Dr Claudia Natanson MBE, Chair, UK Cyber Security Council, Member UK National Cyber Advisory Board

• Assessing current ransomware trends and the impact on public sector operations and resilience
• Strengthening cybersecurity through effective incident response planning and technical controls
• Reducing harm by resisting ransom payments and supporting long-term disruption of organised cybercrime activity
• Building cross-sector resilience through skills development and engagement between public sector teams, and local communities.

Andrew Gould, Detective Chief Superintendent, National Cyber Crime Team Lead, National Police Chiefs Council

• Developing cybersecurity measures grounded in real-world evidence to ensure they effectively counter risks across critical infrastructure
• Imposing costs on adversaries by disrupting operations through technical friction across the entire attack lifecycle
• Addressing accumulated security debt in software systems by improving measurement frameworks and creating incentives for reducing technical security debt
• Shifting the perception of cybersecurity from a luxury to a necessity by influencing regulators to mandate secure-by-default features and reward long-term resilience over short-term cost saving.

Senior Representative, National Cyber Security Centre (NCSC)

• Traditional third-party risk management (TPRM) is no longer sufficient in today’s interconnected digital ecosystems.
• Examining how supply chain risk has evolved into a systemic, human challenge requiring collaboration over isolation.
• Through historical parallels and modern cyber warfare examples, he explores corporate, software, and logistical challenges, showing how concentration risks can destabilize entire sectors.
• Drawing on government and industry insights, the session highlights how visibility, shared assurance, and collective defence enable a shift from fragmented risk management to a unified, network-based “Defend-as-One” model.

Justin Kuruvilla, Chief Cyber Security Strategist, Risk Ledger

• • How government departments embed supply chain risk management across procurement stages
  • Supporting organisations to assess supplier resilience and improve oversight of third-party relationships
  • Integrating cybersecurity requirements into contracts and tenders, compliant with Cyber Essentials.

Richard Morrison-Butcher, Director, Cyber Resilience Centre for London

• Keeping all applications and systems up to date so known security gaps are removed as soon as possible
• Controlling and minimising what users can access to lessen the fallout from any compromised credentials
• Deploying security tools that can spot and prevent malicious code from running
• Putting clear breach-response processes in place to ensure rapid containment and recovery

Mark Logsdon, Chief Information Security Officer, NHS England

• Go beyond compliance: Learn how behavioural nudges can embed secure habits across departments — without relying on posters or mandatory e-learning.
• Use proven frameworks like MINDSPACE: Explore how public sector teams can apply behavioural science to drive meaningful, citizen-focused change.
• Demonstrate real impact: Discover practical ways to measure behavioural outcomes and report effectiveness to leadership, audit teams, and stakeholders.
• Make security part of the culture: Whether you’re in central government, local authority, or a public body, this session will help you keep security visible, relevant, and resilient.

Tim Ward, CEO & Co-founder, Redflags

• Exploring how young people are being drawn into cyber-enabled crime, including pathways from low-level online activity into serious and organised offending
• Outlining the role of the NCA and law enforcement in early intervention to prevent harm and reduce future criminality
• Working with education partners to build cyber awareness and positive routes into legitimate careers
• Key tips public sector organisations can take to support prevention and safeguarding young people at risk of cyber exploitation

Tiffany Skinner, Senior Officer – Prevent, National Cyber Crime Unit, National Crime Agency

• Much of today’s digital security across government, healthcare, and critical national infrastructure, relies on encryption based on mathematical problems assumed to be unsolvable. Quantum computing changes that assumption. As quantum capabilities mature, widely used encryption will become vulnerable, increasing risks to IT systems and to the services they provide.
•  The risks are well understood by cyber security agencies worldwide. In the UK, NCSC has made it clear that all sectors are expected to begin planning upgrades to their cryptography, and that this will be a long, multi-year transition. Organisations are expected to have migration plans in place by 2028, meaning action must start well in advance to avoid rushed, costly, and disruptive change.
•  Public sector organisations rely on thousands of cryptographic processes across cloud services, networks, IoT, and legacy platforms, yet many lack a clear understanding of where encryption is used or how critical services depend on it. This lack of visibility makes effective risk management and post-quantum planning extremely difficult.
• This presentation explains how encryption discovery provides the foundation for that planning, enabling organisations to identify weaknesses, prioritise critical systems, check supply chain risks and develop a realistic, phased post-quantum migration plan. Beyond PQC migration planning it is also the basis for Data Sovereignty risk analysis.

Graham Peters, Managing Director, Government Services Division, Arqit Limited

• How cloud consolidation raises systemic cyber-risk
• Why identity compromise, behaviour anomalies, and collaboration sprawl now define the main attack surface
• An outline framework for managing human-layer risk
• The importance of your integrating your ecosystem

Glenn Smith, Technical Expert, Mimecast

• Exploring the main threats facing the cyber landscape of the UK public sector
• Working in partnership to prevent cyber risks: sharing data and information
• Guidance on investing in digital infrastructure tools to help detect cyber risks
• Building a strong cyber-security culture across public sector organisations

Ed Mahon, Head of Delivery for Digital Security, Department for Work and Pensions
James Tumbridge, Partner at Keystone Law and Chair of the Digital Services Committee, City of London Corporation

Dr Claudia Natanson MBE, Chair, UK Cyber Security Council