Award of Public Sector Cyber Resilience Framework Refresh

Tender description

The Scottish Government wishes to commission work to refresh the Public Sector Cyber Resilience Framework by updating the existing framework to take account of changes to cyber security standards and lessons learned over the past 3 years. The Public Sector Cyber resilience Framework (PSCRF) was developed to provide a common, effective approach for Scottish public bodies to assess their levels of cyber resilience, ensure they adhere to minimum cyber resilience requirements, and progress towards achieving higher levels of cyber resilience on a risk-based and proportionate basis. The PSCRF was also designed to help public sector bodies understand how various cyber security standards, elements of guidance and accreditations/certifications related to each other. The Framework was developed by mapping and extracting the unique controls from a number of cyber security and information standards and guidance. These standards have inevitably been updated over the past few years and as a result the PSCRF now needs to be updated to reflect this. In addition, the experiences of the sector in applying the PSCRF have also highlighted a number of learning points which should also be factored in to a refresh of the framework.