CERT.JE - Cyber Security Awareness Month was a success!

Dear all,Wow that was a busy month! One event every 48 hours overall and fantastic feedback. I could spend the whole of this update talking about that – but we have news to share!We have completed the hiring of our technical team to provide a capability to prepare, protect and defend Jersey from a cyber attack. We had a huge number of amazing applications and thank you to everyone who applied.Paul Dutot, formerly of Defence Logic and Ports of Jersey, joins as the Head of Jersey Cyber Defence. James McLaren takes up the position of Cyber Security Senior Analyst after working at Logicalis and GCHQ. Morgan Franklin becomes CERT.JE's first-ever cyber apprentice.For Morgan, technology was always a big part of her life growing up. Focusing on IT and computing in school and maintaining that interest during early career opportunities enabled a passion for cyber security to flourish. Alongside working and her on-the-job development, Morgan is studying part-time towards a BSc in Digital & Technology Solutions (Cyber Security) from the University of Exeter, as well as a relevant professional qualification.James McLaren came to Jersey having worked nearly 20 years in the UK's intelligence, security and cyber agency, GCHQ, in Cheltenham, devising their first Internet security training course in 2001. He joins CERT.JE after eight years working for the managed security provider Logicalis, specialising in SIEM and security consultancy.Paul Dutot joins CERT.JE from being Chief Technology Officer at Defence Logic Limited. He previously managed the global provision of security services to a diverse range of clients including all forms of penetration testing, SIEM solutions and cyber security consultancy or governance services. Additionally, Paul developed custom SIEM implementations and response procedures to protect global clients from cyber security incidents. Over the last 12 months we have been working hard to lay the groundwork for CERT.JE, culminating in in a very successful Cyber Security Awareness Month in October. However, to deliver a lean and effective cyber emergency service that meets local needs, we need the right balance of skills and experience across a small team. With Paul, James and Morgan we now have the core capability to support local organisations and islanders in the event of a cyber attack. I am delighted to welcome them to the team, and look forward to working with them to deliver a secure and resilient island supported by a capable cyber defence.Regards,Matt

November 01, 2022 • Estimated Reading Time: 8 minutes

Official Launch of CERT.JE

We were delighted to welcome Deputy Alex Curtis, Assistant Chief Minister with responsibility for Digital, to officially launch CERT.JE and our Operations Centre in St Helier on 20th October.

In an event attended by many who have contributed to the development of CERT.JE over the last 12 months and sponsored by local cyber crisis communications experts Soteria, we heard from Dougie Grant, formerly of NCSC, about the cyber challenges we face as an island and how we can respond.

Deputy Curtis said, “Thank you very much for coming and for inviting me to officially open CERT’s operations centre. I’d like to thank Soteria for sponsoring today’s reception and our hosts, the Cyber Emergency Response Team.

"I was very pleased to visit these offices last month to see the excellent work that Matt and his team do and to learn more about the journey they’ve begun to improve Jersey’s cyber resilience.

"Earlier this month we hosted the Channel Islands’ Cyber Security Conference which included experts from across the UK. During my speech, I said that cyber security is a challenge which cannot be solved by government alone and that we need organisations across our island to take their cyber security seriously.

"I know that CERT have done a huge amount of work in this area to proactively engage with businesses and organisations.

"Over the last few weeks for cyber security awareness month CERT have hosted interactive exercises, keynote speakers and presentations to raise awareness and share expertise in this vital area.

"So, as we officially open the operations centre, I’d like to thank you Matt, and the whole team at CERT, for all the important work you do. I wish you every success in your new offices and look forward to working alongside you.”

CSAM2022 was a success! We hope you agree..

Here's our conference's first key note speech from Marcus Willett CB OBE

..thanks again to all our fantastic sponsors!

For those of you that came to the Channel Islands Cyber Security Conference on October 4th, you might have guessed which video we would post first..

All other conference content will be available this month - so make sure to follow us on Vimeo at https://vimeo.com/certjersey

Cyber Security Awareness Month Feedback

From around the web

Help us!

Are you a cyber security professional?

Please help and send us a short clip of yourself so that we can show as many varied careers in our industry as possible. 

To raise awareness of the exciting careers possible in cyber security we need video content that can be used repeatedly in schools. The first batch of these short videos will be played as a series in either computing and career lessons or assemblies.

The minimum to include is:

  • What do you do (day to day tasks)

  • Why you like it 

  • Any qualifications (if needed)

  • Skills that make a difference 

  • What subjects you/your team enjoyed (the more diverse the better)

  • Next steps to get started on their journey 

Try to make the video short and not just sat at your desk. Multiple short videos can be used if you have lots to say. 

For further tips Digital Jersey's Rory Steel has you covered in this short video - https://www.youtube.com/watch?v=eZ7SfwqxCDw

To upload a video, please place it in this folder: Cyber Security Video Uploads

Resources

Upcoming Events

Local: Building a Digital Jersey Skills Update with Digital Jersey and the Department for Children, Young People, Education & Skills - 10th November 2022

Digital skills and competencies are required across all industries, everywhere in the world. Jersey will need to adapt its educational offering and upskill its workforce if it is to continue to prosper and this event will outline the approach we need to take.

You will hear from the University of Exeter Business Schools and Anne Casey Education Ltd on their work in Jersey earlier this year, plus panel discussions including Ministers, Educators, Industry Leaders and Students.

Online: Security Posture Management Seminar: Frontline Security with Satisnet and JT Group - 15th November 2022

To achieve security for the modern-day, organisations need to adopt a unified methodology that encompasses both traditional security practices and tooling, alongside continuous security posture management. Satisnet and JT Group are holding an exclusive seminar specifically tailored for organisations of the Channel Islands.

Jobs

Jersey Financial Services Commission - Cyber Security Officer

To provide day-to-day assistance to the support of the Cyber Security function within the ICT department. 

PwC - Cyber Manager, Risk Assurance Services, Advisory

This career within Financial Markets Business Advisory services, will provide you with the opportunity to contribute to a variety of audit, regulatory, valuation, and financial analyses services to design solutions that address our clients’ complex accounting and financial reporting challenges, as well as their broader business issues.

RBC - Global Cyber Security Analyst (Jersey)

The analyst is responsible for providing technical support in several IT Operations functions including Access Request Fulfilment, Change Management, projects & Initiatives. You will be partners with Internal IAM Access Request Provisioning senior analyst \ Manager and support Team.

Tool of the month

Unfortunately, companies sometimes fail to properly secure their S3 buckets and thus publicly expose stored data to the Internet. 

This new open-source 'S3crets Scanner' scanner allows researchers and red-teamers to search for 'secrets' mistakenly stored in publicly exposed or company's Amazon AWS S3 storage buckets.

If you’d like to share local resources, jobs or events related to cyber security please do let us know via email to [email protected].