Cyber resilience: learning and skills action plan 2018-2020

This plan supports the development of cyber resilient behaviours and helps build a skilled and growing cyber security profession for Scotland.


Annex E – Cyber Resilience Learning and Skills Action Plan

Aims and actions

Aims

A. Increase people's cyber resilience through awareness raising and engagement

B. Explicitly embed cyber resilience throughout our education and lifelong learning system

C. Increase people's cyber resilience at work

D. Develop the cyber security workforce and profession to ensure that skills supply meets demand and that skilled individuals can find rewarding employment in Scotland.

Aim A: Increase people's cyber resilience through awareness raising and engagement

No Action Timescales
1 The Scottish Government will work with partners in Scotland and the wider UK to disseminate general and targeted cyber awareness messages to key audiences including citizens, businesses and organisations. Ongoing
2 The Scottish Government will offer communications support to its national partners to deliver their own cyber resilience messages for their audiences, and ensure those messages are aligned with authoritative sources of advice ( i.e. Cyber Aware, NCSC. Ongoing
3 The Scottish Government will work with key partners, including Police Scotland, to identify ambassadors and champions who can deliver cyber resilience messages. Ongoing
4 The Scottish Government will work with partners, including the UK Government, to monitor changes and improvements in cyber resilience behaviours among the general Scottish population. Ongoing

Aim B: Explicitly embed cyber resilience throughout our education and lifelong learning system

No Action Timescales
5 The Scottish Government will work with Education Scotland and other partners to look at ways to embed cyber resilience into Early Years education and will produce a plan of action. Plan ready autumn 2018
6 Education Scotland will work with education Regional Improvement Collaboratives to raise the profile of cyber resilience in regional planning for education. Spring 2018 and then ongoing basis
7 The Scottish Government will work with key partners to ensure that, when relevant skills frameworks are under review, cyber resilience is embedded appropriately. In the immediate term, this will include working with Scottish Qualifications Authority ( SQA) on its review of the ICT Core Skill. Summer 2018 and then ongoing basis
8 Education Scotland will collate and disseminate existing learning and teaching resources to schools to support the learning of cyber resilience within the curriculum area of Digital Literacy. Spring 2018 and resources thereafter refreshed as required
9 The Scottish Government will work with organisations involved in non-formal learning, such as Scottish Council for Voluntary Organisations ( SCVO), Young Scot, Lead Scotland, Youthlink Scotland, Learning Link Scotland and the Community Learning and Development ( CLD) Standards Council, to develop and publish guidance for providers on the delivery of cyber resilience learning. Spring 2019
10 The Scottish Government will work with appropriate teacher education institutions, Education Scotland, College Development Network and universities to plan how to strengthen the focus on cyber resilience in initial teacher education and career long professional learning in cyber resilience for teachers in schools and lecturers in colleges and universities. Plan to achieve this ready by autumn 2018.
11 The Scottish Government will work with Education Scotland to identify opportunities to embed cyber resilience into education inspection frameworks. In the first instance Education Scotland will embed cyber resilience in the reviewed quality framework for colleges, How Good is Our College?, within the principles of leadership, governance and curriculum. By autumn 2018, and thereafter as opportunities arise.
12 The Scottish Funding Council ( SFC) will analyse colleges' and universities' steps towards embedding cyber resilience within their curricula and other activities in order to identify future activity required to support these institutions, by summer 2018. Summer 2018
13 College Development Network College Development Network will explicitly identify knowledge, understanding and skills of cyber resilience as a key standard for lecturers within the upcoming review of the Professional Standards for Lecturers in Scotland's Colleges. Summer 2018
14 The Scottish Government will work with SDS and the Scottish Training Federation to identify options for engagement with independent training providers that can support their trainees' cyber resilience. Winter 2018
15 The Scottish Government will work with the National Parent Forum of Scotland and other relevant organisations, to identify activity to develop parents' abilities to engage with their children's learning in order to ensure their children become more cyber resilient. Winter 2018
16 The Scottish Government will work with public, third and private sector organisations involved in supporting the upbringing of children and young people to identify and implement measures to support children and young people to become more cyber resilient. Winter 2019
17 The Scottish Government will work with care providers whose staff are well placed to support their clients to be more cyber resilient. Winter 2019

Aim C: Increase people's cyber resilience at work

No Action Timescales
18 The Scottish Government will work with key partners to provide/signpost best practice guidance on how to build cyber resilience effectively into workplace learning, as identified in the public, private and third sector action plans. Autumn 2018
19 The Scottish Government will work with SDS and industry partners to explore opportunities for strengthening cyber resilience across occupational standards. Autumn 2018
20 Scottish Union Learning will measure and report back to the Scottish Government on the impact of its government funded programme of cyber resilience workshops delivered in multiple sectors between autumn of 2017 and spring 2018, after which next steps will be decided. Autumn 2018

