Cyber Scotland Week
Cyber Scotland Week 2026 begins today, Monday 23 February, spotlighting this year’s theme: “Can’t hack it?”
The campaign focuses on the simple, everyday actions that everyone can take to strengthen their cyber resilience - both at home and at work. Improving cyber resilience doesn’t need to be complex, but it does rely on awareness and consistent, practical steps.
To mark Cyber Scotland Week, the council’s Cyber Security Team will be sharing a series of short, informative articles on the Cyber Security landing page on Connects throughout the week.
These will cover common cyber risks, real examples of threats facing Scottish public‑sector organisations, and practical guidance you can apply immediately.
We will also be hosting an interactive webinar on Thursday 5 March at 2pm, where we’ll explore:
- the current cyber security landscape across the Scottish public sector
- the latest threats affecting local authorities
- practical ways to stay secure in your day‑to‑day work
- steps you can take at home to protect your personal data
Sign up for the interactive Cyber Security webinar.
Today's focus: Strengthening your passwords and using Multi‑Factor Authentication (MFA)
A huge number of cyber incidents begin with weak or compromised passwords. Strengthening your passwords and setting up a strong multi-factor authentication method are two of the simplest and most effective steps you can take to protect your work and personal accounts.
Here are our top tips:
- 1. Use strong, unique passwords
Choose passwords that are complex, long and include uppercase and lowercase letters, symbols, and numbers - consider using a passphrase made up of unrelated words.
Never reuse passwords across work and personal accounts. If one site is breached, attackers will try the same details elsewhere.
2. Set up multi-factor authentication (MFA) methods
MFA adds a second layer of protection, such as an approval prompt on your phone.
Even if your password is stolen, MFA can stop attackers from getting in.
3. Be cautious of suspicious login prompts
Unexpected MFA requests could be a sign that someone has your password and is trying to access your account.
If you receive an MFA prompt you didn’t request, deny it and report to the Cyber Security team or IT at the earliest opportunity.
More guidance coming this week
Throughout Cyber Scotland Week 2026, we’ll be covering:
- spotting phishing and smishing attempts
- staying secure when working remotely
- protecting your personal devices
- the most common threats facing councils today
Stay tuned - and if you haven’t already, secure your place at the Cyber Security team webinar on 5 March at 2pm.
Published February 23, 2026
