Organisations across Scotland are being urged to strengthen their defences against escalating cyberattacks, which are increasingly being driven by AI.
The Scottish Government has launched a free e-learning course to help workers recognise and respond to online threats, which are becoming more sophisticated, ‘relentless’ and ‘opportunistic’.
Cyber Resilience and You in the Workplace was developed with the National Cyber Security Centre (NCSC) and is open to people working in any sector or organisation in Scotland and beyond.
With the aims of giving staff the skills and confidence to identify cyber risks and respond effectively, the launch follows a stark warning from the NCSC.
Its annual review, The State of the Cyber Nation, was published on 3 November and shows over the last year, there were 1,831 attack reports, 337 incidents supported and 80 classed as ‘nationally significant’.
The NCSC also judges an AI-powered ransomware attack on UK critical infrastructure ‘highly likely’ by 2028 with chief executive Dr Richard Horne warning of a possible ‘unprecedented rise’ in the coming months.
Last year’s UK Government Cyber Security Breaches Survey also found that almost half of UK businesses had experienced a cyber security breach or attack in the previous 12 months. Phishing emails, ransomware, compromised passwords and data breaches can leave organisations of any size facing disruption, financial loss and damage to their reputation.
According to the review, most successful attacks still used familiar methods: known flaws in internet-facing systems, stolen credentials and social engineering.
The new course offers practical guidance on spotting phishing attempts, protecting accounts and devices, and understanding how each person’s actions contribute to their organisation’s cyber resilience.
Learners work through real-world workplace scenarios that show how cyber incidents can affect organisations of all sizes and sectors. These guide them through common situations so they can identify potential threats and take simple steps to reduce risk.
Organisations rely more and more on digital technology, and cyber resilience has become a critical business capability. The training is designed for workers in any role, sector or level of technical experience and helps them build practical security habits they can use both at work and at home.
Justice Secretary Neil Gray said: “Cyber threats continue to evolve, affecting organisations of all sizes and sectors across Scotland, and it is more important than ever that organisations take steps to strengthen their cyber resilience.
“The new and free Cyber Resilience and You in the Workplace training gives businesses the knowledge and confidence to recognise common cyber threats, protect themselves online and play their part in keeping their organisation secure.
“I encourage employers across Scotland to take advantage of this training to help build a stronger culture of cyber resilience.”