Skip to main content
Loading…

Chamber and committees

Official Report: search what was said in Parliament

The Official Report is a written record of public meetings of the Parliament and committees.  

Filter your results Hide all filters

Dates of parliamentary sessions
  1. Session 1: 12 May 1999 to 31 March 2003
  2. Session 2: 7 May 2003 to 2 April 2007
  3. Session 3: 9 May 2007 to 22 March 2011
  4. Session 4: 11 May 2011 to 23 March 2016
  5. Session 5: 12 May 2016 to 4 May 2021
  6. Current session: 13 May 2021 to 8 March 2026
Select which types of business to include


Select level of detail in results

Displaying 2032 contributions

|

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

The evidence session has deliberately been allowed to drift into areas of general concern about cybersecurity rather than focusing on just the LCM—I ask the cabinet secretary to indulge us on that, given that we are the Economy and Fair Work Committee.

I have a final question. How is cyber generally being managed in the Government? Is it your directorate that, by reacting to criminal situations, is leading on cyber and feeding that through to other directorates? Cyber has potential impacts for every cabinet secretary and minister, and they should all be alive to that.

It would be helpful to understand how the approach is working at a high level, which may be something that a future iteration of this committee wants to follow up.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

But that is a reactive response rather than being proactive, which is the point that I am getting at.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Gordon MacDonald also has a supplementary.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

I think that that is clearly understood.

My follow-on question is on timescales. I know that there has been a carry-over motion in Westminster. Set against the backdrop of urgency—the legislation being required due to the increase in incidents and our inevitably going into dissolution and an election campaign—what is your thinking on, or what discussions have been had and arrangements made with the UK Government about, the urgency with which this will be taken forward once the new session of the Scottish Parliament gets under way?

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

I just want to pick up on bottoming out on costs. Our primary interest today is the LCM, but there are going to be general increased costs to businesses as a result of the need to be uber-alert to cyber threats. Do you think that the bill and the way that any new Scottish Government treats it will emphasise the need for all levels of business to be aware of such threats? I am not entirely sure that there is the level of awareness that there needs to be from a purely economic perspective.

Economy and Fair Work Committee [Draft]

Decision on Taking Business in Private

Meeting date: 4 March 2026

Michelle Thomson

Good morning and welcome to the seventh meeting in 2026 of the Economy and Fair Work Committee. I will chair today’s meeting, because our convener, Daniel Johnson, has given his apologies. Lorna Slater has also given apologies.

Our first agenda item is consideration of whether to take items 3 and 4 in private. Are members agreed to take those items in private?

Members indicated agreement.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Under agenda item 2, I welcome to the meeting the Cabinet Secretary for Justice and Home Affairs, Angela Constance. She is accompanied by Scottish Government official Paul Chapman, who is head of public sector cyber resilience.

I understand that you would like to make a short opening statement, cabinet secretary.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Stephen Kerr has a supplementary.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Thank you. That concludes the public part of the meeting.

09:46

Meeting continued in private until 10:14.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Before I bring in the next colleague, I want to ask one more question. Not that long ago, I was out with the Finance and Public Administration Committee in Lithuania, which runs its entire estate off client-server architecture. It has thousands upon thousands of cyberattacks. Given the sophistication of how it runs its estate and the volume of cyberattacks that it has, has anybody from the Scottish Government reached out to Lithuania to ask about best practice? Lithuania’s geographic location probably indicates why it has had such an increase in attacks, but it might be worth while considering that approach.