertification, to navigate directly to a valid assessment to demonstrate ongoing capability.

Interested suppliers must submit responses by 12pm AEST Monday 16 March.

Last year, TMR released an EOI to provide managed services for the establishment of a co-managed Security Operations Centre in collaboration with TMR's Cyber Defence Team.