Follows organisational rules and policies in relation to online safety and cyber security
On this page you'll find links to resources to help you follow organisational rules and policies in relation to online safety and cyber security.
Select your current capability level to jump to aligned resources:
When you open the links included on this page, you may be presented with messages about cookies. To find out more about what cookies are and how you can manage them safely, have a look at this guidance: Digital Unite - What is a Cookie?
Not at Level 1
Follows organisational rules and policies in relation to online safety and cyber security
Not at Level 1 - I need to learn more about organisational rules that exist to ensure technology is used safely and securely.
Your organisation will have rules and policies in relation to online safety and cyber security. If you're not already aware of these, you should speak to your line manager about how to access the documents and familiarise yourself with the contents. You may also want to look for relevant information on your organisation's intranet or by speaking to information governance colleagues, if these are available.
Local rules and policies often exist to protect organisations against cyber security threats, so it's important to understand what cyber security actually is. Although developed for councils, this short video (2m57s) provides a general overview of cyber security and explains some of the key cyber terms you might hear: Local Government Association - What is Cyber Security?
For further resources, visit the Identity, Safety and Wellbeing page of the Digital and Data Resource Hub.
Level 1
Follows organisational rules and policies in relation to online safety and cyber security
Level 1 - I know I must comply with organisational rules that exist to ensure technology is used safely and securely in order to protect staff and those who use services. I regularly complete my organisation’s training on this, always put what I have learned into practice, and I am confident I know how to access further information if needed.
Your organisation will have rules and policies in relation to online safety and cyber security. Familiarise yourself with the contents of these, and make sure your current practices don't breach any of the guidelines. Speak to your line manager or information governance colleagues if you're not sure.
Check that your mandatory training in relation to online safety and cyber security is complete and up to date. If you feel you need to, take a refresher of the training and be sure to note down any key information that you might use in your daily practice, as well as details of how to access further information and key contacts you can go to if you have questions.
Develop your knowledge of cyber security threats by watching this short video (4m9s) which covers some of the most common types of cyber attack: Goldphish Cyber Security Awareness Training - Introduction to Cyber Security
To learn more about the potential impact of a cyber attack, have a look at this article which describes a cyber attack on NHS Dumfries and Galloway that took place in March 2024: BBC News - Hackers Threaten to Publish Huge Cache of NHS Data
For further resources, visit the Identity, Safety and Wellbeing page of the Digital and Data Resource Hub.
Level 2
Follows organisational rules and policies in relation to online safety and cyber security
Level 2 - I have good knowledge of the guidelines, policies and legislation that apply to online safety and cyber security and am confident I comply with these. I understand the potential impact of a cyber security incident and I follow organisational procedures to report any suspicious activity or potential issues.
Ensure you know how to access your organisation's procedures that apply to online safety and cyber security. Familiarise yourself with the contents so that you are comfortable reporting any potential security issues.
Watch this webinar to hear expert knowledge on cyber security and why this is such an important topic for leaders today: NHS Education for Scotland (NES) - Cyber Security : Why it Matters
Use this helpful glossary from the National Cyber Security Centre (NCSC) to look up any terminology you are not sure of. You may also want to check through the list in case there are other words or phrases that you'd like to know more about: NCSC - Glossary
This short video covers a range of online threats including social engineering and pretexting: NHS National Services Scotland - Counter Fraud Services Cybercrime
Have a look at this information from the World Health Organisation (WHO) which looks specifically at cyber security across health and social care services: WHO - Cyber-attacks on Critical Health Infrastructure
For further resources, visit the Identity, Safety and Wellbeing page of the Digital and Data Resource Hub.
Level 3
Follows organisational rules and policies in relation to online safety and cyber security
Level 3 - I have in-depth knowledge of the guidelines, policies and legislation that apply to online safety and cyber security, and I champion compliance across my organisation. I am aware of the cyber threats to my organisation and take measures to reduce risk, contributing to continuity plans and offering advice to others.
Use this list to check your current knowledge on information security. If you're not confident in any of these areas, use the terms on this list as a prompt to search online for more details: SWGFL - 12 Vital Information Security Steps
As digital technologies evolve around us, so do the tools and software of cyber attackers. It's therefore important to consider how we can future-proof our approach to cyber security. Have a look at this article which presents some emerging cyber security threats: Forbes - The Future Of Cybersecurity: Emerging Threats And How To Combat Them
For further resources, visit the Identity, Safety and Wellbeing page of the Digital and Data Resource Hub.