³ÉÈË¿ìÊÖ

Skip to main content
Loading…

Chamber and committees

Official Report: search what was said in Parliament

The Official Report is a written record of public meetings of the Parliament and committees.  

Filter your results Hide all filters

Dates of parliamentary sessions
  1. Session 1: 12 May 1999 to 31 March 2003
  2. Session 2: 7 May 2003 to 2 April 2007
  3. Session 3: 9 May 2007 to 22 March 2011
  4. Session 4: 11 May 2011 to 23 March 2016
  5. Session 5: 12 May 2016 to 5 May 2021
  6. Current session: 12 May 2021 to 10 August 2025
Select which types of business to include


Select level of detail in results

Displaying 1378 contributions

|

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

Are you saying that we have good resilience but we need to build more resilience in our capabilities?

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

It will be a consul general.

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

I have attended events during cyber Scotland week, which takes place in February or March each year. In 2020, one of the most powerful presentations that I saw was from colleagues from Estonia; conversations with them were also some of the most powerful. In that jurisdiction, they are right on the edge of Europe, and they spend a lot of time combating cybersecurity attacks from the Russian state. Are we learning from those countries, which are at the forefront of not just the battle but the expertise?

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

Do we have the resilience in the public sector?

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

Some public sector organisations could have better resilience, in particular given the attacks that have happened in the examples that you cite, which include some local authorities and health boards.

I think that SEPA is the only national agency in Scotland that has been the victim of a major cyberattack, which would suggest that a number of the national agencies are secure. I just want to give the public that reassurance. We might want to ask the Government for that, as a follow-up to today’s meeting, but I do not want to create undue alarm.

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

I am sure that you would want me to say this, convener, as would others. For anyone listening, if anyone phones you pretending to be your bank, hang up and then phone your bank back. That is a really important message to send out.

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

What I take from that—correct me if I am interpreting you incorrectly—is that some business organisations have good resilience, but many could have better resilience—

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

We are aware of the countries that a lot of the organisations that undertake cyberattacks work from—Russia being one of them—taking money from law-abiding people in our democratic country out of our country to other places. Is there a wider concern about that finance being part of the build-up of power and abilities by organised crime groups or whatever groups there might be in other jurisdictions? Everyone is aware that there are organisations in Russia that carry out organised cyberattacks, but where else in the world does that happen?

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

I appreciate that. There are lots of people like me in that space, in that fraudsters have tried to steal from us, but we managed to recognise something as a scam at the right point, so it did not happen. How important is it for someone who is not a victim of a fraud—who becomes aware that someone is not a genuine person calling from their bank or wherever—still to report it? Is that intelligence useful to you? Should people report such incidents, so that you are getting the widest availability of evidence from the public?

Criminal Justice Committee [Draft]

Cybercrime

Meeting date: 14 May 2025

Ben Macpherson

I will bring in Nicola Taylor in just a moment. First, I want to add a point to the discussion, if anyone wants to say anything in response. Jude McCorry talked about young people being more savvy and the need for greater awareness among those in the population who are potentially more vulnerable. However, there is also—as David Keenan talked about—demand from businesses and public sector organisations for the capability within their workforce to be able to counter this type of crime. Do we need to do more to build skills and capacity in the population in order to have enough specialists to cover all the organisations that will need protection?