Presentation delivered by Kristoffer Getchell as part of CDN Cyber Resilience in Colleges event on 14th June, 2016 Cyber resilience has been on the agenda at Dundee and Angus for some time, although has generally been seen as something for IT to worry about. Kris’ presentation will outline the broad approach to cyber resilience that has been adopted by Dundee and Angus and will identify some of the issues that have arisen when engaging staff and students in the dialogue.

1. Cyber Resilience @
Kristoffer Getchell
Head of ICT Services

2. Contents
• Background
• The College View of Resilience / Cyber Security
• The Current Landscape, aka
…The Good…
...The Bad...
...The Ugly...
• Future Objectives
• Q+A

3. Background

4. Background
Kingsway
Gardyne
Saltire
Arbroath
Kirriemuir
Forfar
Montrose
3 Main Campuses
4 Satellite Campuses

5. Background
1000 Staff
7000 Learners

6. College View of Resilience
Business Continuity
Campus Services
Staff Availability
Backups
Comms Issues
Hardware Damage

7. College View of Cyber Security
• Acceptable Use
• Data Protection
• Mobile Device
• Records Management
• ICT Strategy
Policy
• ICT Determines Risk
• ICT Defines Solution
• ICT Takes Responsibility
Process

8. …The Good...
• Buy in from the BoM / Senior Leadership Team
• General Awareness of the Threats
• Security Mindset features in Strategy Documents
– Organisation Development Training
– Learner Internet Safety Days
– Frequent Reminders
– Password Management
– Approval to Conduct Phishing Exercises

9. …The Bad...
• General Awareness of the Threats
• Organisation Development Training
• Learner Internet Safety Days
• Password Management
• Approval to Conduct Phishing Exercises

10. …The Bad...
• General Awareness of the Threats
• Organisation Development Training
• Learner Internet Safety Days
• Password Management
• Approval to Conduct Phishing Exercises

11. …The Ugly...
• It has happened to us

12. …The Ugly...
• It has happened to us
TWICE

15. Future Objectives
• Key Objectives
– Move the conversation on
– Educate our users
– Create a culture of openness
– Embed Cyber Security / Cyber Resilience ethos

16. Future Objectives
• Key Objectives
– Move the conversation on
– Educate our users
– Create a culture of openness
– Embed Cyber Security / Cyber Resilience ethos

17. Q+A