Day one opens

Registration and networking

Speaker: Heidi Fraser-Krauss, CEO, JiscJisc CEO Heidi Fraser-Krauss welcomes delegates to this year's Security Conference.

Welcome to Security Conference

Speakers:<ul><li>David Batho, director of security, Jisc</li><li>Paul Knee, head of security operations, Jisc </li><li>Henry Hughes, CTO - cyber security, Jisc</li></ul>David Batho, Paul Knee and Henry Hughes from Jisc provide this year's security strategic update.

Strategic update

Speaker: Charlie McMurdie, former head of the National Cyber Crime Unit of the Metropolitan Police, former senior cyber crime advisor for PwC UK and former UK lead for cyber crime with Interpol and Europol.In this keynote session Charlie gives an overview of cyber crime, real world operational cases investigated and prosecuted, including organised crime groups attacking financial institutions, dark markets that facilitate cyber trade, internet frauds, phishing and hacktivist attacks.Charlie will also discuss physical security threats of the 5 P’s – People, Premises, Products, Process, Practice.

Cyber crime and protecting your institution

Morning break

Speaker: Abhinav Kaushik, senior technical strategist, ManageEngineIn the rapidly evolving landscape of modern education, operational silos within IT departments can hinder innovation, efficiency, and collaboration. Let us focus on practical strategies for educational institutions to dismantle these silos, ensuring seamless integration across all IT functions. Join us to discover how to unlock the full potential of your IT team by providing actionable insights to foster a culture of collaboration and continuous improvement, ultimately empowering institutions to better support their students and staff in the digital age.

Breaking down operational silos in modern IT - sponsored by ManageEngine

Speaker: Alex Harding, head of IT services, Runshaw CollegeMeet with some of this year's speakers and experts as a community, to ask any burning questions and help address personal challenges.

Meet the speaker

Speakers:<ul><li>Ben Crowther, defensive services team lead, Jisc</li><li>Henry Hughes, CTO - cyber security, Jisc</li></ul>A look back at significant DDoS attacks across Janet, the lessons learnt and the changes made so far.

DDoS impact and the new era of defence 

Speakers:<ul><li>Trent Horn, principal systems engineer, Fortinet</li><li>Jen Parry, innovation consultant, Jisc</li><li>Marc Jones, solution architect, BT</li><li>Tom Hayman, Cloud CTO, Jisc</li></ul>SD Wan with BT and Fortinet - this session will provide a product update/roadmap, followed by a review of how the solution works.

Managed SD-WAN solution - an update and review

Speaker: Jan Bervar, group security architect, Conscia/ITGLManaged Detection and Response (MDR) has evolved into a suite of easily accessible services that effectively replace traditional managed SOC offerings. The rise of XDR technology platforms has further enabled a proven, cost-effective MDR-XDR blend, making it one of the most powerful tools in combating digital crime. However, not all MDR services and XDR solutions are created equal, and there are limited standards for evaluating them. In this session, we will explore the latest MDR-XDR developments and capabilities designed to address emerging risks, diverse technological environments, and varying organizational processes. We will also delve into common customer requirements gathered from years of market experience and assess how well the MDR-XDR combination meets (or sometimes falls short of) those needs.

Managed detection and response (r)evolution: the good, the bad, and the ugly - sponsored by ITGL

Speaker: Alex Harding, head of IT services, Runshaw CollegeThis session will outline how Runshaw College have used the 16 questions aligned to their overarching strategy and RAG rated them. How they are presented to their SMT and accessible for review.

Answering the 16 questions! 

Hosts:<ul><li>Darren Jones, cyber security analyst, Jisc</li><li>Tom Cox, lead security architect, Jisc</li></ul>Put your skills to the test. 4 players, 15 tasks, 30 minutes, have you got what it takes to hack devices, crack passwords, decipher codes, retrieve the data and escape the Jisc cyber escape room? Please book in advance to attend this session.

