Cyber Resilient Scotland: strategic framework

This framework builds on Scotland’s first cyber resilience strategy, Safe, secure and prosperous: a cyber resilience strategy for Scotland, expanding on its achievements and addressing ongoing – and new – challenges.

Annex D: Measurement

Strategic Indicators

This table outlines the indicators we have identified at this stage to measure our progress. New indicators and/or sources of evidence may become available as we move forward.

Strategic Outcome



People recognise the cyber risks and are well prepared to manage them

Percentage of adults taking various security measures online; percentage of adults being confident in pursuing a number of online activities

Scottish Household Survey

Number of young people taking part in learning and skills programmes at school, college and university level

Higher Education Statistics Authority (HESA); SG Data Heat Map for Schools

Cyber crime statistics

Scottish Crime and Justice Survey

Cyber literacy levels

Oliver Wyman Forum Global Cyber Risk Literacy and Education Index

Young people's cyber security behaviours and knowledge

Young People in Scotland Survey

Businesses and organisations recognise the cyber risks and are well prepared to manage them

Businesses and third sector organisations' cyber security measures, experiences of cyber attacks

SG Digital Economy Business Survey

Uptake of Cyber Essentials

IASME and SG data

Record of reported cyber breaches

SBRC, Police Scotland and NCSC data

Growth of cyber security industry

ScotlandIS data; UK Government data

Mean salary offer for core cyber jobs postings and cyber jobs hotspots

Cyber security skills in the UK labour market surveys

Businesses and individuals' engagement with:

  • the CyberScotland Partnership Portal
  • number of subscriptions to the CyberScotland Bulletin

CyberScotland Partnership data

Scottish Public Sector Cyber Resilience Framework

Public Sector Action Plan monitoring arrangements

Digital public services are secure and cyber resilient

Cyber resilience and security of digital public services as an integral part of the new Digital Strategy

SG Digital Strategy

Additional indicators to be developed


National cyber incident response arrangements are effective

Number of times national plan is tested and exercised




Back to top