Requiring continuous vigilance, education and consistent behavior across all levels of an organisation, achieving good cyber hygiene is not an easy task. The rapid pace of technological change, evolving cyber threats and the growing complexity of IT environments can further complicate efforts.

Our expert panel will discuss the what, who and how of cyber hygiene, and what it means to different people and organisations. Join us for a panel discussion as our experts ask why is cyber hygiene so difficult to achieve?

Modern day threat actors are political activists, serious and organised gangs or nation states. We often know how these operations work, what motivates them, their modus operandi and, ultimately, how they infiltrate and bypass our alerting systems. Organisations must start to mimic these threats by encouraging security testers to deploy the full spectrum of attacks so the true extent of exposure is known.

For many cyber and information security professionals the ability to identify and manage security risk within the supply chain has become a core component of the job description.  This panel will discuss how to go about building resilience into a supply chain.

How should organisations go about buying cyber insurance? What is unique about cyber risks versus other insurable perils and what are insurers' looking for from clients in terms of understanding and pricing risk?  

Sandip Patel KC FCIArb has been at the forefront of high profile cases involving cybercrime and cyber security.
Sandip was prosecuting King’s Counsel in ‘DarkMarket’, ‘the Facebook Hacker’, prosecution of members of ‘Anonymous’ for the hacking of PayPal, Visa, Sony, FBI, CIA, UK NCA, MoD etc, and ‘the boy who almost broke the Internet’. Amanda Finch, CEO at CIISec talks to Sandip about some of his cases and career to-date.

Building a futureproof Critical National Infrastructure (CNI) presents significant cyber challenges due to the increasing complexity of digital systems, evolving cyber threats, and the rapid pace of technological change. As CNI relies on interconnected networks, it faces heightened risks of cyberattacks, such as ransomware, data breaches, and nation-state threats.

A Chief Information Security Officer (CISO) faces numerous challenges in balancing security and business objectives. The role requires defending against sophisticated cyber threats while navigating the complexities of regulatory compliance, budget constraints and rapidly changing technologies. Our CISO panel discuss their roles, what CISOs are looking for from the vendor community, and the journey the industry needs to take to embrace professionalism.

As cyber threats grow in sophistication and frequency, leaders will need to navigate an increasingly complex digital landscape, integrating emerging technologies like AI, blockchain, and quantum computing into security strategies. Annabel and Sally dissect what qualities are likely to be required for future cybersecurity leaders.

The cyber security industry is relatively young and yet the industry is already using professional titles to highlight quality, experience and knowledge. CIISec and The Cyber Scheme lead the way in running assessments for Chartered Status, working with assessors who are trained to probe at interview the knowledge, skills, and capabilities required to gain this prestigious registration. This workshop aims to reduce confusion and increase awareness of how professional titles are attained.

Developing a strong cybersecurity team is essential for effectively defending against evolving threats and ensuring robust organisational security. This process begins with recruiting individuals who possess diverse skills and backgrounds, fostering a collaborative environment that encourages knowledge sharing and continuous learning.  This workshop looks at how organisations can build a resilient team that not only responds to incidents but also anticipates and mitigates risks proactively.

When facing a ransomware attack, organisations must navigate a range of critical decisions. Within the first 24 hours, determining the response - report the incident to authorities, engage legal firms, and notify insurers - can be pivotal to the business. The outcome of a ransom demand is a complex issue involving ethical, legal, and strategic considerations. While engaging may appear to be a quick fix for restoring systems and data, it may not even be a security leader’s choice, let alone offer any guarantee of recovery, and may even increase vulnerability to future attacks.

Accountability in industrial cybersecurity is critical to safeguarding operational technologies (OT) that power essential services like energy, manufacturing and transportation. As these systems become more connected, they face heightened risks from cyber threats that can disrupt entire industries. This workshop explores the industrial ecosystem and the security standards and practices required to protect critical infrastructure from breaches and attacks.

OT/IT convergence - the integration of operational technology (OT) with information technology (IT), enhances efficiency and data-driven decision-making, but also poses significant cybersecurity risks. OT systems, traditionally isolated and designed for reliability, are now exposed to IT-based threats like ransomware, malware, and data breaches. This workshop looks at the threats and opportunities this convergence poses to cybersecurity and the growing need for professionalism in OT cyber.

Being hacked or scammed can have a profound psychological impact, often leaving victims feeling embarrassed, vulnerable, and anxious. The loss of personal data or financial information can lead to feelings of shame, guilt, and self-blame, as individuals may question their actions or judgment. This experience can erode trust in technology and even in others, causing long-lasting emotional distress. This workshop looks at the impact of cyber attacks at a human level and how employers can support impacted staff.

CIISec LIVE is here to showcase the best of the best that the industry has to offer. We'll have global speakers, industry influencers and viewpoints from across industry, academia, government, and law enforcement coming together for one day to knowledge share and drive innovation.

100% of attendees said that they would recommend the event to a colleague.

“Enjoyed the event, very well run and kept to schedule. All presentations were relevant and informative”

“Great event, glad we went to Scotland. Here's to Wales, NI and other UK cities (Birmingham, Manchester, Bristol) too.”

“Fantastic speakers, lovely venue. Very much enjoyed the event and look forward to the next one”

About Us
The Chartered Institute of Information Security (CIISec) is the natural home for the cyber professional community at every stage of their career and is committed to raising the standard of professionalism in cyber and information security.

This is achieved through having programmes that support development, recognition and success.
• Development - CIISec is the place to go for cyber professional development and ethical practice.
• Recognition - CIISec provides an authoritative voice for the cyber industry and recognition of excellence in practice.
• Success - CIISec helps you and your business succeed securely in the digital world.

CIISec works to attract talent to the cyber and information security profession and provide a universally accepted focal point. It is an independent not-for-profit body representing over 35,000 individuals in the cyber and information security industry. Governed by its members, it ensures standards of professionalism for training, qualifications, operating practices and individuals.

Our Corporate Members come from a wide range of industry, government, law enforcement and solution providers/vendors. We believe Corporate Membership benefits all types and size of organisations regardless of your business focus. CIISec helps businesses and their staff to develop capability and competency as well as raise their profile within the community.

See who we work with.