Jisc cyber escape room - booking required

Speaker: Ambrose Neville, head of information security, Queen Mary University of LondonAn exploration of third party risk management from multiple angles, including how it can benefit the security culture. This presentation will include observations and recommendations for security teams assessing vendors, commentary on responding to attestations where your org is a third party to another org. There will also be a pair of practical examples: firstly an excessive (and potentially ineffective) third party risk process, and secondly, an example of how that third party risk management data can be useful during a significant availability event.

Third party risk - the good, the bad, and the ugly

Speaker: Roy Verboeket, VP systems engineering, Extreme NetworksIn today’s landscape of increasingly sophisticated digital threats, the intersection of cybersecurity and the student experience has never been so vital. This session will delve into the challenges and opportunities that educational institutions face in harmonising robust cybersecurity measures with an engaging and seamless student journey. Join this session to gain insights to: <ul><li>The significance of cultivating a culture of cyber awareness among students</li><li>Equipping students and faculty members with the necessary knowledge to navigate digital environments safely</li><li>The importance of developing a secure backend infrastructure that allows students the freedom to enjoy a fulfilling academic life without compromising the security of their educational environment</li></ul>This session will foster a collaborative mindset, positioning cybersecurity not as an obstacle, but as a crucial element that delivers a frictionless user experience and consistent security policy for applications, devices and IoT.

From Challenge to Opportunity: Shaping a Seamless Educational Journey - sponsored by Extreme Networks

Speaker: Adam Parrish, AWS solutions architect, JiscThis talk will explore a comprehensive AWS Landing Zone strategy to consolidate multi-account environments, uplift and secure dated implementations, and apply modern security controls.Attendees will gain insights into vital considerations to maintain a secure and well-governed AWS cloud environment.

Streamlining compliance: rapidly deploying secure AWS cloud environments 

Speakers:<ul><li>Mark Worthington, security centre operations manager, Jisc</li><li>Richard Jackson, head of cloud security, Jisc</li></ul>This session will run through the Defender XDR portal, highlighting fundamental features often missed during deployments. It will also cover best practice guidance to operating EDR products.

Tips for making the most of defender security functions 

Speakers:<ul><li>Alf Moens, senior information security officer, Geant</li><li>Henry Hughes, CTO - cyber security, Jisc</li></ul>An update on cyber security activities across education and research in Europe.

Lessons from the European cyber security landscape

Lunch break

Speakers:<ul><li>Mark Worthington, security centre operations manager, Jisc</li><li>Richard Jackson, head of cloud security, Jisc</li></ul>Meet with some of this year's speakers and experts as a community, to ask any burning questions and help address personal challenges.

Speaker: Mark Woods, chief technical advisor, SplunkUnified, optimised, smarter, faster, better and with less risk… we’ve all got mandates and/or imperatives for change and digital resilience should be a pivotal enabler. But what does it mean, how could it be shaped and how should security functions start.In this keynote Mark will discuss how we can view and define resilience, it’s impact on organisations and how it can and should be a central interface between functional operational teams and the wider organisation.

What actually is ‘resilience’ and whose fault is it anyway? - sponsored by Splunk, a Cisco company

Speakers: <ul><li>Richard Jackson, head of cloud security, Jisc</li><li>Dave Cook, senior azure solutions architect, Jisc</li></ul>This session will discuss managing and securing your infrastructure using Azure, we will cover the tech that can be used to protect resources, regardless if they are on-prem or hosted in any other cloud environment, allowing for a modern, secure management solution. The session covers services such as Azure Arc, Defender for Cloud.

Managing and securing your infrastructure using Azure

Speaker: Stuart Morgan, IT director, Portsmouth CollegeWhat is it like to manage an incident? In this session Stuart Morgan from City of Portsmouth College will share his experience of living through a cyber attack, in the hope that should the worst happen you are prepared.

Living and surviving a cyber attack 

Speaker: Omer Yoachimik, senior product manager for DDoS protection and security reporting, CloudflareAs attacks continue to become more sophisticated, Cloudflare works relentlessly to proactively identify new threats - deploying countermeasures to our global network so that our millions of customers are immediately and automatically protected. Tune into this session to learn more about the anatomy of an attack, and how your university can take steps to defend against it.

