Cyber Resilient Scotland - strategic framework: action plan 2025-2030

Sets out the key actions during 2025 to 2030 to deliver the priorities set out in the strategic framework for a Cyber Resilient Scotland.


Action Plan 2025-2030

This Action Plan sets out the key actions during 2025 – 2030 to deliver the priorities set out in the Strategic Framework for a Cyber Resilient Scotland (2025-2030).

Vision - Scotland thrives by being a digitally secure and resilient nation

Outcomes

1. People recognise the cyber risks and are well-prepared to manage them.

2. National cyber security and resilience coordination and response arrangements are effective.

3. Scotland’s digital public services are secure and cyber resilient.

4. Public sector organisations effectively manage their cyber risk.

5. Businesses recognise the cyber risks and are well prepared to manage them.

6. Third sector organisations recognise the cyber risks and are well prepared to manage them.

7. Scotland has a flourishing cyber security industry, research community and a skilled cyber security professional workforce

Principles of Approach

  • Inclusive and ethical
  • Whole-of-society
  • Agile leadership
  • Collaborative partnership
  • Effective communication
  • Adaptive and agile programme management
  • Optimal use of data and evidence of impact
  • Anticipating change and understanding emerging threats

Supported by delivery of the Action Plan

How the Action Plan will be delivered, monitored and evaluated

Activities will align with government fiscal planning.

Cyber resilience is a shared responsibility and we are committed to working with government, the public, private and third sectors and individuals.

The Scottish Government’s National Cyber Resilience Unit (SG NCRU) will lead coordination, monitoring and performance assessment of the Action Plan. The Plan’s effectiveness will be measured against specific metrics, including national (Scottish) and UK cyber resilience indicators. Progress will be tracked annually and evaluated every two years and the plan will be updated as necessary.

Scotland has an ecosystem of delivery partners who all contribute to realising the outcomes of the Strategic Framework. The Action Plan below highlights the key actions that are being delivered by the Main Delivery Partners.

Main Delivery Partners (as of Spring 2026)
Logos for all the Cyber Scotland Partnership organisations

Working together, we will ensure Scotland thrives as a digitally resilient nation.

Contact

Email: CyberResilience@gov.scot

Back to top