Scotland is integrating 'cyber resilience' into its school curriculum, beginning with children as young as three, in an effort to safeguard them against the escalating dangers of the online world. This initiative will weave internet safety into all aspects of classroom learning, from pre-school through secondary education, with the goal of making digital security knowledge as commonplace as literacy.
The move comes as cybercrime affecting Scottish residents, including the youngest, has significantly increased. Police Scotland reported that cybercrime incidents have doubled since the 2019-2020 period, with 14,200 offenses recorded in 2025-2026. Of these, approximately 1,420 involved a sexual element targeting individuals under 18, and 7,140 were cases of cyber fraud.
Cyber resilience encompasses practices such as creating strong passwords, utilizing privacy settings to limit personal information disclosure, and identifying phishing attempts. It also addresses issues like cyber-bullying and the risks associated with online gaming chat rooms.
Education Scotland is currently reviewing the curriculum and developing new teaching materials. Sample resources are slated for teacher feedback starting in January 2027, with full implementation planned for August 2028. While older students will receive technical instruction, younger children will learn about online safety through age-appropriate games and stories. For early years learners aged 3-6, the focus will be on foundational behaviors, using stories to draw parallels between securing physical possessions and digital devices.
One such resource is the book "Cy Bear at School – Keeping Safe and Secure Online," being distributed to schools. Aimed at children aged 4-7, the book uses a narrative about a bear to raise awareness of cybersecurity.
However, some critics argue that the curriculum might normalize technology use for very young children instead of prioritizing traditional literacy skills. Concerns have been raised that early exposure to digital technology could negatively impact reading standards. Critics suggest that cyber resilience education would be more appropriate for secondary school students, and that the focus for younger children should remain on fundamental academic skills rather than anxieties about digital risks.
