Contents

• JCSC is now CE+ accredited

• Lunch and Learn: Hospitality and Retail

  • Wednesday 5 March: 13.30 -14.30

• FIRST LOOK: Subscribe to Cyber Bytes

• ICYMI: Cybersecurity in the news

• Jobs in Cyber

• Learning and Tools of the month

Dear reader,

Welcome back to our second newsletter of 2025. February has been a short but eventful month for JCSC.

I’m pleased to announce that we achieved Cyber Essentials Plus accreditation, working with Prosperity 24/7 and SystemLabs. By talking about Cyber Essentials, we can encourage other organisations in Jersey to consider it. We can also now draw on our own experience to support them, and increase the proportion of cyber secure organisations in Jersey.

Also this month, and after a lot of work, the JCSC Starlink is now installed, mounted, and functional. This means that if Jersey was to experience an incident that affected our telecoms providers, JCSC could stay connected and support the response.

Finally, this month we’re also we’re launching an new email: Cyber Bytes. Cyber Bytes will run in addition to this newsletter and - irresistibly bad name aside - we designed this mailing list with the majority in mind.

That includes the thousands of Islanders (and hundreds of organisations) who don’t have access to IT expertise. JCSC’s remit includes the whole Island, so it’s only right that we provide advice for everyone. Cyber Bytes will deliver accessible, actionable support for this audience.

If you want to subscribe to Cyber Bytes, you can simply vote in the poll below. You can subscribe to both newsletters, or just the one that interests you the most.

And finally, we know that many of you want to engage with us on the implementation of the Cyber Security (Jersey) Law, on which we had planned to start consulting with industry late last year. Due to the need to prioritise limited law drafting resources within Government we are currently awaiting a revised timeline for lodging.

At that point the draft Law will be published and we’ll revise our engagement plans and communicate these. However, Government has confirmed that they remain committed to lodging the law as soon as possible in 2025

Until next month,

Matt

JCSC is now CE+ accredited

This month, JCSC achieved Cyber Essentials Plus Certification. JCSC already encourages all organisations in Jersey to consider working towards Cyber Essentials. The scheme is flexible, backed by the UK Government, and focused on the five basic technical controls that can prevent many common cyber attacks.

JCSC was lucky to benefit from local expertise: Prosperity 24/7 carried out the assessment and SystemLabs provided technical support.

If you want to work towards Cyber Essentials or Cyber Essentials Plus for your organisation

• You can book a free 30-minute meeting for more information, advice and guidance.

• You can also find a full list of organisations who are certified to deliver Cyber Essentials assessments via our website.

Lunch and Learn: Hospitality and Retail

Wednesday 5 March: 13.30 -14.30

Our next Lunch and Learn session is taking place on Wednesday 5 March at 13:30 and there are still places available. This free event will help hospitality and retail organisations understand the cyber security risks that are unique to them, and how they can defend themselves.

Places are still available for our upcoming events: don’t miss out.

• Thursday 3 April 13:00 – 14:00: Individuals - BOOK HERE

• Monday 12 May 12:00 – 13:00: Financial Services - BOOK HERE

• Tuesday 3 June 10:00 – 11:00: Education - BOOK HERE

In the meantime, if your organisation could benefit from a bespoke talk or workshop from us, you can contact us via [email protected] to request one.

FIRST LOOK: Subscribe to Cyber Bytes

Cyber Bytes is a regular email update that will run alongside this newsletter. It’s designed for people who are looking for an accessible, actionable introduction to foundational cyber security concepts.

Cyber Bytes will also include steps that all subscribers can take themselves to improve their cyber security, even if they don’t have access to dedicated IT support. It will also include information, resources and guidance so subscribers can rely on trusted sources to learn more.

You can choose to subscribe Cyber Bytes, this newsletter, or both by voting in the poll below. If you ever want to unsubscribe from either email in the future, you can use the unsubscribe link at the bottom of the email.

And if you don’t vote, don’t worry: you’ll remain subscribed to this newsletter.

ICYMI: Cybersecurity in the news

British Library ransomware group strikes again

The Rhysida ransomware group has targeted the The Agency, which represents the estate of Michael Bond (creator of Paddington Bear), and Raymond Briggs (author of The Snowman, Father Christmas, and When the Wind Blows).

This is the same ransomware group who targeted the British Library in 2023. The British Library have confirmed that the recovery from that attack has already cost more than £1 million. It’s yet to be seen how The Agency will respond, but it could be worth a lot of marmalade sandwiches…

Spare a thought for the scammers?

This BBC article gives more context on the back end of the organised scam operations along the Myanmar-Thailand border. While we’re often - rightly - focused on the impact on people in Jersey, this highlights how some of those running the scams have been victims too.

FBI issue warning on Ghost ransomware group

The FBI has posted a security advisory warning about the Ghost ransomware group, also known as Cring, Crypt3r and other aliases. Ghost focus on exploiting publicly-known vulnerabilities which underscores the importance of patching regularly for all organisations, no matter your size.

Jobs in Cyber

Senior Security Consultant - Prosperity 24/7

This role would suit someone with a strong technical background in cyber security, experience of consulting, and a relevant degree.

Digital Solutions Internship - PwC

This internship would suit students studying for their ALevels, BTEC or equivalent, and who want to work in Jersey in the future.

The internship will take place between 4 August and 15 August 2025, so applicants will need to be available for this date.

Security Engineer - Legal sector

This role would suit someone with experience of researching and developing security measures and identifying potential threats.

Are you recruiting for a cyber role locally? Tell us at [email protected] and we’ll share your job listing with the community.

Learning and Tools of the month

Each month, we provide a round up of tools that our team have found useful, and which could be useful to cyber security professionals. If you’ve found a helpful tool you’d like to share, please email us and we’ll include it in a future newsletter.