With the first 24 hours being the most crucial, it's important that organisations are aware of what must be done in order to first assess any damage caused and what mitigation can be placed in order to contain the threat, with a retrospective view on pro-active layered controls that would have served to reduce the probability of a successful attack in the first place.

This session will focus on defining trust and trustworthiness in cybersecurity. Attendees will learn about the reasons why efforts to build trust often fail to produce positive outcomes, as well as specific trust drivers that can be used to build or repair trust bonds. Gain valuable insights into how to effectively build trust with customers and partners, ultimately enhancing their organisation's reputation and success in the industry.

Is testing your web applications or network enough? We've observed a growing demand for more realistic tests, based on an assumed breach model & using real-world attack scenarios. Our clients want to know more than whether their perimeter is secure. ' What would happen if a hacker could bypass perimeter security? ' Do traditional tests address realistic threats? Join our talk to find out how to improve your penetration testing approach, gain deeper security insights, & build a defence in depth in strategy.

Cybercriminals continue to evolve their methods of attacking backup data. Traditional methods like air-gapped and immutability cannot prevent newer attacks. Eric Simmons will discuss the importance of securing your backups using the latest protection. 

Major Japanese airline, All Nipon Airways, made a strategic decision to adopt a ground-breaking cyber protection technology, implementing true Zero Trust at the point of vulnerability. ANA Senior Director, Akihiro Wada and AppGuard Head of Channel, Eileen Buck explain how this has significantly improved ANA’s security posture and continues to save $millions today. 

In this session, speakers will highlight the importance of managing information security risks from third-party vendors and partners. Attendees will learn about the growing threat from third-party sources and the hidden risks of vendors sharing business information without the company's knowledge. The session will provide valuable insights into how businesses can identify and mitigate potential risks from third-party vendors and partners, ultimately enhancing their overall security posture.

Brought to you by HubSecurity

Brought to you by HubSecurity

Brought to you by Knowbe4

Brought to you by SoSafe

Brought to you by Cybercy

Brought to you by Setyl Ltd time

Brought to you by QA

Brought to you by ControlCase Ltd

Brought to you by Equilibrium

This session will analyse the return on investment (ROI) of cyber safety measures by comparing the cost of a potential cyber attack against the cost of implementing safeguards. We will explore the benefits of being cyber safer, such as mitigating financial losses and protecting your reputation, to help you make informed decisions about cyber security spending.

In this session, we will discuss the growing threat of cyber attacks and their impact on businesses. We will explore examples of recent attacks and their devastating consequences. We will also discuss the impact of cyber attacks on daily business operations and reputation. Find out the basic steps that businesses can take to improve their cybersecurity posture and protect themselves against these threats.

This session will delve into the UK police intelligence report, uncovering potential threats and providing actionable steps to improve your business's security. Find out how to develop strategies to make your business safer and more secure.

• Cyber Essentials controls the update process.
• What has changed in the 2023.
• Future plans for the controls.

The Cyber Essentials scheme is growing each year and is increasingly a requirement in many government and commercial contracts. This talk will review progress in delivering the scheme and also making it more accessible. New initiatives which are being developed to enhance the Cyber Essentials scheme will be outlined. 

The rampant attacks we are seeing from Lockbit and Conti ransomware, is pushing the cost of defence ever higher. Nick will explore where companies are spending ever larger sums within their cyber domains and missing out the basics.  Should we spend our budgets educating users or on counter-cyber offensives to take down these groups?

Find out the six crucial strategies for an effective cyber security implementation for your organisation. 

Join us for an informative session on Dark Web Threat Intelligence. Discover how you can stay protected against unseen cyber threats and learn how to proactively defend your business against the latest cyber attacks. Key takeaways include understanding the dark web, tracking potential zero-day attacks, and implementing effective threat intelligence strategies.

This session will explore means of growing your teams, and how to develop your people to ultimately retain talent and develop cyber capability throughout your organisation. Amanda Finch, CEO of the Chartered Institute of Information Security will talk through the CIISec Skills Framework to show you what you need to do to get to where you want to be, and how to harness your skills to create opportunities and empower other people in your organisations.

