Synopses for the 2011 conference below:

John Bayliss: Vulnerabilities of Communications Devices. The Threat from Foreign Intelligence Services, Criminals, Terrorists and Hackers – INCLUDING LIVE DEMO!
It is generally agreed that education is the most important aspect of protecting your information. Some attacks are almost impossible to mitigate against, so knowing what form an attack might take is critical. With ever-increasing vulnerabilities around communication (Blackberries, mobiles, laptops, Bluetooth, WiFi), keeping your company data secure is critical to your business’ survival. How can you ensure that your private commercial information stays just that - Private?
Vulnerabilities
- Tempest
- Radio Communications
- Mobile Phones (Demonstration)
- PDAs
- Espionage
Back to top

Dai Davis: The Legal Aspects of Cloud Computing
Cloud computing has been an information technology (IT) buzzword for many years and now it's firmly ensconced in the mainstream of ICT and business. It is often closely associated with “Software as a Service” (SaaS), one of the fastest growing segments of the IT industry, which provides a more cost-effective alternative for enterprises to achieve their business objectives than traditional packaged applications.
In some areas of business, such as records management, cloud computing has high visibility because it is associated with large costs savings. However, cloud computing can be used in a less high profile manner in other areas of a business, from marketing to engineering, from contact database management to word processing. Cloud computing can be easily adopted, but with that adoption can come both obvious and hidden difficulties of great importance.
Is cloud computing for everyone? What are the contractual and legal risks of cloud computing? What are the legal-security implications? How should they be addressed? How can they be minimised and avoided? This workshop examines how cloud computing can be adopted and the dangers avoided on a practical level.
Dai Davis is a partner at his own law firm Percy Crow Davis & Co as well as a Chartered Engineer. He is also an active member of the Information Systems Security Association and is therefore well placed to speak on these issues. Among the aspects of cloud computing and SaaS that Dai will cover are:
- What is the relationship between cloud computing and SaaS?
- How and when is cloud computing used in companies?
- How and when should it be used?
- Security, due diligence and data security implications
- Control and ownership of data in the cloud
- Dealing with termination and other practical issues
Back to top

Andrew Erving: Should we still worry about terrorist attacks in the UK, and if so, what form will they take?
Now that Usama bin Ladin and co have been pretty well put out of action what is the present terrorist threat in the UK and elsewhere? What should we be concerned about now, especially in the run–up to London 2012? What can the government and the agencies do both to prevent attacks and, heaven forbid, to deal with the consequences? This session contains the personal impressions of a former practitioner, with experience in the London CT community and central government’s COBR.
Back to top

Dr Duncan Hine: The UK Cyber Security Challenge - a new way to find talented individuals
2012 will be the third year of the UK Cyber Security Challenge. This is an usual way of helping people enter the cyber security industry and has uncovered some remarkable talent in the past. The presentation will give an update on progress to date and give an insight into some of the issues and challenges that cyber security faces in the when we have a critical shortage of skilled people.
The challenge represents an innovative way of overcoming some of these problems and is making a real difference.
Back to top

Brian Hunter: The Human Element
You may spend thousands on ensuring that you have the best technical defences against today’s cyber attacks, but a good social engineer could breach your security with the unwitting and obliging assistance of your trusted staff members. Using phishing, deception, trickery, scams and maybe even some charm, coupled with a little technical wizardry, you could find the security of your environment compromised. This is a real-life example of what’s possible. Artificial intelligence is no match for natural stupidity.
Back to top

Graham McKay: Social Media - Information Security Friend or Foe?
Graham takes you on a social media journey including the good, bad and ugly of social media from his companies perspective. Tips and tricks a plenty as well as advice on policy and strategy.
Back to top

Mike Small: The Top Ten Cloud Security Questions to Ask
Organisations are moving towards a Cloud model for IT to optimise the procurement of IT services. How does this impact on information security and compliance? The Cloud is not a single model but covers a wide spectrum, the security risks associated with Cloud computing depend upon both the service model and the delivery model adopted. This presentation outlines the risks involved in Cloud Computing and provides ten information security questions that every organisation considering a move to Cloud computing needs to ask.
Back to top
