Cyber resilience and the third sector - risks, challenges and opportunities: research report

Appendix 1 – The Cyber Scotland Partnership

• The CyberScotland Partnership (CSP) is a collaboration of key strategic stakeholders, brought together to focus efforts on improving cyber resilience across Scotland in a coordinated and coherent way. The 11 partners has expanded to 18 with the inclusion of UK partners including the National Cyber Security Centre, IASME ( NCSC sole Cyber Essentials Partner) and the UK Cyber Security Council (self regulating body for the cyber security profession).
• The Partnership represents a commitment from partners to work together to drive the delivery of activities that will help achieve the outcomes of The Strategic Framework for a Cyber Resilient Scotland.
• Partners come together regularly as a networking group to share ideas and identify collaboration opportunities. The UK national cyber security centre (NCSC) serves a technical advisor.
• CyberScotland.com is the web portal of the CyberScortland Partnership designed to be a one stop shop for accessing a range of advice guidance and resources on cyber.
• Included in the resources is a monthly Bulletin provides the most up-to-date information about the latest threats, scams, news and updates covering cyber security and cyber resilience topics. It includes links to authoritative sources, guidance and steps you can take to protect yourself from online threats.

Founding partners of the CSP are:

• Scottish Government (via the Cyber Resilience Unit)
• Police Scotland
  • Police Scotland's purpose is to improve the safety and wellbeing of people, places and communities in Scotland, focusing on Keeping People Safe in line with values of Integrity, Fairness and Respect.
• Cyber and Fraud Centre Scotland (CFCS)-
  • Bringing together the Scottish business community, the CFCS aims to become the catalyst that makes Scotland one of the safest and most resilient places to live, work, and do business, both on and offline, especially during these times of economic recovery. Historically supporting businesses with raising their physical resilience by working with Police Scotland and Fire and Rescue, CFCS now focuses on providing the advice and resources to increase cyber resilience.
• Highlands and Islands Enterprise (HIE)
  • HIE is the economic and development agency for the North and West of Scotland, helping build a prosperous, inclusive and sustainable economy across the Highlands and Islands, attracting more people to live, work, study, invest and visit. In addition to their continued investment in digital infrastructure and support, HIE raises awareness of cyber security to businesses, social enterprises and community organisations.
• Scottish Enterprise
  • Scottish Enterprise is the main economic development agency for Scotland with a remit to deliver a significant lasting effect on the Scottish economy. It works with partners in the public and private sectors to find and exploit the best opportunities and to help companies to grow. Their expert advisors help businesses understand internal and external information security risks as well as to determine where vulnerabilities might exist within their systems and how they can put in place appropriate technical, administrative and procedural controls to protect themselves. They advise businesses on how they can implement the industry-recognised standards (such as Cyber Essentials/Plus, ISO27001 and NIST) to improve data governance, reduce cyber risk and to help them respond to a cyber security incident.
• ScotlandIS
  • ScotlandIS is the membership and cluster organisation for the digital technologies industry in Scotland, representing over 1000 companies through the cluster ecosystem. Through the Scottish Cyber Cluster, ScotlandIS focuses on strengthening and growing the cyber security sector in Scotland. It works with members and partners to support the wider digital transformation of business and society, acts as a voice for the industry to policy makers, and provides our members with connections throughout our network in Scotland, in addition to relevant research and market intelligence.
• Scottish Council for Voluntary Organisations (SCVO)
  • The SCVO is the national membership body for Scotland's voluntary sector. As part of its digital skills work, it provides education and support to Third Sector organisations to improve their cyber resilience. It empowers them with knowledge and simple actions they can take to ensure that their organisation is well placed to defend itself against a cyber attack. Cyber resilience within the SCVO is supported by 17 cyber catalyst organisations who have committed at the Board level to act as cyber ambassadors for the Third Sector.
• Young Scot
  • Young Scot is the national youth information and citizenship charity for 11-26-year-olds in Scotland. Since 2017 and with the Scottish Government's support, Young Scot has delivered several cyber resilience and skills projects for young people. Their work includes the Digi Know? programme that engages young people in cybersecurity learning and skills opportunities. It also provides information on cyber resilience, security and careers in the cyber sector across a wide range of digital and social media platforms that young people spend their time, including TikTok. Digi Know? is available for all young people, but Young Scot targets the programme at those who wouldn't typically access opportunities, are overlooked by the system or are unsure about their future career pathways.
• Skills Development Scotland (SDS)
  • SDS contributes to Scotland's sustainable economic growth by supporting people and businesses to develop and apply their skills to deliver the best outcomes for our economy. Through Digital World, it promotes the importance of digital skills to help Scotland grow and prosper, and cyber education, training and resilience are seen as a key part of that to protect us all while we work and play online.
• Education Scotland
  • Education Scotland works in partnership with local authorities to ensure that learners and educators are aware of the cyber security risks associated with using technology and to help them become more cyber resilient. It supported the development of the Digital Schools Award and continues to provide schools and early learning and childcare settings with support to self-evaluate their practice and ensure that they are providing a strategic approach to cyber resilience and internet safety. Its digital officers work with a range of partners to support practitioners in schools and early learning and childcare settings to engage confidently with cyber resilience and internet safety experiences and outcomes. Through a range of professional development opportunities delivered by the digital officers, practitioners can explore how they can support young people from the early level to navigate their online life, the risks they may face, how to overcome these and develop resilience.

