A new Cyber Observatory will be established to shield Scotland’s public services from the surge in online threats, including disruptive ransomware.
Ministers have launched a refreshed Strategic Framework for a Cyber Resilient Scotland today with a package of measures designed to fortify schools, local authorities, NHS boards and other public bodies.
At the heart of the refresh is the Scottish Cyber Coordination Centre’s Cyber Observatory: a mission-critical early-warning hub that will monitor threat intelligence across the public sector and alert organisations to emerging risks so they can respond before disruption takes hold.
The scale of the threat is stark. Across the UK, ransomware attacks on public services have increased dramatically, with Scotland no exception.
In recent years, major incidents have hit NHS Dumfries & Galloway, where sensitive patient and staff data were stolen and published online, and West Lothian Council, whose education network was crippled by a ransomware attack in May 2025.
Police Scotland has reported nearly 15,000 cybercrime incidents in the past year alone, and independent reviews suggest public sector attacks have risen by more than 90% since 2020.
As part of the refreshed framework, the Scottish Government will continue to expand cybersecurity education in schools, colleges and universities, while investing £300,000 through the Upskilling Fund to strengthen the cyber skills of the public sector workforce.
Together, the framework and observatory aim to embed cyber resilience into system design and safeguarding the critical services that people across the country rely on every day.
Justice Secretary Angela Constance said: “Digital technology is driving Scotland’s economic growth and shaping our future. That’s why cyber resilience and digital safety are more important than ever.
“We all rely on websites, apps, systems, and data in our daily lives – and while they bring great benefits, we must ensure they are safe and secure to use. Cyber threats are evolving rapidly, and it is our shared responsibility to meet the challenges facing Scotland. The Scottish Cyber Coordination Centre’s Cyber Observatory in particular will be vital in alerting organisations to potential threats.
“This strategic framework promotes essential collaboration across government and sectors. Those partnerships are vital to keep our people, businesses, and services safe – and for building a digitally secure and resilient Scotland.”
Karen Meechan, CEO of ScotlandIS and Chair of the CyberScotland Partnership, said: “A cyber resilient Scotland is built on partnership. This framework sets out not just what we need to protect, but how we work together across public, private and third sectors to do it. Our resilience depends on our shared commitment to act, learn and support one another.”