Skip to main content
Loading…

Seòmar agus comataidhean

Official Report: search what was said in Parliament

The Official Report is a written record of public meetings of the Parliament and committees.  

Criathragan Hide all filters

Dates of parliamentary sessions
  1. Session 1: 12 May 1999 to 31 March 2003
  2. Session 2: 7 May 2003 to 2 April 2007
  3. Session 3: 9 May 2007 to 22 March 2011
  4. Session 4: 11 May 2011 to 23 March 2016
  5. Session 5: 12 May 2016 to 4 May 2021
  6. Current session: 13 May 2021 to 21 March 2026
Select which types of business to include


Select level of detail in results

Displaying 2063 contributions

|

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Before I bring in the next colleague, I want to ask one more question. Not that long ago, I was out with the Finance and Public Administration Committee in Lithuania, which runs its entire estate off client-server architecture. It has thousands upon thousands of cyberattacks. Given the sophistication of how it runs its estate and the volume of cyberattacks that it has, has anybody from the Scottish Government reached out to Lithuania to ask about best practice? Lithuania’s geographic location probably indicates why it has had such an increase in attacks, but it might be worth while considering that approach.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

We have a supplementary question from Mr Stewart.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Do you want to ask any more questions?

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Thank you, cabinet secretary. I will open with the first question.

You have set out some of the context. It appeared to me, in preparing for this evidence session, that the Scottish Government has not yet recommended consent in relation to a number of clauses and that how the bill would operate in practice—where, in effect, it would grant additional power to the Scottish Government—has to be considered in further detail. There is also the issue of the clauses that would give the secretary of state power to take action without consent from the Scottish Government. Am I correct about those two areas? Will you give us a little more flavour in relation to where the discussions on those two different areas are at?

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

A lack of scrutiny.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Thank you.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

Sarah, do you want to come in?

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

That is very useful.

Thank you for your attendance today. That concludes questions from the committee, unless either of you wants to add any final comments.

Economy and Fair Work Committee [Draft]

Cyber Security and Resilience (Network and Information Systems) Bill (UK Parliament Legislation)

Meeting date: 4 March 2026

Michelle Thomson

I know that you might not want to be drawn on this, but what are your predictions of how this might pan out? In your framing, you have made it clear that the increasing incidence of cyberattacks is linked to geopolitics. However, the executive competence consideration is fundamental to this.

Finance and Public Administration Committee [Draft]

Scottish Fiscal Commission (Fiscal Sustainability)

Meeting date: 3 March 2026

Michelle Thomson

:Is there a risk—for a multitude of forecasting agencies, not just your organisation—in the wish that things would turn a corner and go back to a certainty that, in reality, is just not going to arise? Is that something that you are aware of in your organisation? As you said, post-2008 there have been non-stop productivity issues but there is an idea that we are going to return to a world that arguably no longer exists.