National Cyber Security Programme – Think Cyber Resilience

Cyber Pathfinder Training Seminar 2: Cyber Threats and Core Resilience Capability

Leeds: Wednesday 19th June 2019: Leeds Town Hall, The Headrow, Leeds, LS1 3AD

Time: 09:30hrs - 16:00hrs (09:30hrs arrival for 10:00hrs prompt start)

Background: We all know that Digital Public Services in the UK are under constant cyber-attack. The UK Government has in place a National Cyber Security Strategy aimed at protecting UK Public Services from cyber-attacks. The National Cyber Security Programme (NCSP) is responsible for delivery of that strategy and is working with cross-government partners (such as the National Cyber Security Centre) to improve cyber resilience across UK Public Services.

The seriousness of this challenge means that local government and the wider local resilience community need to build a shared understanding of the implications for local multi-agency partners in responding to a significant cyber incident.

To help with this the National Cyber Security Programme (NCSP) is sponsoring a new Cyber Pathfinders scheme to help the local public service and resilience community navigate their way through the complexities of cyber security and cyber resilience. In particular the scheme is running free of charge a Cyber Pathfinder Training Seminar on the Cyber Threats and Core Resilience Capability (see details below) for local public sector participants running from May 2019 onwards.

Pathfinder Seminar 2: Cyber Threats and Core Resilience Capability

Aim: To provide participants with an understanding of the cyber threat landscape and the core components of a cyber resilience capability.

Module 2.1: Cyber Threats: provide a detailed understanding of the cyber threat trajectory

Overview

• Identify why your organisation may be vulnerable;
• Describe the various types of attack methodology;
• Role of threat analysis and its impact on organisational decision making;
• How to identify supply chain dependencies (outsourcing and managed services).

Description

• Organisations – increasingly reliant on interconnected devices, networks and data systems to run their business – are vulnerable to a constantly evolving cyber threat landscape. Since resilience planning starts with an understanding of risks and vulnerabilities, it’s vitally important that senior decision makers understand their organisational vulnerabilities and the methodologies used by those wishing to exploit those vulnerabilities. Equally important is the need to understand the boundaries of their networks extend into their delivery partners and across their supply chains.

• Resilience planning for ever evolving risk scenarios requires some awareness of threat analysis and where to go to get the latest advice or alerts. More importantly, strategic leaders need to understand and ask the right questions of the latest threat analysis, advice and alerts to be able to ensure that appropriate action is taken within their organisation, across their delivery partnerships and along their supply lines.

• This module offers participants the opportunity to explore their current awareness of cyber vulnerabilities and risks. Working in small groups they will explore the likely impacts of cyber risks to their organisations, and how vulnerabilities extend beyond traditional organisational boundaries. They will also develop an understanding of threat analysis and how to apply the latest analysis, alerts or emerging advice to the decision-making process – especially where working with other organisations such multi-agency resilience planning.

Module 2.2: Core Resilience Capability: outline the core components of a cyber resilience capability.

Overview

• State the core components of a cyber resilience capability;
• Review current capability.
• Overview of core roles and responsibilities
• Interaction of policy and governance functions in support of capability building.

Description

• Resilient organisations will already have in place plans for coping with emergencies or other disruptions to normal business operations. Public Sector organisations with responsibilities under the Civil Contingencies Act will be aware of various methodologies and working practices for multi-agency working when dealing for incidents – but to what to extent do these plans cover cyber resilience? How does planning for cyber resilience differ from other emergency, business continuity or emergency planning?
• In this module participants will explore current good thinking about cyber resilience capabilities and consider whether any changes or additions are necessary to their organisational or multi-agency resilience plans. They will develop their strategic understanding of core capabilities, roles and responsibilities – including the implications for policy and governance across their organisation, and command models for multi-agency working.

Audience: Senior Executives, Policy Makers and Practitioners from English Local Authorities, Local Resilience Forums, and Public Sector Partners

Senior Executives from public sector organisations responsible for policy making and strategic oversight of cyber security, information or data management, business continuity planning, and incident management handling - especially in Local Authorities; Local Resilience Forums; Warning Advice & Reporting Points; or other Local Public Sector Bodies.

These events, which are free to attend for public service delegates are aimed at Senior Executives from Public Service providers - especially (but not limited to) Local Authorities and Local Resilience Forums or their public sector delivery partners - with responsibility for:

• Cyber Resilience/ Security
• Information Assurance
• Data Management and the impact of GDPR/NIS
• Democratic and Electoral Services
• Business Continuity Planning
• Emergency Planning

Places are limited to 60 participants for each Pathfinder Exercise event and so early booking is advisable.

Polite Notices

Charging Policy:

This event is funded by Ministry for Housing, Communities and Local Government on behalf of the National Cyber Security Programme and is therefore FREE to attend.

Registration: There are a few questions as part of the registration process - you will be given the opportunity to request CPD etc.

Special/ Dietary Requirements: You will be asked to specify if you have any special or MEDICALLY RELATED dietary requirements when completing the registration form.

Please note: We cater for vegetarian option as standard at all our events. This does not have to be specially requested.

Cancellations: In the interest of efficiency, please let us know if you are unable to attend at least 10 working days before this event, so that we can make adjustments to the delegate list and catering requirements. Apologies given with less than 10 working days, we request that delegate substitution is made wherever possible

iNetwork's privacy notice can be found here: https://www.tameside.gov.uk/privacynotice/finance