Agenda

3.00pm - Arrival

Session 1:
Secure by Design: Building Secure Systems, and reducing risk around cyber systems
Speaker: Robert Di Schiavi

In today's digital landscape, the importance of secure software systems cannot be overstated. The growing number of cyberattacks and data breaches highlights the critical need for building secure systems from the ground up. This is where the concept of secure by design comes in.
 
Secure by design is an approach to software development that focuses on building security into the design and architecture of software systems from the very beginning. It involves identifying potential security risks early on in the development process and implementing appropriate security measures to mitigate those risks.
 
In this presentation, we will explore the principles of secure by design and its importance in the modern software development landscape. We will examine various security risks and vulnerabilities that can be addressed through the secure by design approach, and discuss best practices for incorporating security into the software development lifecycle.
 

We will also discuss the role of various stakeholders in the secure by design process, including developers, security experts, and project managers. By the end of this presentation, attendees will have a better understanding of how to implement secure by design principles in their own software development projects and build more secure systems overall.

Session 2:
Interactive scenario based response session

Session 3:
The Advantages of having a SOC and SIEM in the face of increased threats
Speaker: Graham Peck

Premier League football clubs are very similar to medium to large enterprises. They have annual revenue figures in the tens or hundreds of millions. This makes them an attractive target for cybercriminals. 

Playing in the English Premier League (EPL) is one of the most exciting and well-known football competitions for any club to compete in. However, with added exposure comes an increase in the risk of cyber breaches. 

In this session, we will cover the challenges, such as ransomware and the theft of data on players, financials and other sensitive information, that Premier League football clubs face. This is especially pertinent due to the increase in the value of player data in line with esports.

Hear from Graham Peck, Data Security Manager / DPO at Leeds United Football Club about how they have overcome the difficulties in securing this data, how they have identified and addressed security gaps, and how they protect the business against the risk of being unable to host a match and related losses. 

Event attendees will gain a better real-world understanding of the advantages of implementing a SOC and SIEM to protect their business and how creating a breach playbook can help to mitigate the chaos that can happen from suffering a breach.

Q&A panel session: Robert and Graham will be joined by Alan Freeland, Head of Security Operations and CREST International Council member to answer your questions

Networking & Refreshments

5.30pm - event closes

Speakers

Rob Di Schiavi_200px

Robert Di Schiavi

Head of Cyber Security,
Parliamentary and Health Service Ombudsman

Robert is extremely passionate about cyber, risk, and security.

After picking up his initial toolset as a child hacker, he continued his exposure to technological security with a career in the military. Robert brings a hacker's mindset to developing and incorporating counter threat measures. 

He has developed a broad range of specialist skills in multiple domains, including risk management, malware detection, analysis, programming, and reverse engineering.

He is also skilled in developing strategies to incorporate and deploy a variety of frameworks: att&ck, vulnerability management, and secure by design.

He has a mathematical background and is currently enrolled on a double masters (computer science and cyber security).

Graham Peck photo_edited

Graham Peck

Data Security Manager / DPO,
Leeds United Football Club

Graham joined Leeds United Football Club in 2019 as Data Security Manager / DPO. 

In his role, Graham manages data security across the various business unites that make up Leeds United Football Club. Graham has put new security measures and processes in place since joining the club, to ensure that data security is a priority across the organisation. 

Graham comes primarily from a IT Technical Network and Security background.

He has experience in a range of sectors including Financial Services, IT and Technology and communications before joining Leeds United Football Club. 

Alan Freeland_photo

Alan Freeland

Head of Security Operations, DigitalXRAID
CREST International Council Representative for Security Operations (SOC)

Alan joined DigitalXRAID in 2021 as the lead analyst for the world class, CREST accredited Security Operations Centre, bringing a wealth of knowledge. Alan has a history of cyber consultancy and cross industry experience, including Financial Services, IT & Technology and Engineering, in both Enterprise and small to medium organisations. At DigitalXRAID, Alan leads a highly skilled and certified team of analysts who manage and assess every aspect of DigitalXRAID’s customers’ cyber security, 24/7/365.  
 
Alan Freeland was elected to the CREST Security Operations Centre (SOC) Focus Group by peers in 2022. Following this election, Alan was also invited to join the CREST International Council in 2023 and will be overseeing strategy and activities as representative for the Security Operations Centre (SOC) discipline. Alan will also work closely with CREST President, Rowland Johnson, and the Regional Council chairs.