JCSC News: Done with chocolate eggs? Take the opportunity to input to the Cyber law

Introduction from Matt Palmer, JCSC Director

Dear reader,

This newsletter is coming to you slightly later than usual due to the way the Easter Holidays have fallen this year. I hope the bank holidays have given you a chance to spend some quality time with your loved ones.

This means we’re also at the end of the first quarter of the year, which seems to have come very quickly. As ever, it’s a challenge to summarise what we’ve been up to: so much of what we do relies on building trust by maintaining security and confidentiality.

I can tell you that our non-technical team have been busy running a range of engagement events. This includes running a series of briefings to support the consultation on the draft Cyber Security (Jersey) Law, which has now been extended to 23 April 2023.

You can read an overview of the feedback we’ve received below. However, if you’re affected by the Law, and want to meet with us as part of the consultation, please do get in contact. This Law is vital to supporting the Island’s future cybersecurity and it’s important that we get it right.

As ever, we are here to offer support and advice to improve the Island’s overall cyber resilience. To get in contact, call us on 01534 500 050, email [email protected], visit our Operations Centre at 1 Seaton Place, Monday to Friday between 9am and 5pm.

Article: Applying agile working principles to deliver JCSC services

Agile principles have become globally adopted in the world of software development, and have even been adapted in project management and other areas of business.

But, as director Matt Palmer discusses in his latest LinkedIn blog post, the basic principles of agile working are key to how JCSC operates as a public service body.

Cyber Law consultation: deadline extended

As I mentioned in the last newsletter, the public consultation on the draft Cyber Security (Jersey) Law opened on Tuesday 11 March. 

So far, we’ve held seven public briefings, as well as multiple 1:1 briefings for specific stakeholders. We’ve spoken to over 70 representatives from small businesses, digital and telecoms providers, financial services firms, food providers, and utility and infrastructure companies.

Across these briefings, there have been some clear themes:

• The guidance that accompanies the Law will be key in helping organisations understand their obligations

• We must get the scope of the Law right, and provide clear definitions

• While there are a range of views on the details of how JCSC should function, there is broad agreement that the Island needs more support to improve its cybersecurity

As you may have seen, the consultation deadline has now been extended until 23 April 2023. This will give all individuals and organisations – including potential Operators of Essential Services – more time to provide feedback to the Government of Jersey.

Tap the button below to find out more and give your feedback.

Our Latest Events

International Women’s Day Lunch: Thursday 7 March

We welcomed 25 people to our sold-out International Women’s Day lunch at Digital Jersey on 7 March. Guests had the opportunity to hear from an expert panel about how they have navigated careers in cyber security.

Here’s what we learned from the event:

• Many people - especially women - sidestep into a career in cybersecurity, bringing with them valuable skills

• The flexibility, critical thinking, and breadth of careers in cyber mean it should be an attractive route for women - but women are still under-represented, both globally and locally

• Attendees value having the opportunity to ask questions without putting their hands up - we’ll take this feedback into account for future events

Help wanted! We’re looking to use this event as a starting point to build a community of Women in Cyber in Jersey, and we’re looking for input.

If you have suggestions for future events, or want to be involved in organising them, you can respond to this email or email [email protected].

You can also keep up to date with the latest by joining the Women in Cyber Group on LinkedIn.

Mini Cyber and Data Conference: Wednesday 20 March

On Wednesday 20 March, we partnered with Jersey Office of the Information Commissioner to welcome 32 professionals from across a range of industries for a conversation about cyber security and data protection.

Attendees told us:

We know that there were several people on the waiting list who weren’t able to attend this event. You can be the first to find out about future events: follow us on Eventbrite. 

Upcoming event: AI for good - unlocking the real potential

The Islands Data Governance Forum next event will take place on Wednesday April 17 at Les Côtils, Guernsey (and remotely)

Join Dave Carney (Director for Risk Assurance and Data at Grant Thornton), Brent Homan (Bailiwick of Guernsey Data Commissioner), Stephen Green (Cyber Threat Intelligence Lead, Thomas Murray) for discussions on how AI can benefit society.

They’ll also be joined by Professor Sarah Morris (Professor of Digital Forensics at the University of Southampton) who will give a keynote speech on Digital Detectives: Uncovering the Role of AI in Fighting Cybercrime.

Find out more, sign up, and request to join the meeting online via Eventbrite.

Jobs in Cyber

Chief Information Security Officer
Carey Olsen

This role would suit someone with a recognised information security qualification and expertise in complex regulatory and contractual requirements.

Digital Forensics Unit Supervisor
States of Jersey Police

This role would suit someone with a experience of digital policy and strategy, and technical knowledge and qualifications.

Managed Service Engineer/Consultant (all levels)
SystemLabs

These roles would suit people at different stages of their career, provided they have a strong technical background and excellent customer service skills.

Learning and Tools of the month

Monitor your SSL/TLS certificate expiry

This free tool notifies you via RSS feed 30, 7 and 1 days before your SSL/TLS certificates expire. This will enable you to replace your certificates in good time and avoid any issues. Find out more here.

Find the AWS Account ID of any S3 Bucket

 If you use Amazon’s cloud services (AWS) you likely use S3 buckets to store data. You might have different accounts and not know which account is linked to which bucket. Here’s a technique that may help.