Cyber resilience - Revision history

Editor at 11:15, 3 February 2022

2022-02-03T11:15:37Z

← Older revision		Revision as of 11:15, 3 February 2022
Line 37:		Line 37:
	There is additional guidance for public sector buyers and suppliers on how to use CSPST in procurement processes.		There is additional guidance for public sector buyers and suppliers on how to use CSPST in procurement processes.

−	= Related articles =	+	= Related articles on Designing Buildings =

	* Cyber security.		* Cyber security.
Line 45:		Line 45:
	* Supply chain.		* Supply chain.
	* Technology helps quash conflict in the supply chain.		* Technology helps quash conflict in the supply chain.
		+	* UK organisations encouraged to review cyber security in response to situation in and around Ukraine.

	= External resources =		= External resources =

Designing Buildings at 05:44, 8 September 2021

2021-09-08T05:44:46Z

← Older revision		Revision as of 05:44, 8 September 2021
Line 1:		Line 1:
	= Introduction =		= Introduction =

−	The Single Procurement Document (Scotland) - also referred to as SPD (Scotland) ~~- is a document that~~ contains questions used at the selection stage for post-Brexit procurement exercises in Scotland to identify suitably qualified and experienced bidders.	+	The Single Procurement Document (Scotland) - also referred to as SPD (Scotland) contains questions used at the selection stage for post-Brexit procurement exercises in Scotland to identify suitably qualified and experienced bidders.

−	The Supplier Journey portion of the Scottish Government’s procurement guidance website offers an overview of the different types of procurement procedures that are available under SPD (Scotland). ~~Within the Supplier Journey is~~ an explanation of cyber resilience of suppliers - ~~a factor that has been highlighted by the SPD (Scotland)~~ as it relates to the Scottish public sector.	+	The Supplier Journey portion of the Scottish Government’s procurement guidance website offers an overview of the different types of procurement procedures that are available under SPD (Scotland). This includes an explanation of the cyber resilience of suppliers - as it relates to the Scottish public sector.

	= Concerns over security =		= Concerns over security =

−	As defined by the [https://www.supplierjourney.scot/glossary Supplier Journey Glossary], cyber resilience is the ability to prepare for, withstand, rapidly recover and learn from deliberate attacks or accidental events in the online world. Cyber resilience measures can help organisations:	+	As defined by the [https://www.supplierjourney.scot/glossary Supplier Journey Glossary], cyber resilience is the ability to prepare for, withstand, rapidly recover and learn from deliberate attacks or accidental events in the online world.
		+
		+	Cyber resilience measures can help organisations:

	* Prepare by protecting them from cyber risks.		* Prepare by protecting them from cyber risks.
−	* Withstand an attack by defending against - and limiting the severity ~~of it~~.	+	* Withstand an attack by defending against and limiting the severity attacks.
	* Recover and learn by ensuring that operations continue despite an attack.		* Recover and learn by ensuring that operations continue despite an attack.

−	~~Cyber resilience may be a high priority in situations where organisations discover their traditional security measures are insufficient and leave them increasingly vulnerable to cyber attacks.~~ The number of cyber attacks targeting suppliers to the public sector has grown. Attacks can (intentionally or otherwise) disrupt and damage both suppliers’ services and public services.	+	The number of cyber attacks targeting suppliers to the public sector has grown. Attacks can (intentionally or otherwise) disrupt and damage both suppliers’ services and public services.

	= Ensuring security =		= Ensuring security =

−	Against this background, the Scottish public sector has taken measures to ensure its suppliers have appropriate cyber security in place~~. The Government considers this to be its responsibility, since it is one of the measures it can take to protect the continuity of service delivery~~.	+	Against this background, the Scottish public sector has taken measures to ensure its suppliers have appropriate cyber security in place.

−	The Government ~~also~~ sees it as an opportunity to build relationships with suppliers that have ~~also~~ invested in cyber security within their organisations~~. By making this commitment, these suppliers demonstrate their willingness to support sustainability and resilience within the supply chain~~.	+	The Scottish Government sees this as an opportunity to build relationships with suppliers that have invested in cyber security within their organisations.

−	The Government has offered resources to assist suppliers that have expressed an interest in adopting a more consistent approach to cyber resilience. These tools are included in a [https://www.gov.scot/publications/cyber-resilience-supply-chain-guidance/ Guidance Note] which has been developed to help public sector bodies embed cyber resilience into the supply chain process.	+	The Scottish Government has offered resources to assist suppliers that have expressed an interest in adopting a more consistent approach to cyber resilience. These tools are included in a [https://www.gov.scot/publications/cyber-resilience-supply-chain-guidance/ Guidance Note] which has been developed to help public sector bodies embed cyber resilience into the supply chain process.

