Cyber resilience strategy 2025-2030: equality impact assessment results
This equality impact assessment supports Scotland’s Cyber Resilience Strategy 2025–2030, ensuring inclusive, accessible digital security. It identifies barriers, promotes targeted actions, and embeds equality across public, private, and third sector cyber initiatives.
Key Findings
Overview of Key Evidence Gathered and Analysed
The EQIA drew on a range of qualitative and quantitative evidence, including:
- Academic research on cyber crime perceptions and behaviours across age groups
- Sector-specific data on digital exclusion and cyber vulnerability (e.g. Age UK, Scottish Household Survey, YoungScot survey)
- Labour market data on gender representation in cyber security roles
- Stakeholder insights from delivery partners and internal Scottish Government teams
The assessment focused on identifying how different groups may experience barriers to cyber resilience and how the strategy could address these through inclusive design and targeted support.
Summary of Impacts by Protected Characteristic and PSED Need
| Protected Characteristic | Eliminating Discrimination | Advancing Equality of Opportunity | Fostering Good Relations |
|---|---|---|---|
| Age | Neutral | Positive – targeted messaging and education across life stages | Positive – cross-generational learning opportunities |
| Disability | Neutral | Positive – accessible information and support for neurodivergent users; people who are visually impaired and/or deaf; and those requiring easy-to-read | Neutral |
| Sex | Neutral | Positive – promotion of cyber careers for women | Neutral |
| Pregnancy & Maternity | Neutral | Neutral | Neutral |
| Gender Reassignment | Neutral | Neutral | Neutral |
| Sexual Orientation | Neutral | Neutral | Neutral |
| Race | Neutral | Positive – recognition of language and cultural barriers in cyber messaging | Neutral |
| Religion or Belief | Neutral | Neutral | Neutral |
| Marriage & Civil Partnership | Neutral (not applicable beyond employment context) | Neutral | Neutral |
Intersectional and Human Rights Impacts
The strategy acknowledges that individuals may face compounded risks due to intersecting characteristics - for example, older adults with disabilities or individuals from ethnic minority backgrounds who also experience digital exclusion. These overlapping vulnerabilities informed the strategy’s emphasis on accessible, inclusive messaging and support.
From a human rights perspective, the strategy supports the right to safety, information and participation in digital life. By promoting equitable access to cyber resilience knowledge and tools, it contributes to the broader goal of digital inclusion and empowerment.
Gaps and Limitations in Data or Evidence
While the EQIA drew on a range of sources, some limitations were identified:
- Limited disaggregated data on cyber crime impacts by protected characteristic
- Gaps in evidence on the experiences of trans people, people of faith and those with intersecting identities in relation to cyber resilience
To address these, the strategy includes a commitment to ongoing engagement with stakeholders and delivery partners, and to identifying further research opportunities to fill evidence gaps. This will support continuous improvement and ensure that equality considerations remain central throughout implementation.
Contact
Email: cyberresilience@gov.scot