Season's greetings from CERT.JE! 🎅🤶

Please stay safe online this festive period. Keep an eye on our social media accounts for a series of Christmas cards with ten bits of helpful advice.

Follow CERT.JE on YouTube 🎦📺

The Channel Islands Cyber Security Conference content is now available on CERT.JE's YouTube Channel, with more great content to come.

Follow us here - https://www.youtube.com/@CERTJersey

From around the web

New mind-bending technology that creates media from scratch is evolving rapidly, and it’s billed as the next big disruption.

New data from the National Fraud Intelligence Bureau shows victims of online fraud lose an average of £1,000 per person.

An interesting article from earlier this year about the command centre in Qatar for the current World Cup.

Security minister Tom Tugendhat issued a stark warning to MPs after Commons Speaker Sir Lindsay Hoyle urged them to be careful with mobile phones.

All Jersey organisations should consider certifying to the Cyber Essentials Plus cyber security standard, and here’s why. Cyber Essentials (CE) is the UK government's baseline security standard for small organisations, and it’s mandated by the UK and Jersey government for public sector suppliers.

GitHub

CERT.JE is now on GitHub, the code and project collaboration infrastructure. GitHub is used to host useful defensive configurations such as logging and incident response tools. Many CERTs around the world use it for software development with the service providing the distributed version control of Git plus access control, bug tracking, software feature requests, task management, continuous integration, and wikis for every project.

The JPCERT Coordination Center is a great example, with several tools such as SysmonSearch, LogonTracer and EmoCheck.

GitHub also hosts projects that people can contribute to such as bug reports - see here - No responders available to enable in Cortex 3.1.7-1 Web UI · Issue #437 · TheHive-Project/Cortex · GitHub

Help us!

Are you a cyber security professional?

Please help and send us a short clip of yourself so that we can show as many varied careers in our industry as possible.

To raise awareness of the exciting careers possible in cyber security we need video content that can be used repeatedly in schools. The first batch of these short videos will be played as a series in either computing and career lessons or assemblies.

The minimum to include is:

• What do you do (day to day tasks)

• Why you like it

• Any qualifications (if needed)

• Skills that make a difference

• What subjects you/your team enjoyed (the more diverse the better)

• Next steps to get started on their journey

Try to make the video short and not just sat at your desk. Multiple short videos can be used if you have lots to say.

For further tips Digital Jersey's Rory Steel has you covered in this short video - https://www.youtube.com/watch?v=eZ7SfwqxCDw

To upload a video, please place it in this folder: Cyber Security Video Uploads

Resources

Upcoming Events

Local: Christmas Drinks - Channel Islands Information Security and Data Protection with the CIISF, the Channel Islands Data Protection Forum and the BCS Jersey Branch - 15th December 2022

This informal event at CERT.JE will provide an update on what's been happening in 2022 from a cyber security and data protection perspective, plus what we can expect in 2023.

Also available to virtual attendees, on Zoom. Grab a glass of your favourite tipple and join the festivities remotely.

Online: Infosec Jupyterthon with the Open Threat Research Community - 2nd & 3rd December 2022

An open community event for security researchers to share their experience and notebooks with the InfoSec community. Detailed schedule here.

Jobs

COMING SOON AT CERT.JE:

If your interest and expertise is in cyber risk management or industry engagement and you're driven to make a positive difference to our Island, keep an eye out for our final roles with CERT.JE, coming soon.

Ogier - Senior Technical Analyst (Network & Security)

This is a hands-on technical role, you will need to be passionate about the ever changing environment of infrastructure services, particularly the shift towards Cloud computing, as well as technically expert in one or more key Ogier technologies. As a senior role within the IT Infrastructure Network and Security Team you will architect, implement and maintain highly-available and secure IT infrastructure services across the Group.

Job description - Ogier Senior Technical Analyst

Standard Bank International - IT Security Head

Design, develop and deliver the IT Security and Logical Access Strategies for International Client Solutions (ICS), ensuring continuous alignment with SBG Group. A sound general knowledge of Information Technology and Cyber Security methodologies is required, alongside good judgement in relation to business and risk situations, specifically in relation to cyber and information risk.

Job description - IT Security Head

Jersey Financial Services Commission - Cyber Security Officer

To provide day-to-day assistance to the support of the Cyber Security function within the ICT department.

Job description - JFSC Cyber Security Officer

PwC - Cyber Manager, Risk Assurance Services, Advisory

This career within Financial Markets Business Advisory services, will provide you with the opportunity to contribute to a variety of audit, regulatory, valuation, and financial analyses services to design solutions that address our clients’ complex accounting and financial reporting challenges, as well as their broader business issues.

Job description - PwC Channel Islands

Tool of the month

GitHub - CodeYourWeb/Fastfinder:

Fastfinder is a tool to help with incident response, it can be used to find a potentially malicious file at scale across a network.

It also has some nice features such as YARA rule integration plus wildcard searches, and was designed to be used for CSIRTS.

If you’d like to share local resources, jobs or events related to cyber security please do let us know via email to [email protected].