Key takeaways:

• Learn how to build your teams capability with your organisation
• Understand how to retain talent
• Learn more about how to create opportunities to empower employees to build their skills
• Hear about the CIISec Skills Framework in more depth from our CEO, Amanda Finch

The digital transformation was significantly accelerated by the pandemic, without society being adequately prepared with the necessary digital/cyber culture or even conscious of the need. Cyber security and awareness training in the majority of workplaces will continue to be generally ineffective where the necessary foundational digital culture does not exist. Any degree of online safety and security for the populace can only be achieved through a holistic collaborative approach to the development of digital/cyber culture.

The attack tactics of cyber criminals are evolving rapidly. Current social changes, crises and wars are driving this development even further. The defence side must now also adapt to this - and keep pace with the innovative power of cyber criminals. In 90% of the cases, the attackers continue to focus on the human factor. In our session, Richard Jerome, Awareness Specialist at SoSafe, will tell you more about the latest trends in cybercrime and what really matters when building a security culture in your company - so that your employees become your organisation's active line of defence.

Are you interested in learning more about the legal implications of employee monitoring in the workplace? Join Sarah Lee and Steve Conlay from BPE Solicitors for this 30 minute talk to learn more about how to navigate the legal landscape of employee monitoring and ensure compliance in the workplace. Topics include;
 

• Different forms of employee monitoring 
• The legal and ethical considerations associated with employee monitoring 
• The impact of employee monitoring on the employee-employer relationship 
• Best practice for employers

Advanced Persistent Threat (APT) groups continue to be one of the most damaging threats facing the cyber landscape. Whilst many different detection and defence mechanisms have been used for protection, often the most effective method can be through our understanding of the landscape.

This case study follows my investigation into one of the most prolific ATP groups known as Trickbot, who are based in Russia. Within this research, I was able to uncover the fundamentals of Trickbot’s cybercrime operations through their leaked internal communications. This included their internal processes, management structures, and custom tooling. Using this, I will explore the key place that APT analysis holds within cybersecurity and how by gaining a deeper understanding of threat groups, a complete and effective defensive stance can be built"

• The threat of a dirty bomb is real - how can it be detected from a distance in a crowd to avoid the worst?
• NuVISION Gamma Imager is the only solution on the market which can locate and identify a radiological hazard at a distance and in full movement.
• High radiation measurements could be due to an individual undergoing medical treatment – how do you differentiate between such people and those who have more illicit motives?
• The session will demonstrate how the NuVISION technology locates and identify radioactive substances, at a distance, whether inside vehicles, being carried by a person or within a package – determining between naturally occurring radioactive material, medical isotopes and illicit radioactive substances.

To ensure effective data security, it is essential to establish a strong foundation of basic principles and to determine the requirements needed to meet the expectations of internal and external stakeholders. Comprehending the fundamental principles of data security, such as Confidentiality, Integrity, and Availability, you can develop a targeted and layered approach to prioritise these principles when allocating resources to your IT budgets and to form the cornerstone of appropriate data security.

In our ever-evolving digital world, there is a misconception that your technologies are causing your organisation to be vulnerable to cyber attacks – this is incorrect. 80% of cyber breaches are a result of human error, and strong security culture in lacking in most businesses. Robust cyber security must begin from the top-down, and it is crucial to ensure your workforce is educated and resilient to cyber threats.  

In our session, discover how to empower your people and lead by example to secure your data, devices, and the infrastructure system which supports it all. 

Today's IT and Operations departments are under pressure like never before to keep accurate records of which equipment and subscriptions have been provided to each of their staff. Learn how companies are managing to turn this into an opportunity to save money, improve their sustainability metrics and increase staff engagement.

• What are the key cybersecurity risks facing telecoms? Supply chain complexity and backdoor threats
• The importance of transparency in the telecoms supply chain and making cybersecurity integral to decision-making of products and services
• How risk-management services can be leveraged within the telecoms industry to promote transparency, establishing a secure-by-design best practice for complying to security standards

Sunny Vara will be focussing on strategies for improving an organisation's overall Cyber Security posture. Through exploring best practices and key actionable steps for mitigating security threats, attendees will gain a comprehensive understanding of how to enhance their current security measures. The session provides valuable insights into the importance of proactive approaches for maintaining a strong cyber security stance and reducing the risk of security breaches.

