The Scottish Government has announced a strengthened national approach to cyber security with the launch of a new Cyber Observatory and an updated Strategic Framework for a Cyber Resilient Scotland, aimed at boosting digital resilience across the public sector.
The Cyber Observatory – delivered through the Scottish Cyber Coordination Centre (SC3) – will gather, analyse and share early warnings on cyber threats affecting Scottish public bodies. By identifying emerging risks sooner, the service is intended to help organisations such as local authorities, NHS boards and schools take a more proactive, intelligence-led approach to security.
The refreshed framework sets out a programme of actions to help public bodies prepare for “inevitable cyber threats” and embed resilience into the design of systems and services, rather than relying solely on reactive measures. This includes strengthening secure-by-design practices, improving incident response capabilities and increasing access to real-time threat intelligence.
To support the skills needed for secure digital delivery, the Scottish Government has pledged £300,000 for its Upskilling Fund, aimed at developing cyber-security capability across the public-sector workforce. Additional support will continue for cyber learning programmes across schools, colleges and universities to help grow future talent and build a broader cyber-literate population.
Justice Secretary Angela Constance said cyber resilience is now fundamental to Scotland’s digital ambitions. “Digital technology is driving Scotland’s economic growth and shaping our future. Cyber threats are evolving rapidly, and it is our shared responsibility to meet those challenges. The Cyber Observatory will be vital in alerting organisations to potential threats,” she said.
The framework emphasises cross-sector collaboration, recognising that Scotland’s resilience relies on cooperation between government, industry and third-sector partners.
Karen Meechan, CEO of ScotlandIS and Chair of the CyberScotland Partnership, said the approach underscores the importance of collective action: “A cyber-resilient Scotland is built on partnership. Our resilience depends on our shared commitment to act, learn and support one another.”