Publication - Strategy/plan

The Strategic Framework for a Cyber Resilient Scotland 2025 - 2030

Published: 5 November 2025
From: Cabinet Secretary for Justice and Home Affairs
Directorate: Digital Directorate
Topic: Business, industry and innovation, Communities and third sector, Education, +2 more … Public sector, Work and skills
ISBN: 9781806432455

This framework is a refresh of the Strategic Framework for a Cyber Resilient Scotland 2021. In the face of an ever-changing cyber threat landscape, it will build on progress to date and address ongoing - and new - challenges.

Scotland thrives by being a digitally secure and resilient nation.

Supporting documents

Annex A

Links between the Outcomes, the NPF and the UN Sustainable Development Goals

The National Performance Framework (NPF) sets out the National Outcomes that guide Scotland’s public services towards a shared vision. Under the Community Empowerment (Scotland) Act 2015 all public authorities must consider these outcomes in their work. The Scottish Government is currently reforming the NPF to better support public sector transformation and collaboration, but the existing National Outcomes remain in effect and should continue to shape priorities and decision-making.

Cyber Resilience Strategic Framework Outcomes	National Performance Framework Outcomes	UN Sustainable Development Goals
People recognise the cyber risks and are well prepared to manage them.	We tackle poverty by sharing opportunities, wealth and power more equally We are well educated, skilled and able to contribute to society. We live in communities that are inclusive, empowered, resilient and safe.	1. No poverty 4. Quality education 10. Reduced inequalities 11. Sustainable cities and communities
National cyber security coordination and response arrangements are effective.	We live in communities that are inclusive, empowered, resilient and safe.	9. Industry, innovation and infrastructure 11. Sustainable cities and communities
Scotland’s digital public services are secure and cyber resilient.	We live in communities that are inclusive, empowered, resilient and safe We respect, protect and fulfil human rights and live free from discrimination.	9. Industry, innovation and infrastructure 11. Sustainable cities and communities 16. Peace, justice and strong institutions
Public sector organisations effectively manage their cyber risk.	We live in communities that are inclusive, empowered, resilient and safe. We respect, protect and fulfil human rights and live free from discrimination.	9. Industry, innovation and infrastructure 11. Sustainable cities and communities
Businesses recognise the cyber risks and are well prepared to manage them.	We have thriving and innovative businesses, with quality jobs and fair work for everyone. We have a globally competitive, entrepreneurial, inclusive and sustainable economy. We live in communities that are inclusive, empowered, resilient and safe.	8. Decent work and economic growth 9. Industry, innovation and infrastructure 11. Sustainable cities and communities
Third sector organisations recognise the cyber risks and are well prepared to manage them.	We live in communities that are inclusive, empowered, resilient and safe. We respect, protect and fulfil human rights and live free from discrimination.	11. Sustainable cities and communities 16. Peace, justice and strong institutions
Scotland has a flourishing cyber security industry and a skilled cyber security profession.	We are well educated, skilled and able to contribute to society. We have thriving and innovative businesses, with quality jobs and fair work for everyone. We have a globally competitive, entrepreneurial, inclusive and sustainable economy.	4. Quality education 9. Industry, innovation and infrastructure 10. Reduced inequalities

Contact

Email: CyberResilience@gov.scot

Thanks for your feedback

Information

Annex A

Contact