Aim D: Develop the cyber security workforce and profession to ensure that skills supply meets demand and that skilled individuals can find rewarding employment in Scotland

No Action Timescales
21 The Scottish Government will work with SDS to include cyber security within future skills planning, including through their work with the Enterprise and Skills Strategic Board. Ongoing
22 The Scottish Government will work with SDS and the Digital Technologies Skills Group – the group responsible for advising on the Digital Technologies Skills Investment Plan - to ensure there is a robust evidence base to underpin future decision making on the development of cyber security skills in Scotland. This work will also include an ongoing review of other countries' approaches to developing cyber security skills. Plan produced by summer 2018. Implementation throughout 2018 and 2019.
23 SDS will work with partners in the Digital Technologies Skills Group, and wither industry, to produce a cyber security career framework that will support employers and individuals from all backgrounds to understand education and career pathways into and through the cyber security industry. This will also provide guidance for ICT professionals who wish to develop their cyber security skills. The framework will include information about professional qualifications and accreditation. Autumn 2018
24 SQA will support the delivery of current and new cyber security qualifications by developing teaching, learning and assessment materials. With Education Scotland and College Development Network, SQA will continue to support the professional learning of teachers and lecturers to deliver these qualifications. Roll out throughout 2018 and 2019.
25 The Scottish Government will work with SDS to consider options to support career changers or unemployed people to develop skills for cyber security roles. Options paper produced by autumn 2018.
26 The Scottish Government, with lead partner Education Scotland, will work with the UK Government to identify opportunities to shape the UK national schools cyber security programme (called Cyber Discovery) for appropriate implementation in Scotland. Plan produced by summer 2018.
27 The Scottish Government, in partnership with ScotlandIS, the cyber security industry and academia, will aim to categorise and describe cyber security work. This could be used by academic institutions to standardise curricula and certification, and by employees, employers and employability services to best match skilled people to skilled jobs. Spring 2019
28 The Scottish Government, ScotlandIS and representatives from the cyber security sector in Scotland will work with the UK Government and wider UK industry to develop the UK Royal Chartered Professional Body for Cyber Security, with the aim of it having a strong Scottish presence and benefiting Scotland's cyber security sector. Ongoing
29 SDS will work alongside industry partners to review National Occupational Standards for cyber security with a view to embedding cyber resilience competences appropriately in professional roles. Spring 2019
30 The Scottish Government, Education Scotland and SDS will work with partners at the UK level to ensure appropriate alignment of cyber skills development plans, ensuring that Scotland can benefit fully from UK-wide initiatives. Ongoing
31 The Scottish Government will work with SDS and Industry Leadership Skills Groups to promote the importance of cyber security to all sectors, and ensure that cyber security is embedded appropriately into Skills Investment Plans. Ongoing
32 The Scottish Government will work with SQA to strengthen its portfolio of cyber security qualifications, through filling in gaps in the portfolio and keeping existing qualifications relevant. Ongoing
33 Scottish Informatics and Computer Science Alliance ( SICSA) will lead work with universities and colleges to build capacity for cyber security courses (including cyber security within IT courses) at under- and post-graduate levels, as well as research opportunities. This will include working with the Scottish Government to consider establishing a forum for bringing together industry with researchers, such as a Centre for Doctoral Training. Throughout 2018 and 2019
34 SICSA and College Development Network will increase levels of engagement with schools and communities aimed at inspiring young people to consider cyber security as a career. Ongoing
35 The National Parent Forum for Scotland ( NPFS) will continue work with SDS to disseminate existing resources that seek to promote cyber security careers to parents/families. NPFS and SDS will review the need for new resources in this area and develop them if required. Throughout 2018 and 2019
36 SDS will identify opportunities to further integrate cyber security skills into the Apprenticeship Family, and work with industry and employer groups to ensure widespread awareness and adoption of work-based learning pathways within the cyber security industry. Ongoin
37 The Scottish Government will work with SDS and others to ensure a coordinated approach to develop a pipeline of future cyber professionals. This will include supporting Digital World and My World of Work careers campaigns; promotion of e-placement Scotland and other internship, placement and mentoring opportunities; and creating opportunities for industry to enhance the delivery of curriculum. SG will produce a coordination plan. Coordination plan ready by summer 2018

Contact

Email: Clare El Azebbi

Back to top