Cyber Resilient Scotland - strategic framework: action plan 2025-2030

Outcome 1

People recognise the cyber risks and are well prepared to manage them

1.1 Raising Awareness

The public better understand cyber risks and know how to protect themselves online, thanks to clear, consistent and inclusive messaging as well as wide-reaching local and national outreach.

The CyberScotland Partnership will:

• position the CyberScotland Portal as the trusted national gateway for cyber resilience advice and guidance
• deliver quarterly national cyber resilience awareness-raising campaigns for the public and organisations in both English and Gaelic
• provide key awareness raising resources in community languages, easy-to-read and British Sign Language
• tailor cyber awareness messaging for priority groups including adult learners, older and younger people, ethnic minority groups and parents, guardians and carers
• increase awareness of, and participation in, CyberScotland Week during February each year
• collaborate to increase Scottish participation in CyberUK (Glasgow 2026) and future CyberUK events, as well as during Cyber Security Awareness Month each year.

1.2 Empowering Action

People can easily report cyber crime and access trusted support when needed.

Police Scotland and other CyberScotland partners will:

• embed clear reporting routes for cyber crime and phishing attempts in all cyber resilience awareness campaigns and training.

1.3 Embedding Resilience in Learning

Cyber resilience, digital security and responsible online behaviours are integrated into our lifelong and life-wide learning system from the earliest stages through to adulthood.

Educators across the lifelong learning system will:

• access practitioner training to support them to deliver effective cyber resilience learning and awareness.

Education Scotland will:

• continue to embed cyber resilience as a core competency within the 5–18 curriculum
• continue to increase the number of schools delivering cyber security learning and qualifications
• continue to increase the number of pupils taking cyber security qualifications
• continue to support teachers to develop their capabilities to effectively deliver cyber resilience and security learning.

The Scottish Government’s National Cyber Resilience Unit (SG NCRU) and Education Scotland will:

• produce and distribute an Early Level book introducing basic cyber security concepts to primary school-aged children.

YouthLink Scotland and Community Learning & Development partners will:

• embed cyber resilience within community learning opportunities.

The SG NCRU, Abertay University, Universities Scotland, Colleges Scotland and the College Development Network will:

• strengthen cyber awareness across colleges and universities by rolling out the Cyber Resilience and You! online learning tool to all students in Scotland, including translating it into Gaelic.

1.4 Strengthening the Workforce

Employees across all jobs and sectors can identify and manage cyber risks, supported by a workplace culture that prioritises awareness and resilience.

The CyberScotland Partnership will:

• signpost organisations and staff to trusted cyber resilience training and resources through the CyberScotland Portal and the NCSC website
• work with unions, employer bodies and trade bodies to extend cyber resilience awareness to workers across sectors
• identify gaps in workforce cyber resilience and develop targeted guidance, resources and training to address them.