Independent review of Scottish Government's use of mobile messaging apps and non-corporate technology

Website.

Information pack for Ministers.

Induction.

Codes of Conduct (ministerial code and civil service codes (UK and Scotland))

(1) Integrate 'In the Service of Scotland' into updated mission/vision/purpose.

Embed these messages into all 'touchpoints,' both public and internal.

(4) Consider developing the role of Propriety & Ethics (P&E) to be more visible, proactive and involved.

'The need for an official Scottish Government issued corporate device (mobile phone or tablet (iPad) is determined by individual business areas based on their requirements. There is no limit on grade or position that can have a corporate device'

(1) Integrate 'In the Service of Scotland' into updated mission/vision/purpose.

Embed these messages into all 'touchpoints,' both public and internal.

(4) Consider developing the role of Propriety & Ethics (P&E) to be more visible, proactive and involved.

There were numerous opportunities over recent years for this issue to be raised for detailed consideration and mitigating actions.

(6) Develop a new risk assessment framework incorporating codes, culture, and Propriety & Ethics.

(11) Scheduled review for existing policies/guidance

Horizontal view of risks/opportunities not taken. Important to ensure different skills/remits etc are involved.

(6) Develop a new risk assessment framework incorporating codes, culture, and Propriety & Ethics.

(11) Scheduled review for existing policies/guidance

Horizontal view of risks/opportunities not taken. Important to ensure different skills/remits etc are involved.

(6) Develop a new risk assessment framework incorporating codes, culture, and Propriety & Ethics.

(11) Scheduled review for existing policies/guidance

N/A

(1) Integrate 'In the Service of Scotland' into updated mission/vision/purpose.

Embed these messages into all 'touchpoints,' both public and internal.

There is no formal mechanism for review.

(11) Scheduled review for existing policies/guidance

Legitimised by reference in SG policy and guidance.

Lack of clarity about information of 'corporate value.' Significant corporate vulnerability because of subjectivity of individual interpretation and judgement.

Commonly used and normalised across society.

Appears to be a lack of understanding or appreciation of the risks, both organisational and individual.

(12) New policy for mobile messaging apps (MMAs).

(6) Develop a new risk assessment framework incorporating codes, culture, and Propriety & Ethics.