By Nicola Taylor, Chief Operating Officer, ScotlandIS
There is no shortage of conversation about artificial intelligence. Businesses are looking at where it can add value, industries are considering how it will change the way they operate, and governments around the world are thinking about what they need to do to remain competitive. At the same time, cyber security has never been more important.
For Scotland, these should not be treated as two separate conversations.
The more AI becomes embedded in our businesses, public services and critical infrastructure, the more important cyber security, trusted data, resilience and good governance become. That creates a real opportunity for Scotland’s technology sector.
Scotland’s AI Strategy 2026–2031 gives us a useful framework, centred around People & Skills, Companies & Innovation, Infrastructure, and Data & Regulation. What stands out for me is how interconnected those priorities are.
We can have brilliant businesses developing AI, but they still need skilled people, secure data, compute, connectivity, investment and, crucially, customers. Equally, organisations adopting AI need confidence that the technology they introduce is secure, resilient and appropriately governed.
If trust around security, privacy or accountability is lost, adoption will suffer.
One of the mistakes we need to avoid is seeing cyber security as something that happens after innovation: the approach cannot be develop first, secure later.
Cyber needs to be part of how responsible AI is designed, deployed and managed from the outset – covering secure data, identity and access management, software and cloud security, operational resilience, governance and testing.
AI is also changing the threat landscape itself, with the technology increasingly available to both attackers and defenders.
For Scotland’s cyber businesses, that creates an opportunity much broader than simply providing defensive products. It is about helping organisations adopt technology with confidence.
Done well, cyber becomes part of the infrastructure that allows innovation to happen safely, rather than simply a cost or compliance requirement.
Scotland already has strong foundations: internationally recognised universities, an established cyber community, growing AI capability and expertise across financial services, energy, health, space, engineering and the public sector. The challenge is translating those strengths into economic value.
At ScotlandIS, we regularly speak to technology SMEs and often they face challenges such as navigating procurement or getting in front of a customer, and sometimes it is simply getting the opportunity to prove a solution works at scale.
If we want more successful Scottish AI and cyber companies, we need to tackle those barriers alongside investing in innovation. That means more challenge-led engagement, helping smaller businesses successfully engage with procurement and bringing universities, technology companies and potential customers together earlier.
We also can’t forget the physical infrastructure underpinning AI. AI needs compute, and compute needs data centres, power, water, connectivity and resilience. That brings energy companies, utilities, data-centre operators, network providers, engineering businesses, cyber specialists and technology companies into the same conversation.
Scotland’s renewable energy capability gives us an opportunity to connect the growth of AI with sustainable digital infrastructure, but again, that only works if we join up conversations that have traditionally happened separately.
The same applies to skills. We require people to build AI, but also people who can deploy it responsibly. We need specialist cyber professionals, but
also leaders and employees who understand digital risk. Increasingly, we need people who can work across technology, regulation, ethics, security and business transformation.
That makes the relationship between industry and education critical. Employers need to engage earlier with schools, colleges and universities, create meaningful routes into employment and continue investing in the skills of the people already in their workforce.
The opportunity is bigger than growing an AI sector or a cyber sector separately, it is about creating an environment where AI innovation, cyber resilience, trusted data, skills and sustainable infrastructure reinforce one another.
If Scotland gets that right, the overall return will be stronger Scottish technology companies, high-value jobs, intellectual property developed here, and businesses better able to compete internationally.
That is the opportunity in front of us – to make Scotland a place where innovation is not only ambitious, but trusted, secure and built to scale.