	These resources include:		These resources include:
Line 31:		Line 33:
	* [https://cyberassessment.gov.scot/ Cyber Security Procurement Support Tool] (CSPST).		* [https://cyberassessment.gov.scot/ Cyber Security Procurement Support Tool] (CSPST).

−	~~The CSPST has been developed to help public sector organisations improve the cyber security of the supply chain. However, completing~~ the CSPST questionnaire can be a time consuming process; suppliers are advised to allocate a sufficient amount of time in advance of deadlines in order to participate in the procurement process. There is additional guidance for public sector buyers and suppliers on how to use CSPST in procurement processes.	+	Completing the CSPST questionnaire can be a time consuming process; suppliers are advised to allocate a sufficient amount of time in advance of deadlines in order to participate in the procurement process.
		+
		+	There is additional guidance for public sector buyers and suppliers on how to use CSPST in procurement processes.

	= Related articles =		= Related articles =

Editor at 18:13, 7 September 2021

2021-09-07T18:13:05Z

← Older revision		Revision as of 18:13, 7 September 2021
Line 37:		Line 37:
	* Cyber security.		* Cyber security.
	* Cyber-security and phishing.		* Cyber-security and phishing.
−	* Infrastructure and cyber attacks.
	* Mitigating online risk with Cyber Essentials security.		* Mitigating online risk with Cyber Essentials security.
	* Single Procurement Document (Scotland).		* Single Procurement Document (Scotland).

Editor at 18:11, 7 September 2021

2021-09-07T18:11:26Z

← Older revision		Revision as of 18:11, 7 September 2021
Line 35:		Line 35:
	= Related articles =		= Related articles =

		+	* Cyber security.
		+	* Cyber-security and phishing.
		+	* Infrastructure and cyber attacks.
		+	* Mitigating online risk with Cyber Essentials security.
	* Single Procurement Document (Scotland).		* Single Procurement Document (Scotland).
		+	* Supply chain.
		+	* Technology helps quash conflict in the supply chain.

	= External resources =		= External resources =

Editor at 18:06, 7 September 2021

2021-09-07T18:06:59Z

← Older revision		Revision as of 18:06, 7 September 2021
Line 27:		Line 27:
	* [https://www.gov.scot/publications/using-scottish-cyber-assessment-service-scas-procurement-processes-guidance-public-sector-buyers/ CSPST guidance for buyers].		* [https://www.gov.scot/publications/using-scottish-cyber-assessment-service-scas-procurement-processes-guidance-public-sector-buyers/ CSPST guidance for buyers].
	* [https://www.gov.scot/publications/scottish-cyber-assessment-service-scas-guidance-suppliers/ CSPST guidance for public sector suppliers].		* [https://www.gov.scot/publications/scottish-cyber-assessment-service-scas-guidance-suppliers/ CSPST guidance for public sector suppliers].
−	* Cyber resilience: example tender and contract wording.	+	* [https://www.gov.scot/binaries/content/documents/govscot/publications/advice-and-guidance/2019/10/cyber-resilience-public-sector-supply-chain-guidance/documents/cyber-resilience-example-tender-and-contract-wording/cyber-resilience-example-tender-and-contract-wording/govscot%3Adocument/Example%2BTender%2Band%2BContract%2BWording.docx Cyber resilience: example tender and contract wording].
−	* Cyber resilience: cyber implementation plan and example.	+	* [https://www.gov.scot/binaries/content/documents/govscot/publications/advice-and-guidance/2019/10/cyber-resilience-public-sector-supply-chain-guidance/documents/cyber-resilience-cyber-implementation-plan-and-template/cyber-resilience-cyber-implementation-plan-and-template/govscot%3Adocument/Cyber%2BImplementation%2BPlan%2Band%2BExample.docx Cyber resilience: cyber implementation plan and example].
−	* Cyber Security Procurement Support Tool (CSPST).	+	* [https://cyberassessment.gov.scot/ Cyber Security Procurement Support Tool] (CSPST).

	The CSPST has been developed to help public sector organisations improve the cyber security of the supply chain. However, completing the CSPST questionnaire can be a time consuming process; suppliers are advised to allocate a sufficient amount of time in advance of deadlines in order to participate in the procurement process. There is additional guidance for public sector buyers and suppliers on how to use CSPST in procurement processes.		The CSPST has been developed to help public sector organisations improve the cyber security of the supply chain. However, completing the CSPST questionnaire can be a time consuming process; suppliers are advised to allocate a sufficient amount of time in advance of deadlines in order to participate in the procurement process. There is additional guidance for public sector buyers and suppliers on how to use CSPST in procurement processes.