Since its launch, the CSP has expanded to include:

• Scottish Social Security Council (SSSC) in September 2021
  • The Scottish Social Services Council (SSSC) are the regulator for the social work, social care and early years workforce in Scotland. Its work means the people of Scotland can count on social work, social care and early years services being provided by a trusted, skilled and confident workforce. The SSSC provides resources that support the practice and learning in social and health services.
• College Development Network (CDN) in October 2021
  • CDN supports the college and skills system in driving success for students, their wider communities and regional economies. It engages with thousands of members of staff working in colleges across Scotland through training and network events supporting the learning workforce to develop excellent digital skills, to ultimately raise awareness of cyber resilience within the wider student body and contribute to developing the country's future workforce.
• Youthlink Scotland in October 2021
  • As the national agency for youth work, YouthLink Scotland aims for all young people and their families to be able to make the most of online opportunities, safely and equipped with knowledge and skills to protect themselves and be resilient to challenges. Helping young people to grow their cyber resilience is a key part of the digital youth work offer so that they can be connected and confident in their online lives, and develop vital digital skills for future employment. Its recent projects focused on embedding cyber resilience into youth work and professional learning offers. On 8 February YouthLink Scotland held a Digital Youth Work conference to mark the Safer Internet Day and celebrate the successes of practitioners in working digitally. Mr Hepburn provided a key note address to the delegates.
• CENSIS in December 2021
  • CENSIS is the Innovation Centre for sensor and imaging systems and Internet of Things (IoT) technologies. It helps organisations explore innovation and overcome technology barriers to achieve business transformation, acting as independent trusted advisers, allowing organisations to implement quality, efficiency and performance improvements and fast-track the development of new products and services for global markets. CENSIS helps companies integrate security features during the design stages of IoT products and services, making them 'secure by design' and without impacting their functionality. It works with organisations across Scotland to raise awareness, provide education, demonstrate best practice, and improve access to the best IoT cyber security expertise.
• IASME Consortium in April 2022
  • IASME is the National Cyber Security Centre's Cyber Essentials Delivery Partner. IASME offers a range of effective and affordable cyber security and counter fraud certifications.
• UK Cyber Security Council in October 2022.
  • The UK Cyber Security Council is the self-regulatory body for the UK's cyber security profession. It develops, promotes and stewards nationally recognised standards for cyber security in support of the UK Government's National Cyber Security Strategy to make the UK the safest place to live and work online. Working across 5 pillars – Professional Standards, Ethics, Careers & Qualifications, Outreach & Diversity, and Thought Leadership, the Council is the only body to award the title of Chartered Cybersecurity professional to individuals, alongside Associate and Principal titles.
  • The Council works to standardise the sector, encourage and implement ethical practise, support more people into and through a career in cyber, and increase diversity within the profession.