Cyber Security for SMEs

Overview of Workshop:
This workshop will address cybersecurity concerns that SME's have. The emphasis will be on ensuring major issues are understood, developing an understanding of what threats your organisation faces and how they can be addressed. Practical examples will be used throughout in order to illustrate this.

The workshop will be highly participatory, mixing presentations with group exercises, along with attendees being encouraged to consider how workshop content can be applied to their own organisations.

Illustrative aspects of coverage within the workshop:
- Identification of important assets, risk assessment and control. Working through secure and insecure examples of working practice.
- What goes wrong in practice. A variety of examples including social engineering, websites, insecure devices, with classic and recent examples.
- Walkthrough of a hack. A live demo of a website data breach. How vulnerabilities are exploited. Common attacks, protections and mitigations.
- Specific issues: social engineering compromise, insider problems, bring your own device security (BOYD), authentication approaches, upgrading legacy sites, supply chain security ect. Examples showing the lengths people go to in order to carry out a compromise, e.g cloning portals, cloning branding.
- What can be done to protect? Cyber Essentials, why each aspect is important and how each lack of control is exploited in the real world.
- Incident response approaches. Why it is important not to jump directly to recovery, why it is important to plan.
- Attendee Concerns: Q&A discussion with the delivery team, with specific topics/issues identified by attendees.

Anticipated outcomes for attendees:
- Better knowledge of risk management approaches that can be developed
- Improved appreciation of risks faced by individual organisations
- Better knowledge of mechanisms that be deployed to mitigate identified risks
- Appreciation of current cybersecurity guidance and other available resources
- Improved ability to engage with specialists on cybersecurity topics

Key Speakers:
The workshop is led by cyber security expert Prof. John Clark and draws on extensive practical experience of leading cybersecurity professionals from the University of Sheffield Corporate Information and Computing Services and from South Yorkshire Police Cyber and Digital Team.

- John Clark
- Chris Willis
- Tom Griffin
- Elliot Parker
- Carl Dean
- John Yoxhall

Other Information:
Attendees who have registered one week before the event will be emailed and encouraged to briefly identify what they believe are the most pressing issues or problems they face and to identify any cybersecurity topics which are of specific interest. The workshop will then seek to address in some way any issues which have been raised, either as part of the developed programme content or in discussion sessions.