Editor at 17:27, 7 September 2021

2021-09-07T17:27:01Z

← Older revision		Revision as of 17:27, 7 September 2021
Line 25:		Line 25:
	These resources include:		These resources include:

−	* CSPST guidance for buyers.	+	* [https://www.gov.scot/publications/using-scottish-cyber-assessment-service-scas-procurement-processes-guidance-public-sector-buyers/ CSPST guidance for buyers].
−	* CSPST guidance for public sector suppliers.	+	* [https://www.gov.scot/publications/scottish-cyber-assessment-service-scas-guidance-suppliers/ CSPST guidance for public sector suppliers].
	* Cyber resilience: example tender and contract wording.		* Cyber resilience: example tender and contract wording.
	* Cyber resilience: cyber implementation plan and example.		* Cyber resilience: cyber implementation plan and example.

Editor at 17:25, 7 September 2021

2021-09-07T17:25:34Z

← Older revision		Revision as of 17:25, 7 September 2021
Line 39:		Line 39:
	= External resources =		= External resources =

−	* Scottish Government, Cyber Security Procurement Support Tool: supporting guidance for public bodies.	+	* Scottish Government, [https://www.gov.scot/publications/cyber-resilience-supply-chain-guidance/ Cyber Security Procurement Support Tool: supporting guidance for public bodies].
−	* Scottish Government, Supplier Journey.	+	* Scottish Government, [https://www.supplierjourney.scot/ Supplier Journey].
	* Scottish Government, [https://www.supplierjourney.scot/glossary Supplier Journey Glossary].		* Scottish Government, [https://www.supplierjourney.scot/glossary Supplier Journey Glossary].
		+
		+	[[Category:DCN_Definition]] [[Category:DCN_Guidance]] [[Category:Definitions]] [[Category:Procurement]] [[Category:Public_procedures]]

Editor: Created page with "= Introduction = The Single Procurement Document (Scotland) - also referred to as SPD (Scotland) - is a document that contains questions used at the selection stage for post-Bre..."

2021-09-07T17:16:31Z

Created page with "= Introduction = The Single Procurement Document (Scotland) - also referred to as SPD (Scotland) - is a document that contains questions used at the selection stage for post-Bre..."

New page

= Introduction =

The Single Procurement Document (Scotland) - also referred to as SPD (Scotland) - is a document that contains questions used at the selection stage for post-Brexit procurement exercises in Scotland to identify suitably qualified and experienced bidders.

The Supplier Journey portion of the Scottish Government’s procurement guidance website offers an overview of the different types of procurement procedures that are available under SPD (Scotland). Within the Supplier Journey is an explanation of cyber resilience of suppliers - a factor that has been highlighted by the SPD (Scotland) as it relates to the Scottish public sector.

= Concerns over security =

As defined by the [https://www.supplierjourney.scot/glossary Supplier Journey Glossary], cyber resilience is the ability to prepare for, withstand, rapidly recover and learn from deliberate attacks or accidental events in the online world. Cyber resilience measures can help organisations:

* Prepare by protecting them from cyber risks.
* Withstand an attack by defending against - and limiting the severity of it.
* Recover and learn by ensuring that operations continue despite an attack.

Cyber resilience may be a high priority in situations where organisations discover their traditional security measures are insufficient and leave them increasingly vulnerable to cyber attacks. The number of cyber attacks targeting suppliers to the public sector has grown. Attacks can (intentionally or otherwise) disrupt and damage both suppliers’ services and public services.

= Ensuring security =

Against this background, the Scottish public sector has taken measures to ensure its suppliers have appropriate cyber security in place. The Government considers this to be its responsibility, since it is one of the measures it can take to protect the continuity of service delivery.

The Government also sees it as an opportunity to build relationships with suppliers that have also invested in cyber security within their organisations. By making this commitment, these suppliers demonstrate their willingness to support sustainability and resilience within the supply chain.

The Government has offered resources to assist suppliers that have expressed an interest in adopting a more consistent approach to cyber resilience. These tools are included in a [https://www.gov.scot/publications/cyber-resilience-supply-chain-guidance/ Guidance Note] which has been developed to help public sector bodies embed cyber resilience into the supply chain process.

These resources include:

* CSPST guidance for buyers.
* CSPST guidance for public sector suppliers.
* Cyber resilience: example tender and contract wording.
* Cyber resilience: cyber implementation plan and example.
* Cyber Security Procurement Support Tool (CSPST).

The CSPST has been developed to help public sector organisations improve the cyber security of the supply chain. However, completing the CSPST questionnaire can be a time consuming process; suppliers are advised to allocate a sufficient amount of time in advance of deadlines in order to participate in the procurement process. There is additional guidance for public sector buyers and suppliers on how to use CSPST in procurement processes.

= Related articles =

* Single Procurement Document (Scotland).

= External resources =

* Scottish Government, Cyber Security Procurement Support Tool: supporting guidance for public bodies.
* Scottish Government, Supplier Journey.
* Scottish Government, [https://www.supplierjourney.scot/glossary Supplier Journey Glossary].