Day 1

Monday 22nd February 2021

09:30 - 10:30

COVID-19 and the Evolving Cyber Threat Landscape

According to the National Cyber Security Centre, a quarter of cyber-attacks between September 2019 and August 2020 were related to COVID-19.

With the impact of the pandemic likely to be with us well into 2021, this session will focus on the changing face of cyber threats as a result of the disruption created by the virus, with contributions from public and private sector experts.

Deryck Mitchelson, Director of National Digital and Information Security, NHS National Services for Scotland

Mark Mitchell, Cyber Security Evangelist, Check Point Software Technologies

11:00 - 12:00

Remote Working and Cloud Security

65% of public sector organisations have accelerated their cloud adoption strategy as a result of the recent shift to home working, according to a poll conducted at Holyrood Connect’s recent Cloud Services in the Public Sector conference.

So what does the shift to cloud mean for the attack surface of public sector organisations and how can they adapt their cyber strategies to reduce exposure to security risks?

Carol Peters, Cyber Security Architect, Renfrewshire Council

Mark Cunningham-Dickie, Cyber Incident Response Manager, Scottish Business Resilience Centre

Greg Iddon, Technology Strategist, Sophos

15:30 - 16:30

Cyber Security and the Supply Chain

A key element of the Scottish Government’s Public Sector Action Plan on Cyber Resilience is a focus on securing the supply chain and procurement.

Public sector organisations are typically involved in large and complex supply chains, which can be difficult to secure due to inherent or introduced vulnerabilities.

This session will use best practice to examine how your organisation can develop a proportionate, risk-based approach to supply chain security.

Keith Nicholson, Chair, Cyber Security Scotland and Member, National Cyber Resilience Leader's Board

Sue Milton, Project Board Member, UK Cyber Security Council Formation Project

Paul Chapman, Head of Public Sector Resilience, Scottish Government

Day 2

Tuesday 23rd February 2021

09:15 - 10:00

Developing Whole Organisation Cyber Skills

Cyber security is often treated like an issue solely for IT departments - yet many attacks are the result of human error, which can affect any section of an organisation.

In this session we will discuss how to develop a whole organisation approach to cyber literacy and cyber hygiene, and ensure all staff understand their role in preventing attacks.

Jordan Schroeder, CISO, HEFESTIS

Garry Scobie, Deputy CISO, University of Edinburgh

Tim Rawlins, Senior Advisor, NCC Group

10:15 - 10:45

The Future of Cyber Security Policy

In our penultimate session we will hear from the Scottish Government on the latest strategic thinking on the direction of cyber resilience policy in Scotland.

Ivan McKee, Minister for Trade & Innovation

11:45 - 12:30

Networking via Grip