Scottish Cyber Assessment Service: guidance for suppliers
Guidance for suppliers on how to embed use of the Scottish Cyber Assessment Service into the procurement process.
- The cyber security of suppliers is increasingly important to the Scottish public sector. The number of cyber attacks targeting suppliers to the public sector has grown in recent years. Attacks can (intentionally or otherwise) disrupt and damage both suppliers’ services and public services. Against this background, the Scottish public sector wants to ensure its suppliers have appropriate cyber security in place. That’s because:
- We have a duty to prevent our public services from being disrupted by cyber attacks on suppliers; and
- We want to support our suppliers to improve their cyber security, because it’s good for the sustainability and resilience of our digital economy and society.
- To help improve supply chain cyber security, the Scottish public sector is being encouraged to adopt a more consistent approach. This will involve them implementing:
- A Guidance Note, which has been produced for all public sector organisations, setting out best practice from the National Cyber Security Centre (the UK technical authority on cyber security).
- A beta version of a decision-making support tool called the Scottish Cyber Assessment Service (SCAS), which all suppliers bidding for public sector contracts may be asked to use.
- This guidance is for suppliers to the public sector who wish, or who have been asked, to make use of the SCAS tool. It provides some basic information about how to use the tool, and what its benefits are expected to be.
- Completing a SCAS questionnaire can require time and effort, depending on (i) the risk profile of a contract and (ii) how well you understand your organisation’s cyber resilience arrangements.
- It is vital that you leave sufficient time for your organisation to complete the SCAS questionnaire ahead of any procurement deadlines.
- The SCAS tool itself has been designed to be intuitive to use, and includes links to guidance and advice for suppliers. You can also access a presentation on SCAS here.
Future development of SCAS
- A public sector working group has been established to oversee developments and improvements to the beta version of the SCAS tool. Following an initial operational period of 6 months, we expect an updated version of SCAS to be put in place.
- The Scottish Government would welcome feedback from suppliers on the beta version of the SCAS tool. Please send all feedback to firstname.lastname@example.org, or complete the beta tool survey here.
Latest News from
SQA results12/08/2020 15:05:00
Downgraded results scrapped; qualifications to be based on teacher judgement.
Deputy First Minister - SQA 2020 results12/08/2020 13:43:00
Statement given by Education Secretary John Swinney to the Scottish Parliament on 11 August, 2020
Investing in our future workforce12/08/2020 10:05:00
Scotland’s future workforce will be at the heart of rebuilding the economy following the coronavirus (COVID-19) pandemic, Economy Secretary Fiona Hyslop said.
Development of a seabird sensitivity mapping tool for Scotland: final report11/08/2020 15:05:00
Development and demonstration of a tool to estimate the relative sensitivities of protected seabird populations to offshore licensed activities.
VJ Day 75th Anniversary11/08/2020 12:05:00
An online service of remembrance and concert, as well as a two-minute silence, will lead Scotland’s commemoration of the 75th anniversary of Victory in Japan (VJ) Day on 15 August.
Water Quality Regulator says Scotland’s tap water quality remains high11/08/2020 10:05:00
The Drinking Water Quality Regulator (DWQR) for Scotland’s latest annual report shows that Scottish Water’s compliance with the stringent standards for drinking water remains high at 99.92%.
£2.9 million more for social care11/08/2020 08:05:00
Funding for 31 third sector projects in social care has been extended to March 2022 with the announcement of an additional £2.9 million of Scottish Government backing.
Importance of self-isolation10/08/2020 16:33:00
Test and Protect vital to containing spread of COVID-19.