Advice and guidance

1 Go to resource

Cyber Strategy for Small Organisations

CyberScotland partner Cyber and Fraud Centre – Scotland has released a new cyber strategy guide for small organisations.

A comprehensive cyber security strategy is crucial to protect organisations, individuals, and governments from devastating cyber attacks. This guide is designed to aid small organisations in developing their cyber strategy, regardless of their current posture, by providing concise guidance and additional information through links. The guide can be used as a checklist tool for prioritisation, with short-term actions providing immediate protection against opportunistic attacks, medium-term actions protecting against more targeted attacks, and long-term actions involving outside audits and certifications.

To download the free guide, visit: https://www.cyberscotland.com/cyber-strategy-for-small-organisations/

Related resources

Student online safety guide 2025

Police Scotland shares advice for students on how to stay safe online. Common frauds that students are experiencing today can range from the more recognisable face-to-face to those carried out by someone anonymously online. This guide will equip you with […]

The Cyber Assessment Framework (CAF) / NCSC CAF Guidance

The Cyber Assessment Framework (CAF) provides guidance for organisations responsible for vitally important services and activities.

How to get cyber essentials certified IASME

NCSC Cyber Essentials Partner the IASME consortium can help your organisation undertake Cyber Essentials certification or if you want to know how you can become a Certification Body.

Remote Access Fraud

The use of remote access software in committing crime online is not very wellknown, let alone how easily criminals use this method to attack unassumingvictims. Remote access scams occur where online business and individual accounts arecompromised by cyber criminals and […]

Passwords & Two-Step Verification

This guide explains how to create strong, unique passwords (for example using three random words) and why you should never reuse passwords across accounts. It also introduces Two‑Step Verification (2SV) – also called Two‑Factor Authentication (2FA) – as a vital […]

Sextortion

Sextortion is a type of cyber-enabled extortion which involves the threat of sharing sexual information, images or clips to extort money from you, whether images actually exist or not. Police Scotland have advice on what you can do to reduce […]