Located in room 4-9A - near the CREST stand /L1

Conducting regular security incident response tabletop exercises prepares your organisation for ransomware or other types of cyber-attacks. Just having an incident response team to deal with cyber threats is not adequate anymore. Simulation exercises are vital to the wellbeing of any business today.

You will be part of an interactive tabletop exercise where we simulate a scenario to work through. Social engineering being a key part of the incident.

Just bring an open mind, a phone, have some fun and work through a series of multiple-choice questions where you work through a scenario. 

The session will provide you with the tips you need to go back to your business and evaluate your organisations preparedness in the event of an Incident.

PLEASE BOOK HERE

Running a red team exercise can be extremely helpful to highlight gaps in controls and weaknesses in detection and response capability.  It's a complicated undertaking, however, and can be fraught with risk.  When red teaming goes wrong, it can go wrong in the ways you least expect.
Gemma Moore discusses some of the lesser-considered pitfalls in red teaming, and how businesses using adversary simulation to enhance their security can avoid the bear traps.

Learn how cybercriminals design and plan their attacks, exploring how they combine different methods to maximise the chance of success. Learn the types of defences that are the most effective against modern cyber-attacks.

Social engineering attacks are increasingly common. The number of cyberattacks that begin with the manipulation of employees in order to compromise or penetrate a system is steadily increasing. In this session we will look at why social engineering is the biggest threat to your organisation and demonstrate how a successful security awareness campaign can protect your organisation. 

With the new ISO 27001:2022 ISMS framework, Bosch CyberCompare will discuss practical steps to implement controls related to Information security in supplier relationships and managing security in the ICT supply chain. These steps can also aid organisations in conforming to the new Annex controls A5.19, A5.20, and A5.21.

Individually, we’re strong but together we’re stronger. While a startup has exciting new ideas, government and industry possess insights and resources.
 
So, what happens when you throw them together and blend up their respective expertise?
 
This session will provide the audience with lessons from Dave’s experience of building collaborative ecosystems, which has required strategically closing the gap between startups, government and industry.
 
Expect to understand: 
•    How private and public innovation has reinforced national security and economic impact, with commitments from the likes of the National Cyber Security Centre and the Department for Science, Innovation and Technology
•     Why global tech companies such as Amazon Web Services are looking to SMEs for solutions in areas such as healthcare and defence
•    Where the value lies in startups across industries, like cyber, sharing a mission with large organisations to test solutions together 

We all know the value a SOC can bring in terms of detecting and responding to cyber threats, but how can you quantify that value? Andrew Kays and John Lodge (SOC Manager) will discuss how Socura have been measuring our SOC’s performance, honing in on key metrics used to quantify success, demonstrate ROI, and improve performance.

• The developing UK Cyber Security Network
• Bridging the skills gap and promoting innovation in cyber
• UKC3: super connector to your regional cyber cluster

• How can we get a better understanding of the security skills gap and its causes? 
• Are we creating an artificial skills/talent gap by putting an excessive focus on technical skills?
• What role does Neurodiversity play in creating and developing a robust talent pipeline of security professionals to tackle today's security issues?
• What's been done so far and what can we do to make things better?

Our reliance on technology as the fix for cybersecurity problems has left gaps in our resilience. In this session, veteran FBI agent, Miguel Clarke, will talk about his experience of leading counterintelligence investigations and his work as a member of the National Infrastructure Protection Center, and will tell us why he believes we must put the ‘human factor’ at the centre of creating a truly resilient environment. 

The UK is a leader in cybersecurity innovation, with a thriving industry that boasts world-class talent and cutting-edge technologies. The country's robust legal framework and government support for cybersecurity initiatives provide a strong foundation for businesses looking to protect themselves and their customers from cyber threats. This session will highlight the commercial and security advantages of working with the UK cyber industry.

Security assessments haven’t changed for several decades, bad guys however have, and the gap between the reality of attackers’ activities and assessments is growing. We’ll discuss some ways to make these better leading to assessments actually answering questions for the target organisation and helping you to lower risk.

Overview on the history of Perimeter 81 and the simplicity of deploying, scaling and protecting users at scale in the cloud

Ransomware and data exfiltration are keeping organisations under siege. A short analysis of the common exposures and misconfigurations that may bring down an entire company, and tips on how to minimise the risks.

A revolutionary penetration testing method that utilises cutting-edge technology and advanced algorithms to provide faster and more cost-effective testing with real-time insights. Saving businesses time and money whilst ensuring the highest levels of security. A unique combination of speed, accuracy, and affordability.

