Advice and guidance

1 Go to resource

Scottish Public Sector Supplier Cyber Security Guidance Note

The security of supply chains is increasingly important as we often see cyber incidents affect public sector bodies indirectly through their suppliers. This guidance note promotes the adoption of a consistent approach to supplier cyber security across the Scottish public sector.

Related resources

CSPST: Guidance for suppliers

Guidance for suppliers on how to embed use of the Cyber Security Procurement Support Tool into the procurement process.

Cyber Cluster Events

A list of all the Scottish Cyber Cluster events.

Training for Small Organisations and Charities

The training demonstrates how you can improve your organisation’s resilience, and covers five key areas. You’ll explore each of these topics by navigating several encounters a small business owner may have with cyber security over the course of a week, […]

Cyber First Aid Box

The Cyber First Aid Box is an online resource that contains information about cyber security. It will help you support your child’s recovery after a negative online experience. You will find: Practical information about online safety & security. Links to […]

Public Sector Cyber Incident Co-ordination Procedure

Outlines the procedures for notifying and coordinating responses to notifiable cyber incidents affecting Scotland’s public services. It defines the agreed-upon cyber incident notification process adopted by the Scottish public sector since 2018.

Business email compromise: defending your organisation

This guidance helps small to medium sized organisations deal with businessemail compromise (BEC). It provides actions to help businesses reduce thelikelihood of being affected by BEC, and includes steps to take if you think yourorganisation has already been compromised.