The rise of cyber technology has transformed the nature of work, creating new job opportunities, but also widening the income and talent gap. As automation replaces many traditional jobs, the demand for tech skills has increased. We will explore the future of cybersecurity professionals and how to stay ahead of the curve.

• The central premise of sustainable security is that we cannot successfully control all the consequences of insecurity, but must work to resolve the causes.
• It derives from the broader focus on Environmental, Social and Governance (ESG) standards that aim to measure a business's impact on society, and the environment, and how transparent and accountable it is.
• In a world that has never been so interconnected - and not just by the Internet - what does this mean for how we operate to protect and deliver value to our business/organisation, its outputs and customers?
• By aiming to cooperatively resolve the root causes of threats using the most effective means available, sustainable security is inherently preventative in that it addresses the likely causes of conflict and instability well before the effects are felt.
• Prevention is better than cure but keep an eye on the cost vs benefit gained to ensure value is delivered.

• How can we get a better understanding of the security skills gap and its causes? 
• Are we creating an artificial skills/talent gap by putting an excessive focus on technical skills?
• What role does Neurodiversity play in creating and developing a robust talent pipeline of security professionals to tackle today's security issues?
• What's been done so far and what can we do to make things better?

• Discover how cybersecurity clusters can help regions economically
• Understand how cybersecurity clusters can improve regional security
• Learn how cybersecurity clusters can educate the future e.g. Skills programs in schools

• What are the key cybersecurity risks facing telecoms? Supply chain complexity and backdoor threats
• The importance of transparency in the telecoms supply chain and making cybersecurity integral to decision-making of products and services
• How risk-management services can be leveraged within the telecoms industry to promote transparency, establishing a secure-by-design best practice for complying to security standards

• Cyber Essentials controls the update process.
• What has changed in the 2023.
• Future plans for the controls.

• Why traditional training methods are failing.
• How gamified content can help integrate security behaviours.
• How to implement gamified content as part of a wider security awareness programme.

• Different forms of employee monitoring 
• The legal and ethical considerations associated with employee monitoring 
• The impact of employee monitoring on the employee-employer relationship 
• Best practice for employers

This session will analyse the return on investment (ROI) of cyber safety measures by comparing the cost of a potential cyber attack against the cost of implementing safeguards. We will explore the benefits of being cyber safer, such as mitigating financial losses and protecting your reputation, to help you make informed decisions about cyber security spending.

The digital transformation was significantly accelerated by the pandemic, without society being adequately prepared with the necessary digital/cyber culture or even conscious of the need. Cyber security and awareness training in the majority of workplaces will continue to be generally ineffective where the necessary foundational digital culture does not exist. Any degree of online safety and security for the populace can only be achieved through a holistic collaborative approach to the development of digital/cyber culture.

Advanced Persistent Threat (APT) groups continue to be one of the most damaging threats facing the cyber landscape. Whilst many different detection and defence mechanisms have been used for protection, often the most effective method can be through our understanding of the landscape.

This case study follows my investigation into one of the most prolific ATP groups known as Trickbot, who are based in Russia. Within this research, I was able to uncover the fundamentals of Trickbot’s cybercrime operations through their leaked internal communications. This included their internal processes, management structures, and custom tooling. Using this, I will explore the key place that APT analysis holds within cybersecurity and how by gaining a deeper understanding of threat groups, a complete and effective defensive stance can be built"