Anatomy of an attack: protecting education sector networks from DDoS attacks - sponsored by Cloudflare

Speaker: James Bisset, security specialist, JiscIn this session, James Bisset introduces the CIS Critical Security Controls and provides a model for how to assess your current security posture against industry best practices, and use this to assess your security maturity over time.

How to benchmark your security posture using the CIS Critical Security Controls

Speaker: Neil Cordell, CISO, Swansea UniversityThis session explains how Swansea University are building their cyber awareness programme. While the programme is still a work in progress, Neil will explore the challenges, difficulties and successes that they have encountered so far.

Building a cyber awareness programme 

Afternoon break

Speaker: James Bisset, security specialist, JiscMeet with some of this year's speakers and experts as a community, to ask any burning questions and help address personal challenges.

Speaker: Javed Khan, regional sales manager, education, UK public sector, Splunk (a Cisco company)In this lightning talk, hear about how technology solutions are helping to plug the gap in cyber, and how Cisco and Splunk have established free training to the education sector.

Managing the skills gap - sponsored by Splunk, a Cisco company

Speakers:<ul><li>Oliver Davy, CDO, University of Derby</li><li>Steve Smith, lead infrastructure engineer, University of Derby</li></ul>Following a successful large scale Azure migration, this session focuses on the changes and opportunities that have become apparent in how infrastructure is managed day-to-day at scale. From cyber security improvements and data management opportunities through to incident management and service provision, the University of Derby team will provide an overview of their whole-University Azure migration project, the benefits planned vs the benefits realised, and will provide a thorough view of the realities of being fully in the cloud.

Living in the cloud - the post Azure day to day

Speakers:<ul><li>Alex Goffe, director campus technology services, University of Manchester</li><li>David Fielding, lead campus technology services, University of Manchester</li></ul>This sessions aims to explore how the University of Manchester adopt, adapt and drive change in their digital infrastructure.

Your history is mine

Speakers:<ul><li>Graeme Stuart, head of public sector, UKI Check Point</li><li>Colin Williams, business CTO networking and security, Computacenter UK</li></ul>In today’s fast-evolving digital landscape, cyber threats have become increasingly sophisticated, unpredictable, and damaging. As businesses and governments alike grapple with these challenges, building cyber resilience is no longer optional—it’s a strategic necessity. This session will explore the critical steps organisations must take to ensure they can withstand, adapt, and recover from cyber incidents in a world marked by uncertainty.

Building cyber resilience in an uncertain world - sponsored by Check Point and Computacenter

Speakers:<ul><li>Nicole Stewart, lead cyber security incident investigator, Jisc</li><li>George Bloor, senior security analyst (cyber threat intelligence), Jisc</li></ul>Cyber threats are advancing at an unprecedented rate, making robust threat intelligence essential for safeguarding our members and their digital estates.In this session, our cyber threat intelligence team will showcase how they proactively gather and leverage intelligence to help education and research members stay one step ahead of cybercriminals. Attendees will gain valuable insights into the latest cyber threat trends and discover how our intelligence-driven approach effectively mitigates risks.

The Power of Jisc's Cyber Threat Intelligence

Speakers:<ul><li>Elena Parsons, strategic business development manager, NPL (National Physical Laboratory)</li><li>Ben Chapman, head of architecture and engineering, Jisc</li></ul>The UK’s digital infrastructure is underpinned by timing. The increased demand for higher precision, traceable time and frequency signals that enable growth across many sectors, including future data networks, autonomous vehicle infrastructures, smart cities, factories of the future and distributed ledger platforms, has highlighted two things: the vulnerabilities associated with existing time dissemination methods as well as the need for an alternative or back-up time source.The purpose of this presentation is to raise awareness of the importance of resilient time for the UK’s Critical National Infrastructure (CNI) sectors, provide an overview of some of the timing services currently available as well as showcase how the UK is leading the way globally for the deployment of a resilient timing infrastructure. Find out how Jisc is addressing this challenge.

