Strengthening Scotland’s Cyber Resilience

As an amendment to motion S7M-01517 in the name of Neil Gray (Strengthening Scotland’s Cyber Resilience), insert at end “considers that, despite a substantial framework of strategies, significant gaps remain in the implementation of cyber resilience across Scotland’s public sector; expresses concern that only 64% of Scottish public sector organisations have reported carrying out cyber resilience exercises in the previous 12 months; believes that the priority should now be the effective implementation, testing and enforcement of existing cyber resilience standards and to resist the tendency to create further strategies and frameworks to achieve simple objectives; understands that resource constraints are limiting the ability of organisations to implement lessons learned from incidents and exercises to address identified weaknesses, and calls on the Scottish Government to establish clear minimum standards for regular testing of cyber defences and incident response arrangements across the public sector, and to ensure that public bodies have sufficient financial, technical and specialist resources to address identified vulnerabilities."