Channel Islands Cyber Security Conference 2025
Date and Time
Thursday, 16 October 2025
8:45 | 8h 15m
Location
Radisson Blu Waterfront Hotel, Jersey
Rue de L'etau, JE2 3WF Saint Helier
Targeted primarily at Cyber Security professionals, this Conference will also be of interest to those running small businesses and charities here in the Channel Islands.
With a line up of great on and off island speakers we plan to focus on four key topics, namely:
- physical security
- investigation
- geo political threat
- threat intelligence and security around AI
Speakers
Agenda
Breakfast, sponsored by Softwerx, and Meet the Sponsors
Opening Remarks, Deputy Scott, Asst Minister, Sustainable Economic Development
Haydn Brooks, CEO & Co-Founder at Risk Ledger
Haydn Brooks is the CEO and Co-Founder of Risk Ledger, a network-first supply chain security platform transforming the way organisations manage third-party risk. Frustrated by the inefficiencies and blind spots of traditional third-party risk management (TPRM), Haydn founded Risk Ledger in 2018 with the vision of building a more connected, collaborative, and proactive way to secure global supply chains. Today, the platform enables thousands of organisations across government, financial services, healthcare, transport, and other critical sectors to move beyond static questionnaires and spreadsheets to continuously map, monitor, and mitigate risks across their entire ecosystems. Under Haydn’s leadership, Risk Ledger has become a trusted partner for CISOs and their teams, helping them identify hidden vulnerabilities like nth-party dependencies and concentration risks while strengthening collaboration between clients and suppliers.
Keynote - Rob Shapland, Director & Ethical Hacker, Cyonic
Rob's an ethical hacker, who's spent his life breaking into companies worldwide to help secure their systems against criminal attacks. His specialty is physical intrusion – breaking into offices by dressing up as a cleaner, or even as a Hollywood film producer and then stealing a computer from under their nose. Rob's unique approach to cybersecurity has earned him a reputation as one of the most exciting consultants and keynote speakers in the industry. He is a seasoned speaker at events and conferences around Europe, and regularly appears on BBC TV and radio, Sky News, ITV, Channel 4 and others as a cyber security adviser. When we asked Rob why he was keen to support our event he immediately said "Well, the main reason is I want an excuse to visit Jersey as I absolutely love it!" We love him already. ? He followed "But also I'm passionate about helping companies understand the real risk from cyber attacks, and how easy they can be, especially when they target your people."
Insider Threats in Cyber Security - Andy Compton, CEO Cortida Ltd.
Andy often works as a Fractional Chief Information Security Officer, helping companies shape their security strategies, advising leadership teams and providing services like risk assessments, security reviews and incident response. Outside of client work, Andy runs cybersecurity forums, mentors students entering the field and volunteers as a Data Protection Officer for charities. He has helped shape national security standards in recent years. He will be speaking about Insider Threats in Cybersecurity. Cybersecurity threats come from many sources—some are malicious, others are accidental or due to negligence. While external attacks often get the most attention, insider threats are a growing and often overlooked danger. He will cover what insider threats are, why they pose a serious risk, what motivates insiders to act, how to identify early warning signs and best practices for managing and reducing insider risk. Join Andy to gain practical insights and strategies.
"Deepfake attacks in Red Teaming"
Stuart leads the PwC Ethical Hacking team in the UK providing technical leadership to all parts of the delivery business. With a background in hardware and electronics, Stuart has worked on many connected systems projects including IoT and Automotive projects as well as more traditional penetration testing engagements. Stuart has over 25 years of practical experience scoping, delivering and managing large scale security engagements for clients from numerous industry sectors from government and critical infrastructure to manufacturing and finance, including working to define many of the technical standards that underpin schemes such as CBEST run by the Bank of England. In addition to this he also has over two decades experience as a CHECK Team Leader and has been involved in the delivery of numerous large red team engagements including CBEST, TBEST, TIBER and iCAST. Stuart works closely and flexibly with clients, and as a result has become a long-term trusted security partner.
Lunch & Networking
Welcome Back - David Carney, Chair, CIISF
"Surviving the Clones" - Peter Bassill, CEO Cyber Defence
"Surviving the Clones: Lessons from Three Industries Under Attack" No two industries are the same, yet cyber attacks often follow eerily similar patterns. In this talk, we will walk through three major incidents that struck transportation, finance, and retail — all very different businesses, but each facing an adversary deploying near-identical tactics. By comparing these case studies side by side, we will uncover why attackers reuse the same methods, how subtle differences in organisational response determined outcomes, and what every business can learn from those who endured the onslaught. Building on the theme of survival, this session will focus on practical strategies for detecting copycat campaigns early, disrupting attacker playbooks, and ensuring your organisation is prepared to survive — and thrive — in the face of cloned attacks. Important note - the audience will take away from this some very easy to understand tactics to survive a persistent and targeted attack
Tea/ Microsoft First Security: How secure365® Protects Your Organisation 24/7
Matt Smith is Chief Technology Officer at Softwerx, where he has been instrumental in shaping the architecture and operational strategy of secure365 - Softwex's 24x7 managed detection and response (MDR) service. Under his leadership, secure365 has evolved into a scalable, tenant-controlled security solution built on Microsoft technologies, integrating Defender for Endpoint, Defender for Cloud, and Microsoft Sentinel with automation and least-privilege access principles. With a strong focus on operational excellence and digital transformation, Matt collaborates closely with senior leadership and cross-functional teams to drive impactful change.
Pwning web sites via their AI chatbot agents and politely breaking guard rails
Flirting with AI: Pwning web sites through their AI chatbot agents and politely breaking guard rails Everyone is implementing AI chatbots to improve their customer experience and journey, without increasing call centre costs. But this comes with risk: get the configuration wrong and that chatbot can be convinced to part with data that it shouldn't. We think of conventional cyber security controls as being binary, yet AI can sometimes hallucinate, lie and mislead. It's a brave organisation that would trust their perimeter security exclusively to AI. We'll include some live demos to illustrate the problem and make you smile.
End of Conference Panel
Closing Remarks - David Carney, Chair, CIISF
Drinks Reception & " The Arctic Wolf Difference Demo" sponsored by P24/7
Tony Caria is a Systems Engineer at Arctic Wolf, helping organisations end cyber risk through proactive security operations across the South Coast and Channel Islands. “The Arctic Wolf Difference Demo”