Resilient time for the future: operational resilience with UTC (NPL) 

Speakers:<ul><li>Paul Knee, head of security operations, Jisc</li><li>Steve Howard, head of product – cyber, Jisc</li></ul>This keynote session will explore how Jisc's Security Operations Centre (SOC) safeguards universities, colleges, and research institutions from cyber threats. The session will cover the key services, tools, and strategies employed by Jisc SOC to monitor, detect, and respond to security incidents, ensuring the resilience and protection of critical academic and research data in an evolving threat landscape.

Protecting the education and research sector with Jisc SOC

Speaker: Henry Hughes, CTO - cyber security, JiscHenry Hughes offers closing thoughts from day one of the event, before opening the drinks reception in room one.

Closing thoughts

Join us for a networking reception taking place in the exhibition hall to close the first day of the conference.

Networking reception sponsored by Splunk, a Cisco company.

Speakers:<ul><li>Nicole Stewart, lead cyber security incident investigator, Jisc</li><li>George Bloor, senior security analyst (cyber threat intelligence), Jisc</li></ul>Meet with some of this year's speakers and experts as a community, to ask any burning questions and help address personal challenges.

Day one closes

Day two opens

Speaker: Tom Hayman, Cloud CTO, JiscTom welcomes you to day two of the conference. Providing highlights from day one and insight into what to expect from the second day of the event.

Welcome to day two

Speakers:<ul><li>Clare Johnson, ITSUS head of capability and founder of Women in Cyber Wales</li><li>Michael Webb, director of AI, Jisc</li><li>Mark Watts, associate director cyber security, University of Southampton</li><li>Rebecca Flook, innovation developer - AI, Jisc</li></ul>With the future of AI in cybersecurity poised for existential growth and innovation, this keynote session aims to explore how we navigate this exciting and challenging landscape, exploring how AI will become increasingly integral to cybersecurity strategies and how we can seize the substantial opportunities it presents to cyber defenders, whilst identifying the risks.This session is a live recorded episode of the Jisc TechTakes podcast.

AI in cybersecurity: the benefits, pitfalls and implications for the future

Speaker: Gregory Allinson, higher education account manager, InfobloxImprove your experience and unlock the full potential of your Infoblox solutions through certified and supported integrations with your existing security solutions.

Infoblox technology integrations - sponsored by Infoblox

Speaker: Paul Knee, head of security operations, JiscMeet with some of this year's speakers and experts as a community, to ask any burning questions and help address personal challenges.</p

Speakers:<ul><li>Toby Grainger, head of CymruSOC (Wales Cyber Security Operations Centre), Welsh Government</li><li>Jamie Brummell, founder and CTO, Socura</li><li>Henry Hughes, CTO - cyber security, Jisc</li></ul>This session will explore the benefits and challenges of sharing threat intelligence across education, research and the public sector.

Integrating threat intelligence to improve defence - experience from CymruSOC 

Speakers:<ul><li>James Bisset, security specialist, Jisc</li><li>Alex Harding, head of IT services, Runshaw College</li></ul>Jisc's cyber security assessment is designed to help you and your organisation design your roadmap to navigate the complex world of cyber security. James Bisset explains how the CSA helps develop the roadmap, and we hear from one organisation which has used repeat assessments to move forward in their journey towards cyber security maturity.

A journey through the cyber galaxy with a CSA 

Speakers:<ul><li>Peter Jones, security specialist, ITGL</li><li>Ben Simpson, Microsoft security lead, ITGL</li></ul>A discussion style presentation to consider the how best to move to a Zero-Trust architecture by utilising your existing investments. Focussing on Microsoft licensing alongside network investments, we’ll cover best practice to maximise the efficacy of your SecOps teams and provide effective protection across your entire estate.

Optimising your existing investments for better SecOPs - sponsored by ITGL

Speaker: Paul Knee, head of security operations, JiscIn this session, we'll delve into the intricacies of attacking and defending Active Directory, a critical component in most enterprise IT infrastructures.Participants will explore common attack vectors used by cybercriminals to compromise Active Directory environments and gain unauthorized access to networks.We will also cover best practices for defending against these attacks, including hardening techniques, detection methods, and incident response strategies.Whether you're an IT administrator or a security professional, this session will equip you with the tools and knowledge to better protect your organisation's Active Directory and enhance its overall security posture.

