Promoting digital literacy, online safety, and Information Security Awareness (ISA) in the Scottish public sector: A thematic content analysis of cyber resilience frameworks

Ovie, Collins; Haynes, David; Cruickshank, Peter

Abstract

This study investigates the promotion of digital literacy, online safety, and Information Security Awareness (ISA) among Scottish public sector employees by analysing policy frameworks. This paper compares the Scottish Public Sector Cyber Resilience Frameworks PSCRF (v1.0 and v2.0), identifying key strategies and patterns embedded in these documents by employing a thematic content analysis. The analysis reveals five critical themes: training and awareness, governance and accountability, risk management, inclusivity and access, and technological integration. These findings illuminate how the frameworks address the challenges of fostering a digitally literate and cyber-resilient workforce.

The original contribution of this study is: (a) the evaluation of how policy frameworks operationalise digital literacy, safety, and ISA through structured training and governance mechanisms; and (b) the identification of gaps and opportunities for advancing public sector practices, particularly in addressing behavioural factors influencing employee engagement. The findings offer actionable insights for improving cybersecurity policies and practices within public sector organisations and contribute to broader discussions on workforce readiness in an increasingly digitalised landscape.

Citation

Ovie, C., Haynes, D., & Cruickshank, P. (2025, June). Promoting digital literacy, online safety, and Information Security Awareness (ISA) in the Scottish public sector: A thematic content analysis of cyber resilience frameworks. Presented at SKIMA 2025: 16th International Conference on Software, Knowledge, Information Management & Applications, Paisley, Scotland

• Presentation Conference Type: Conference Paper (published)
• Conference Name: SKIMA 2025: 16th International Conference on Software, Knowledge, Information Management & Applications
• Start Date: Jun 9, 2025
• End Date: Jun 11, 2025
• Acceptance Date: Apr 16, 2025
• Deposit Date: May 10, 2025
• Peer Reviewed: Peer Reviewed
• Keywords: digital literacy, online safety, information security awareness, public sector organisations, cyber resilience framework
• Public URL: http://researchrepository.napier.ac.uk/Output/4288079
• Publisher URL: https://ieeexplore.ieee.org/xpl/conhome/1800570/all-proceedings
• External URL: https://skimanetwork.org/