Information

Scottish Cyber Coordination Centre - organisational cyber testing and exercising regime: guidance

Outlines a cyber exercising regime to enhance preparedness and recovery from incidents across technical, operational, and strategic levels. It provides guidance for the Scottish public sector, offering a structured approach to testing and exercising, tailored to an organisation's size.


Advanced Capability

For organisations with a mature cyber capability and who have previously engaged in Red Team exercises, consideration should be given to undertaking advanced threat based exercising such as the Cabinet Office GBEST Penetration programme[1] which is being rolled out across UK Government Departments. This is based on the CBEST model used within the Financial Sector and is available from the G-Cloud 13 procurement framework.[2]

Contact

Email: SC3@gov.scot

Back to top