Attacking and defending Active Directory

Speakers:<ul><li>Luciana de Paula Piccoli, head of enterprise solutions, Jisc</li><li>Ben Offiler, licensing portfolio specialist, Jisc</li></ul>This session will explore how institutions can strengthen their cyber security posture through smarter software licensing strategies.With the constant pressure on budgets, this talk will highlight how educational institutions can access leading security tools at a reduced cost, leveraging Jisc licensing’s negotiated agreements with vendors such as Microsoft, Tanium, Snow and Certero.It will also discuss how collaborations with Jisc’s licensing team help ensure compliance, reduce costs, and maintain sector-wide cybersecurity resilience.There will also be an overview of the results of the recent cyber security solutions survey conducted by Licensing.

Maximising cyber security with cost-effective software licensing

Speakers:<ul><li>Ceri Cosway, e-Systems analyst, Coleg Gwent</li><li>Nick Brown, senior cloud solutions architect - M365, Jisc</li><li>Marc Edwards, Azure solutions architect, Jisc</li></ul>Learn what parts of Cyber Essentials can be technically enforced via Intune and tooling that's available to assist you with your journey to Cyber Essentials compliance.

Intune and Cyber Essentials

Speakers:<ul><li>Neil Furminger, head of cyber essentials, IASME</li><li>Stuart McCulloch, security specialist and lead CE assessor, Jisc</li></ul>Join us to understand key cyber security standards, including Cyber Essentials, Cyber Essentials Plus, Pathways, Cyber Assessment Framework, CIS Critical Controls, ISO27001 and GovAssure.Learn how these differ but can also enhance your security posture and protect against cyber threats. Whether you're starting your cyber security journey or looking to upgrade your defences, this session will provide valuable insights and practical guidance.

Navigating cyber security standards

Speaker: Phill Toms, senior SASE specialist, CloudflareUniversities are on the cutting edge of research in many fields; however, they commonly depend on legacy VPN solutions to provide secure remote access for their students and staff. These VPNs lack support for fine-grained access control, potentially exposing sensitive resources or introducing unnecessary friction in the user authentication and authorization process.

Enhancing access: embracing zero trust for improved student experience, data security, and regulatory compliance - sponsored by Cloudflare

Speakers:<ul><li>Nicole Stewart, lead security incident investigator (CTI), Jisc</li><li>Joe Pitt, principal threat intelligence architect, Jisc</li></ul>In this training session you'll learn how to deploy an instance of the MISP (misp-project.org) platform and get this connected to both the Jisc CTI Sharing Group service and your own Microsoft Defender tenancy.

Malware Information Sharing Platform (MISP) threat sharing and Defender integration training session

Speakers:<ul><li>Nicole Stewart, lead security incident investigator (CTI), Jisc</li><li>Joe Pitt, principal threat intelligence architect, Jisc</li></ul>Meet with some of this year's speakers and experts as a community, to ask any burning questions and help address personal challenges.

Speaker: Anthony Wells, senior systems engineer, Arctic Wolf Networks In this presentation, we explore Arctic Wolf security operations and the role of the concierge security team (CST) in delivering robust cybersecurity partnership. Arctic Wolf's security operations delivers 24x7 SOC, risk management, security awareness and severe incident response services as a turnkey subscription service from a single technology vendor. The presentation also highlights the value of Arctic Wolf's concierge security team—a dedicated group of cybersecurity experts assigned to each client. CST acts as an extension of the client's internal security team, offering proactive posture improvements, guidance and implementation help through a tailored Security Journey. They deliver a cyber practise as-a-service to organisations who are looking for a SOC partnership that is delivered by a single technology vendor on one unified platform.

