National Cyber Security Programme – Think Cyber Resilience

Cyber Pathfinder Training Seminar 6: Business Continutity and Recovery from Cyber Incidents

Bristol: Wednesday 11th March 2020: Bristol City Hall, College Green, Bristol BS1 5TR

Time: 09:30hrs - 16:00hrs (09:30hrs arrival for 10:00hrs prompt start)

We all know that Digital Public Services in the UK are under constant cyber-attack. The UK Government has in place a National Cyber Security Strategy aimed at protecting UK Public Services from cyber-attacks. The National Cyber Security Programme (NCSP) is responsible for delivery of that strategy and is working with cross-government partners (such as the National Cyber Security Centre) to improve cyber resilience across UK Public Services.

The seriousness of this challenge means that local government and the wider local resilience community need to build a shared understanding of the implications for local multi-agency partners in responding to a significant cyber incident.

To help with this the National Cyber Security Programme (NCSP) is sponsoring a new Cyber Pathfinders scheme to help the local public service and resilience community navigate their way through the complexities of cyber security and cyber resilience.

The scheme is running free of charge a Cyber Pathfinder Training Seminar on Business Continuity and Recovery from Cyber Incidents (see details below) for local public sector participants running from January 2020 onwards.

Aim: To enable participants to appreciate how business continuity complements cyber resilience and understands the requirement for effect recovery planning.

Module 6.1: Business Continuity: establish an appreciation of how business continuity complements cyber resilience.

Overview

• Outlines the linkages between business continuity life cycle and cyber resilience;
• Explain the relationship between service recovery time objectives and disaster recovery;
• How to assess BCM recovery time objectives against a cyber incident;
• Identify the need to assess critical suppliers’ resilience arrangements.

Description

Cyber Security incidents often create complex problems in business continuity terms due to their nature and the length of time it often takes to fully investigate the cause and whether your organisation has eliminated that from reoccurring. Business continuity plans need to take into consideration a of range options to maintain core capabilities, whilst transitioning back to business as usual. After a cyber incident business as usual may look quite different.

Module 6.2: Recovery: to understand the requirements for effect recovery planning

Overview

• Understand the need to review recovery plans in relation to cyber incidents;
• Post incident reporting and how to implement lessons through a change management process;
• Role of remediation planning (quick fixes for restoring to a normality);
• Need to agree recovery priorities (cyber systems and prioritised services).

Description

The recovery phase following a cyber incident can be a long journey. Whilst business operations may be restored, lessons identified built into policy, plans, procedures and staff training legacy may continue for many months if not years.

This module will look at case studies to support the lessons identified for developing a cyber recovery capability.

Audience:

Senior leaders, Policy Makers and Practitioners from English Local Authorities, Local Resilience Forums, and Public Sector Partners

Focus: Senior Executives from public sector organisations responsible for policy making and strategic oversight of cyber security, information or data management, business continuity planning, and incident management handling - especially in Local Authorities; Local Resilience Forums; Warning Advice & Reporting Points; or other Local Public Sector Bodies.

These events, which are free to attend for public service delegates are aimed at Senior Executives from Public Service providers - especially (but not limited to) Local Authorities and Local Resilience Forums or their public sector delivery partners - with responsibility for:

• Cyber Resilience/ Security
• Information Assurance
• Data Management and the impact of GDPR/NIS
• Democratic and Electoral Services
• Business Continuity Planning
• Emergency Planning

Places are limited to 60 participants for each Pathfinder event and so early booking is advisable.

Polite Notices

Charging Policy:

This event is funded by Ministry for Housing, Communities and Local Government on behalf of the National Cyber Security Programme and is therefore FREE to attend.

Registration: There are a few questions as part of the registration process - you will be given the opportunity to request CPD etc.

Special/ Dietary Requirements: You will be asked to specify if you have any special or MEDICALLY RELATED dietary requirements when completing the registration form.

Please note: We cater for vegetarian option as standard at all our events. This does not have to be specially requested.

Cancellations: In the interest of efficiency, please let us know if you are unable to attend at least 10 working days before this event, so that we can make adjustments to the delegate list and catering requirements. Apologies given with less than 10 working days, we request that delegate substitution is made wherever possible

iNetwork's privacy notice can be found here: https://www.tameside.gov.uk/privacynotice/finance