The rise of cyber technology has transformed the nature of work, creating new job opportunities, but also widening the income and talent gap. As automation replaces many traditional jobs, the demand for tech skills has increased. We will explore the future of cybersecurity professionals and how to stay ahead of the curve.

• The central premise of sustainable security is that we cannot successfully control all the consequences of insecurity, but must work to resolve the causes.
• It derives from the broader focus on Environmental, Social and Governance (ESG) standards that aim to measure a business's impact on society, and the environment, and how transparent and accountable it is.
• In a world that has never been so interconnected - and not just by the Internet - what does this mean for how we operate to protect and deliver value to our business/organisation, its outputs and customers?
• By aiming to cooperatively resolve the root causes of threats using the most effective means available, sustainable security is inherently preventative in that it addresses the likely causes of conflict and instability well before the effects are felt.
• Prevention is better than cure but keep an eye on the cost vs benefit gained to ensure value is delivered.

Located in room 4-9A - near the CREST stand /L1

Workshop Subject matter: Mick Reynolds and Tim Haines from SecAlliance and members of the CREST Threat Intelligence Professionals (CTIPs) group will give a brief explanation of an analytical technique known as ‘Cones of Plausibility’. This will be followed by a short collaborative exercise, using this technique, aimed at crowd-sourcing different views on the how the cyber threat landscape is likely to evolve in the next 12 months. At the end of the exercise, participants will be invited to present their findings, if they wish to do so.

PLEASE BOOK HERE

Creating an effective Security Awareness programme is more complex than buying a tool and running with it. Understand how to set your strategy, gain maximum buy-in from your staff and stakeholders, and influence secure culture and behaviours across your workforce to reduce the severity of risk and incidents.

We are joined by the Former CEO of, the National Cyber Security Centre, and Professor at Oxford University Prof Ciaran Martin CB who will deliver a keynote on the global overview of cybersecurity. Discussing the current trends and state of cybersecurity, find out what lies ahead for the industry.

This session will cover the 2023 threats observed in the cybersecurity landscape and their potential impact on businesses. The speakers will discuss ways to improve internal visibility on malicious activity, profile hacking activity to understand its risk to your business, and add context to available information inputs to optimise resources. Learn how to decrease detection and remediation time while increasing readiness for evolving attack types.

Brought to you by Livesilver Consulting

Open Source Intelligence is a field, which is gaining more and more relevance for any kind of investigation.
Maltego is the market leader in holistic OSINT investigations. In this talk, Maltego will present real life investigations to show the power of OSINT for any kind of investigation you might encounter.

'Unification' is becoming somewhat of a buzzword in cybersecurity. Morten will present Heimdal's take on the topic, why its important and how to tackle the problem. The session will include information on Heimdal's unique product portfolio and feature their market-shifting Threat Analytics Centre (TAC).

This session will delve into the integration of AI in the security industry, exploring whether it is a cure-all solution or merely overhyped. We wil examine how AI can be assimilated into security culture and the advantages and obstacles it presents to the industry.  Learn about the current state of AI in the security industry, how it can augment security measures, and the expected AI adoption and advancement in the future.

Using real-world examples, Camilla explains the importance of putting individuals at the heart of your privacy programme - and how marketers can help you get it right

The presentation, from CyberFish an NCSC accelerated company, provides an overview of how crisis simulation exercises, with a focus on soft skills, such as team cohesion, communications, decision-making and increasing personal resiliency of team members can decrease stress levels, improve team cohesion, with positive impacts on work effectiveness of CSIRT's.

From a CISOs perspective, what are the priorities companies and individuals should be focusing on. What are the current and emerging threats and why haven’t we suffered from global Cyber meltdown through Cyber War on the back of Ukraine?

SIEMs can provide a wealth of detection and response capabilities, but most implementations fail to deliver promised value (while costing millions). Learn from a recovered SIEM consultant where most programmes go wrong and how to think about threat detection needs for a modern SOC. Deep technical knowledge is not required!

ThinkCyber unpick the science and theory behind behaviour models to help us understand why risky behaviours happen, and more importantly how to stop them. This talk will offer real world examples and ways that all organisations can apply the theories to drive secure behaviour change.