Leading the pack in security operations - sponsored by Arctic Wolf 

Speakers:<ul><li>Majid Ali, UK public sector CTO, CrowdStrike</li><li>Steve Rogers, CTO, Coventry University</li><li>Emily Hampson, head of cyber security risk and compliance, University of Staffordshire</li><li>Martin Parsons, cyber security operations manager, University of Bath</li><li>Mat Flower, (Interim) deputy director and head of digital infrastructure/information security, University of Wolverhampton</li></ul>Digital threats are evolving at an unprecedented pace, organisations face the challenge of streamlining and consolidating the security efforts while trying to remain resilient. During our panel discussion we will hear what industry experts within the UK education sector are doing to create a unified and comprehensive approach.Featuring some of the UK leading experts, will explore how consolidation of security tooling is playing a significant part in enhancing the defences within universities and colleges across the UK, with particular focus on how CrowdStrike innovative solutions are helping organisations attain greater consolidation without compromising on agility or security effectiveness.

Consolidating security: enhancing defences in UK education - sponsored by Crowdstrike

Speaker: Thomas Willson, CISO, Imperial College LondonA walkthrough of how Imperial College London provide risk scoring for their IT service portfolio which is used to prioritise which services/vulnerabilities to remediate first by scoring services on a mixture of their vulnerabilities, their business criticalities and the risk that they present (eg public facing services are riskier than firewalled off services).It will also provide details on successes - improved engagement from senior management, risk reduction, identification of unknown problems, reduction in our service portfolio and improving investment.

Vulnerability reduction through cyber risk scoring 

Speakers:<ul><li>Darren Anstee, chief security technologist, NETSCOUT</li><li>Henry Hughes, CTO - cyber security, Jisc</li></ul>This session details our experience of the largest DDoS attack against UK education and research to-date and how we work closely with critical supply chain partners in this area.

Is disruption from large scale DDoS attacks inevitable

Speakers:<ul><li>Jennifer Morris, critical product manager, Jisc</li><li>Steve Howard, head of product security, Jisc</li></ul>Discover through this session how a single pane of glass can alert you to signs of potential concern that your organisation could be at risk from attack, by monitoring key security controls that you have implemented to strengthen your posture.We will explain the key differences between a Managed SIEM and Managed SOC. This session documents the journey of Jisc’s sector-specific threat monitoring and alerting service using the model of continuous improvement as threats continue to evolve and showcases how this is the cornerstone service of managed SOC as well as a stand a loan service.

How can a single pane of glass reduce your risk

Speakers:<ul><li>Neil Furminger, head of cyber essentials, IASME</li><li>Alex Harding, head of IT services, Runshaw College</li><li>Stuart McCulloch, security specialist, Jisc</li></ul>In this training session, learn about Cyber Essentials and what is ahead for the new question set in 2025.

Cyber essentials training clinic

Speaker: Douglas Gault, Google Threat Intelligence, GoogleIn an increasingly digital world, cyber threats are constantly evolving, posing significant risks to individuals, businesses and organisations. This threat briefing will provide a comprehensive overview of the latest emerging cyber threats, arming you with the knowledge and insights needed to inform your security.

Cyber security threat landscape update with Google Threat Intelligence and Mandiant Insights -  emerging cyber threats: what you need to know - sponsored by Google Cloud Security

Speakers:<ul><li>Neil Furminger, head of cyber essentials, IASME</li><li>Alex Harding, head of IT services, Runshaw College</li><li>Stuart McCulloch, security specialist, Jisc</li></ul>Meet with some of this year's speakers and experts as a community, to ask any burning questions and help address personal challenges.

Speaker: Jeff Lenton, systems engineer, CorelightLearn how your SOC can benefit from NDR across environments. This presentation looks at the evolving role of network detection and response (NDR) and how security teams are using it in their cloud, multi-cloud, and hybrid defence strategies.

How to enhance visibility and security with NDR - sponsored by Corelight UK Ltd

Speaker: Jennifer Roderick, strategic threat intelligence lead, Police Digital ServiceCyber threats are ever present across the UK, impacting the day-to-day operations of our society. Cyber attacks against our education sector, critical infrastructure, local authorities, and emergency services have resulted in cascading impact due to inter-connectivity and shared services.This session looks at Defend as One strategy for UK Policing, the threats that are observed, and how working collaboratively amongst the Defend as One sectors can better protect the UK against the spectrum of cyber threats.

