So yes there is unfortunately a small number of people in the corporate world who need that specific training but what it mostly is is plausible deniability for the company. In case you do get your password stolen or some such the company can then turn around and say that you had the mandated security training which makes it easier to let you go. It’s all so they can cover their asses