National Cyber Security Programme – Think Cyber Resilience

Cyber Pathfinder Training Seminar 5: Incident Management, Crisis Management and Communications

Newcastle: Wednesday 12th February 2020: Life Meetings and Events, Bio Science Centre, Times Square NE1 4EP

Time: 09:30hrs - 16:00hrs (09:30hrs arrival for 10:00hrs prompt start)

We all know that Digital Public Services in the UK are under constant cyber-attack. The UK Government has in place a National Cyber Security Strategy aimed at protecting UK Public Services from cyber-attacks. The National Cyber Security Programme (NCSP) is responsible for delivery of that strategy and is working with cross-government partners (such as the National Cyber Security Centre) to improve cyber resilience across UK Public Services.

The seriousness of this challenge means that local government and the wider local resilience community need to build a shared understanding of the implications for local multi-agency partners in responding to a significant cyber incident.

To help with this the National Cyber Security Programme (NCSP) is sponsoring a new Cyber Pathfinders scheme to help the local public service and resilience community navigate their way through the complexities of cyber security and cyber resilience.

The scheme is running free of charge a Cyber Pathfinder Training Seminar on Incident Management, Crisis Management and Communications (see details below) for local public sector participants running from October 2019 onwards.

Aim: To enable participants to understand the requirement for an effective incident management capability and crisis management requirements during a cyber incident.

Module 5.1: Incident Management: develop a clear understand of the requirements for an effective incident management capability.

Overview

• Describe incident management response mechanisms;
• Differentiate between the unique considerations during a cyber incident and a typical incident;
• Understand the role of the Joint Emergency Services Interoperability Programme (JESIP) principles in incident management;
• How to access Local Resilience Forum model - Incident Reporting and Cyber specific Response Templates

Description

Putting your plans into action. Experience from incidents is that many incident plans have failed to adequately cope with the dynamic nature of cyber enabled incidents. The actual vulnerability that triggered the incident may have been present with your systems for months before they manifest themselves. So your approach to managing a cyber incident may have many components that differ from other types of incidents you have experienced. This module will bring together the response mechanisms required for the organisation affected, the wider Local Resilience Forum community and the requirements for a civil emergency response.

Module 5.2: Crisis Management and Communications: embedding the take-up of crisis management requirements during a cyber incident.

Overview

• Differentiate between incident management and crisis management requirements;
• Define the thresholds for escalation within the response;
• Recognise the requirements of effective internal and external communications;
• Understanding working with the Media during an incident.

Description

The judgement of what constitutes a crisis versus an incident can often be a fine one. Within a data theft incident, the immediate impacts on the normal running of an organisation are often very low but the implications for the organisation and its customers (the public) can be significant if not devastating. As such Cyber incidents may escalate to crisis level quickly. This module will look at the Crisis management and communication needs, in supporting organisation response with the wider Local Resilience Forum and government requirements.

Audience:

Senior leaders, Policy Makers and Practitioners from English Local Authorities, Local Resilience Forums, and Public Sector Partners

Focus: Senior Executives from public sector organisations responsible for policy making and strategic oversight of cyber security, information or data management, business continuity planning, and incident management handling - especially in Local Authorities; Local Resilience Forums; Warning Advice & Reporting Points; or other Local Public Sector Bodies.

These events, which are free to attend for public service delegates are aimed at Senior Executives from Public Service providers - especially (but not limited to) Local Authorities and Local Resilience Forums or their public sector delivery partners - with responsibility for:

• Cyber Resilience/ Security
• Information Assurance
• Data Management and the impact of GDPR/NIS
• Democratic and Electoral Services
• Business Continuity Planning
• Emergency Planning

Places are limited to 60 participants for each Pathfinder event and so early booking is advisable.

Polite Notices

Charging Policy:

This event is funded by Ministry for Housing, Communities and Local Government on behalf of the National Cyber Security Programme and is therefore FREE to attend.

Registration: There are a few questions as part of the registration process - you will be given the opportunity to request CPD etc.

Special/ Dietary Requirements: You will be asked to specify if you have any special or MEDICALLY RELATED dietary requirements when completing the registration form.

Please note: We cater for vegetarian option as standard at all our events. This does not have to be specially requested.

Cancellations: In the interest of efficiency, please let us know if you are unable to attend at least 10 working days before this event, so that we can make adjustments to the delegate list and catering requirements. Apologies given with less than 10 working days, we request that delegate substitution is made wherever possible

iNetwork's privacy notice can be found here: https://www.tameside.gov.uk/privacynotice/finance