Cyber security threats and the community 

Speaker: Paul Knee, head of security operations, JiscPaul Knee closes off day two of the event, leading into the online only day.

Day two closing thoughts

Day two closes

Day three opens

<ul><li>Meet the exhibitors</li><li>Review the programme for the day</li><li>Meet your virtual host</li></ul>

Platform opens

Speaker: Heidi Fraser-Krauss, CEO, JiscJisc CEO Heidi Fraser-Krauss welcomes delegates to day three of Security Conference.

Welcome to day three

Speakers:<ul><li>Steve Lenton, director of technology, The British Library</li><li>Mike Addinell, security operations manager, The British Library</li></ul>In this opening keynote presentation, Steve Lenton and Mike Addinell will explore the implications of a cyber attack to a business and individuals, addressing resilience and wellbeing in the aftermath and methods of mitigation.

Resilience and wellbeing in the aftermath of a cyber attack 

Speaker: Lynda Vongyer, independent freelance resilience specialistThe management of incident response is often thought of in purely reactive ways. A disruptive event occurs, senior colleagues get together to discuss and agree the best resolution actions to be adopted.During this short presentation we will be discussing how a proactive approach can shorten the duration of a disruption and reduce the costs of mitigating actions, or even prevent a significant disruption from occurring at all.Getting ahead is always preferable to catching up, but how can this be achieved?

Incident response, the benefits of early detection and dealing with emerging risks

Speakers:<ul><li>Stuart Lawton, senior relationship manager, Jisc</li><li>Noel Davis, subject specialist - infrastructure, Jisc</li></ul>Are you working towards ISO 27001 compliance at your UK organisation? Or perhaps you're in the initial stages of information gathering and would benefit from further guidance? The live online ISO 27001 clinic gives you the opportunity to ask questions and have them answered, provide feedback on any areas that are problematic, as well as share your journey with other organisations.

ISO 27001 Clinic

Speaker: Caren Milloy, director of licensing, JiscThe UUK Jisc strategic negotiation groups set negotiation strategy for the collective licensing of digital solutions utilised across the university and college estate.Tackling issues such as cost, licensing terms, AI, data and interoperability, come and hear how we are working collaboratively to deliver efficiencies to our members and vendors in priority areas including cyber security.

Collective efficiencies - strategic licensing and negotiation 

Speaker: Mark Tysom, senior product manager - cyber security, JiscThis session will look at the key findings from this year's cyber posture survey, identifying trends and differences within and between sectors.

An overview of the Jisc cyber posture survey results 2024 

Speaker: Shujun Li, Professor of cyber security and Professor of Institute of Cyber Security for Society (iCSS), University of KentIn this session, the speaker will share his experience and views on existing cyber skills development activities for the higher education (HE) sector and what can be done to get more people upskilled towards a cyber security career pathway for the HE sector and beyond.The content of the talk is informed by many activities the speaker has been leading and contributing to within the Institute of Cyber Security for Society (iCSS) of the University of Kent, and as a co-founder of three local cyber security ecosystem builders including KMCC (Kent & Medway Cyber Cluster Ltd), KMCS3 (Kent & Medway Cyber Security Student Society) and KMCSN (Kent & Medway CyberSchools Network). More widely, the speaker will also talk about the national and international landscapes and future directions of cyber skills development for the higher education sector and beyond, and will engage with the audience for an interactive discussion.

Cyber skills development for the higher education sector and beyond 

Speaker: Tom Benham, IT services manager, Grwp NPTC GroupThis session will delve into the NPTC Group of Colleges recent experience of a cyber attack.

Surviving a cyber attack

Speaker: Adam Phillips, lead Incident Investigator (DFIR), JiscJoin us for an in-depth session on the power of our digital forensics and incident response (DFIR) services, designed to help institutions swiftly and effectively manage cybersecurity incidents.We will explore how our DFIR team supports the incident response process from investigation to containment and eradication. Attendees will gain insights into the forensic tools, techniques, and strategies used to analyse compromised systems, identify the root cause of incidents, and support legal proceedings if necessary.

