CERT.JE - It's all about people

Dear all, Human actions are behind every security threat we face, and human action is also our first defence - it takes an island to secure an island.This month has been busy with meetings to develop collaboration and information sharing with organisations including Jersey Business, Bureau des Îles Anglo-Normandes, UK's NCSC, and our colleagues in Guernsey and the Isle of Man. In addition we held an informative and well attended round table discussion with local cyber security suppliers, looking at issues including Cyber Essentials, skills, and readiness.We have also begun recruitment for a new role as part of the new digital apprentice scheme initiative by the Government of Jersey – this is a great opportunity for a local person to join us and to help defend the island from cyber threats whist gaining a top degree in cyber security. Combining practical delivery with academic study, this is suitable for anyone seeking a career in cyber security regardless of their age, experience or professional background.Cyber security should be inclusive and open to everyone, and we’re aiming to do our part to make sure all islanders have these opportunities. Please share and apply via the links below.We have also progressed our response to the situation in Ukraine. This continues to evolve rapidly, and organisations should act now to ensure they are protected should these threats move westwards. Simple steps include introducing multi-factor authentication (both at work and at home), rapid and comprehensive patching (small biz? Turn on auto update), and registering for the NCSC’s free Early Warning System to get alerts if your organisation's systems are believed to be compromised. There's a role for everyone to play at home too - ensure your devices are set to auto update, be careful where you click, and be sure to turn on multi-factor authentication for all your email and social media accounts.Spoofed (fake) emails are increasingly common and we can all take simple steps to protect each other, so we are highlighting a useful tool below for organisations to check and improve their email security.We're also commencing planning for cyber security awareness month in October, alongside a number of local partners. Watch this space to find out what will be happening locally to help you at home and at work with your cyber security, and if you'd like to contribute please let us know.Regards,Matt

May 01, 2022 • Estimated Reading Time: 4 minutes

This week, Microsoft released a report detailing the relentless and destructive Russian cyber attacks observed in a hybrid war against Ukraine. Starting just before the invasion, at least six separate Russia-aligned nation-state actors launching more than 237 operations against Ukraine have been noted – including destructive attacks that are ongoing.

This 12 minute video from BT provides a helpful discussion with three specialists about the psychology behind cyber-crime, the importance of continuous training and finding the right technology partner. CERT.JE met with 18 local cyber security providers in Jersey last week - if you need help with cyber security there are many on-island firms that can assist.

A joint advisory from the NCSC and international partners details the 15 most commonly exploited vulnerabilities in 2021. Are you patched for these?

In this hour, your island needs you! CERT.JE are looking for one bright mind to help shield the island from cyber attacks whilst undertaking a digital degree in our apprenticeship scheme.

In this months blog post CIISF member Ewan Traynor provides an overview of the NCSC's Early Warning System - a free cyber defence tool essential at this time of increased cyber threat.

Resources

Upcoming Events

CYBERUK 2022 – 10 & 11th May 2022

The NCSC’s flagship event is held over two days at ICC Wales in Newport, South Wales, and provides a key opportunity for the cyber security community to interact, network and share knowledge. Don't worry if you miss the deadline - keynote speeches will also be streamed on the CYBERUK YouTube channel in order to maximise accessibility for all.

Jersey Chamber Breakfast Briefing - Cyber Security - 19th May 2022

This Chamber of Commerce Breakfast Briefing, kindly sponsored by JT and held at The Royal Yacht Hotel, will include security specialist insights, local cyber intelligence and a discussion on just how to secure your business-critical information.

With speakers from Satisnet, CERT.JE and JT, this ticketed event will include a Q&A session moderated by Dave Cartwright. Breakfast and registration from 8.00am. Presentation begins at 08.30am.

Tool of the month

Test for modern internet standards

Are your website and email configured securely for the modern internet? internet.nl allows you to quickly test by entering your domain name or email, and provides a simple list of areas for improvement.

Can you get to 100%?

Cyber Vacancies

Many people have told us there are not many cyber security roles in Jersey, or that it is difficult to find new team members, so we're sharing the opportunities we are aware of below... including one with CERT.JE.

Please note that sharing is not endorsement.

Cyber Security Analyst at CERT.JE

"Prepare, protect and defend Jersey from global cyber threats whilst completing a degree in Digital & Technology Solutions (Cyber Security) with the University of Exeter as well as an appropriate professional qualification."

Information Security Risk Analyst at Ogier

"Ogier need an Information Security Risk Analyst to add value across their teams, proactively partnering with the business to continually assess and identify potential risks, evaluating these to ensure that they are appropriately mitigated through properly implemented policies, procedures, training, 'systems and controls."

Cyber Security Manager at PwC

"A career in PwC's risk assurance practice as a Cyber Manager will provide the opportunity to solve clients most critical business and data protection related challenges."

If you’d like to share local jobs or events related to cyber security please do let us know via email to [email protected].