CATEGORIES
CyberScotland BulletinsThe CyberScotland Bulletin is designed to provide you with information about the latest threats, scams, news and updates covering cyber security and cyber resilience topics. We hope you continue to benefit from this resource and we ask that you circulate this information to your networks, adapting where you see fit. Please ensure you only take information from trusted sources.
If there are any cyber-related terms you do not understand, you can look them up in the NCSC Glossary.
Please subscribe to our CyberScotland mailing list to be notified by email when a new bulletin is published.
Keep up to date on social media, follow us on Twitter and LinkedIn.
National Cyber Security Centre (NCSC)
New Supply Chain Mapping Guidance
Many organisations rely upon suppliers to deliver products, systems, and services and weaknesses in the supply chain can be a major cyber security risk for organisations. The NCSC has published new guidance to help organisations better understand the process of recording, storing and using information from suppliers.
The new ‘mapping your supply chain’ guidance explains:
- What supply chain mapping is, why it’s important and how it can benefit your organisation
- What information it will typically contain
- The role of sub-contractors that your suppliers may use
- What this means when agreeing contracts
The NCSC has additional guidance on how to access and gain confidence in your supply chain security
Trending topics
CyberScotland Partnership’s second anniversary
The CyberScotland Partnership is celebrating its second anniversary as a vital collaboration, providing clear and coherent information to support individuals and organisations in their efforts to stay secure and resilient.
Over the past year, the Partnership has collaborated on cyber security campaigns for various audiences, creating resources to help organisations prepare for cyber incidents. A new cybercrime training guide was also developed to help employers and staff understand their role in preventing cyber attacks, while a television campaign titled “DIGI Ken” aimed to educate the public on how to protect themselves online.
With the continued support of the partners, it is well-positioned to continue this important work in the coming year, ensuring that organisations and individuals throughout Scotland are more cyber-resilient.
CyberScotland Week 2023
A highly successful week of events took place last week as part of the annual CyberScotland Week celebrations.
Now into its fifth year, the week attracted over 130 engaging and informative events, for people across Scotland to attend. The week has become a highly anticipated event, drawing in top speakers from across Scotland, the UK (including the CEO of the National Cyber Security Centre), and even internationally, such as the FBI, to share their insights and expertise.
The week proved very popular and demonstrated the growing interest in this subject area. Some of the week’s events have been recorded and these will be added to the CyberScotland Week website in the upcoming week.
Thank you to everyone that got involved, from hosting events, attending them, or raising awareness online.
Donating to charities safely
If you are thinking about donating money online, be careful of scammers who may look to take advantage.
Consumer group Which? have noted that criminals have set up fake accounts on social media that pretend to collect donations for the victims affected by the Turkey-Syria earthquake. The fake profiles and websites contain misleading or false information and are asking people to send donations via cryptocurrency, non-fungible tokens (NFTs), or PayPal.
To avoid these scams, it is important to donate to legitimate charities and only use secure payment methods. Be cautious of any links asking you to donate which come via email, phone call, text message or social media. Make sure to verify that your donations are going to a trusted organisation.
In Scotland, all charities must be registered, and an online register of charities is maintained by the Office of the Scottish Charity Regulator (OSCR).
The Disasters Emergency Committee (DEC) is an umbrella body that brings together 15 UK aid charities in times of crisis. It has an ongoing Ukraine Humanitarian Appeal, Pakistan and Turkey-Syria appeals should you wish to donate.
Training and Webinars / Events
Public and Third Sector Cyber Roadshow
Cyber and Fraud Centre – Scotland is delivering a series of events for public and third-sector organisations across the country.
These events will focus on discussing some key cyber security topics you and your organisation or charity should be considering for 2023. Everything discussed will tie in with additional resources available and will help you fully utilise these within your organisation or charity. Each event will be in person giving everyone an excellent chance of networking with others working within the public and third sector with an interest in cyber security.
Book for an upcoming event
IT Managed Service (ITMS) Community Event – Improving Scotland’s Cyber Resilience, Inverness
This event hosted by ScotlandIS is designed for IT Managed Service Providers and associated cyber organisations.
Presenters will provide insight on several topics that have been requested by the ITMS community, including a cybersecurity exercise demonstration and a real-life horror story of what can happen when your business isn’t protected. Attendees will also gain insight into the Cyber Essentials accreditation from IASME.
This is a great chance to bring together this community in the North of Scotland to gain insights and share experiences and the potential for collaboration.
15th March, 10 am – 4 pm: Sign up here
Online Safety Live Scotland, By UK Safer Internet Centre
Online Safety Live Scotland is a series of free online safety briefings, designed exclusively for professionals working with children and young people. These 1.5 hour events from 20th – 24th March will cover the latest issues, trends, research, resources and advice for supporting young people in their online lives.
Book now for Livingston, Carnoustie, Dundee, Aberdeen, Larbert or Musselburgh at https://saferinternet.org.uk/events.
NCSC Digital Loft: Deep Dive Session Changes to Cyber Essentials 2023
The NCSC and its Cyber Essentials delivery partner, IASME, have announced that the technical requirements for Cyber Essentials will be updated in April.
This annual update aims to ensure that organisations with Cyber Essentials continue to guard against the vast majority of common cyber attacks.
To coincide with the publication of the refreshed requirements, NCSC will be hosting a deep dive session on the technical changes on the 14th of March 2023, 10.30 am – 12.00 pm.
Register today to get a preview of the changes and make sure you have all the info you need before the update goes live in April.
CyberUK 2023
Applications for CYBERUK 2023, which will be taking place on 19-20th April in Belfast, are still open.
For more information about the event, including programme announcements, visit the CYBERUK website.
You can also check out the CYBERUK YouTube channel. There you’ll find a range of content from previous events, conversations, topic reviews and insights into the forthcoming event. They will also be adding new content regularly in the lead-up to CYBERUK 2023.
CYBERUK applications close on 17th March