The Power of Jisc's Digital Forensics and Incident Response (DFIR) 

Speaker: Paul Stokes, subject matter expert (digital preservation), JiscThe Data Deluge trailed over so many years by so many Cassandras is now upon us. Organisations are increasingly reliant upon their data to not only thrive but also survive. The data held by institutions represents a significant aspect of the current and (perhaps more importantly) future worth of an organisation. But it’s becoming increasingly difficult to find, organise, curate and protect that worth. The threat landscape is constantly changing. Risks are popping up everywhere. There are also tensions between on the one hand the need to keep safe (and keep usable) digital assets, but on the other hand dispose of (and reduce the resource footprint of) those self-same assets. This session is intended to surface some of those issues risks and tensions and to explore possible mitigation strategies. This will highlight strategies being considered/used at Jisc around data: management, retention, protection, preservation and disposal.

Smartly sort. Skilfully use. Safely dispose 

Speakers:<ul><li>Mark Worthington, security centre operations manager, Jisc</li><li>Paul Knee, head of security operations, Jisc</li></ul>In this session, we will cover the essentials of building a robust incident response plan, the key phases of effective response, and how to maintain business continuity in the face of a crisis.The session will focus on best practices for identifying, containing, and mitigating incidents, while highlighting the importance of preparedness and risk.

Incident response - hope for the best, plan for the worst

Speakers:<ul><li>Davina Luyten, MCommunications office, Belnet</li><li>Charlie van Genuchten, product manager Crisis Exercises, SURF</li></ul>In this presentation, we introduce GÉANT’s Human Factor task, where research and education networks across Europe join forces on crisis management, training and security awareness.The group creates materials and tools specifically designed for the European R&E community, helping institutions launch cybersecurity awareness programs or run cyber crisis exercises. We’ll showcase our approach, share key results and explore valuable resources that the Jisc community can use. Attendees will leave with practical insights and tools to enhance their organization’s cybersecurity efforts

Strengthen human security: tools and insights for R&E institutions 

Speaker: Tom Micciche, Cloud engineer - security, JiscJisc Cloud WAF (Web Application Firewall) is a SaaS based security layer essential for any online service, acting as a gatekeeper that protects against a multitude of cyber threats to ensure that only legitimate traffic reaches your servers, maintaining service continuity and protecting sensitive data.This talk will provide an overview of the service and how it can be deployed to protect your web applications promoting a secure online environment.

Securing your web applications using Jisc Cloud WAF

Speakers:<ul><li>Paul Knee, head of security operations, Jisc</li><li>Mark Worthington, security centre operations manager, Jisc</li></ul>This session will explore the latest trends in the 2024 cyber threat landscape, including case studies and examples from our CSIRT engagements. Join us to see how threat actors are changing tactics, techniques and procedures (TTP's) to bypass security controls and compromise environments.

The ever changing threat landscape

NCSC will outline some of the activities underway to help support improvements to research security in the UK.

The changing research security landscape

Speaker: Ben Chapman, head of architecture and engineering, JiscA presentation covering a range of topics providing some quick wins, routes forward and how Jisc’s services might be able to help in getting some of the basics of security instilled in your infrastructure. Some of the topics include protective DNS, NTP, web headers, logging, monitoring and some tools on the way.

Good old-fashioned basics

Speaker: Alastair Fergus, HoneywellA look in to the real time risk, threats and vulnerabilities in the operational technology environment within builds.

Reducing operational risks and security weakness in the OT environment 

Speaker: David Conway, director of technical services, University of SunderlandIn this closing keynote session, David Conway will talk about his firsthand experience dealing with a cyber attack, the challenges recovering and in maintaining security 3 years and the opportunities for the future.

3 years on: lessons learned from the front line

Speaker: David Batho, director of security, JiscJisc's director of security, David Batho provides the closing thoughts from this year's Security Conference.