Lead Sponsor 6–7 July 2009, Qeii conference centre, london ADVANCE NOtICE ia09 chairmen Iain Lobban Director, GCHQ Nick Hopkinson Chief Information Officer, GCHQ ia09 conference facilitator Edward Stourton Journalist and Broadcaster confirmed key speakers Sir Gus O’Donnell KCB Cabinet Secretary and Head of the Home Civil Service Paul Murphy Secretary of State for Wales and Minister for Digital Inclusion John Suffolk Her Majesty’s Government Chief Information Officer, Cabinet Office David Smith Deputy Information Commissioner Enrique Salem President and CEO, Symantec Jos Creese Head of IT, Hampshire County Council www.ia09.org.uk Gala Dinner Sponsor Leading Assurance Stream Sponsor I urge you to attend IA09…it will provide a powerful forum to take forward information risk management in government… SIR GUS O’DONNELL KCB Cabinet Secretary and Head of the Home Civil Service Welcome to IA09 Iain Lobban, Director, GCHQ Iain Lobban, Director of GCHQ, introduces IA09 and highlights some of the priorities that will focus the government’s premier Information Assurance event this year. In the last 12 months, the collective response to the requirements identified in the Data Handling Review (DHR) has been impressive. We need to see those activities through in the coming year and build on the emerging examples of excellence we have in information risk management in the public and private sector. However, there is a more strategic and enduring threat to citizen and government data and we must respond to that threat with the same determination and energy that has characterised the follow-up to the DHR. Improving information risk management in government is key to success. The delivery of enhanced government services to the citizen will go forward under Transformational Government – the challenge is to enable that delivery whilst managing the associated risks to our information. We must all understand our respective roles in rising to that challenge. The strength of our IA capability across government must be enhanced by increasing the knowledge and professionalism of our decision makers, their advisers and implementers. At IA09 a strong focus will be placed on education and training and the delivery of culture change, sharing some fascinating case studies. Industry has a critical role to play in helping us deliver IA across government, which is why the creation of a viable, vibrant IA industry is a further priority – strong collaboration must be the way forward. IA09 will provide a powerful platform for the most senior information risk experts from across government and industry. It is a vital opportunity to bring together the key players involved in ensuring effective government by safeguarding citizen and government data in the Internet Age. sign up today For the best rate sign up before 17th April and you’ll receive a £200 discount. T +44 (0) 20 7089 5806 E enquiries@ia09.org.uk www.IA09.org.uk WHY AttEND IA09? We asked you what is keeping you awake at night and what you wanted to hear at IA09. It has produced some compelling content that addresses today’s challenges. know what is eXpected of you in the coming year As the pace of implementation picks up, so do the mandated requirements from government. IA09 is a key platform for the government to communicate changes and plans. By making sure you’re in the room, you’ll give your organisation the best chance of being at the forefront of that change. answer the Question: how far have we come in managing the nation’s information risk? It’s two years since the launch of the National IA Strategy at IA07, and 12 months following the Data Handling Review, which provided much of the focus for IA08. Before we get into the next steps of implementation, this year’s flagship event will pause to take stock on progress to-date. Hear first hand from Sir Gus O’Donnell, Cabinet Secretary and Head of the Home Civil Service, the progress that is being made, the challenges that we all face, and the critical next steps. find out what real help is available now, not Just what’s on the drawing board Explore the range of expertise, research and services that CESG has poised to make your IA journey as pain free as possible. Find out what is available now, and how you can make the most of these products and services. take away tried and tested solutions for culture change Following in the footsteps of other organisations, first you’ll identify current perceptions and attitudes, and then you’ll be introduced to awareness tools that can alter this mind-set. Online tools, marketing techniques and innovative approaches will all be put under the spotlight, focusing specifically on how you can improve their effectiveness. drive assurance down the supply chain Recent data losses have highlighted the vulnerability the delivery chain can represent to government departments. The sheer number of suppliers, uncertainty around the information security measures they may have in place, and their possible reluctance to invest, all adds to this complex challenge. Join suppliers and government bodies to debate ways to tackle this problem. hear best practice in information sharing Data sharing is critical in delivering Transformational Government – but how do you go about it securely? What are the recommended guidelines? Get clear direction from the top, and hear best practice examples of central and wider government delivering enhanced citizen service through information sharing. soak up the wide variety of lessons learnt in the last 12 months The last 12 months probably mark the greatest upheaval and change the IA community has ever seen. Important lessons have been learnt. IA09 will round up all this invaluable knowledge so you can share the successes and ‘war stories’ of your colleagues from across government. see the value of ia laid bare IA09 will tackle the elusive question of the true value of Information Assurance. IA costs money, and yes, it delivers important business benefits, but to what extent do they justify the investment? By examining the return on investment and the cost of incident management, you should leave with more ammunition to make your business case. eXplore the implications of the credit crunch on ia What are the likely implications of the current economic climate? On government budgets? Suppliers ability to pitch for bids? On the make-up of the supply chain? Join in discussion around these key issues. bring your ia into the 21st century Looking to the future, IA09 will explore the implications of modern day phenomena such as social networking, remote working, and green IT. You’ll hear expert opinions on the increased level of threat, and you’ll go on to debate how to deal with the implications without restricting development in these key areas. what’s new at ia09? More sessions This year’s packed agenda features seven streams, plus workshops and topic tables running alongside them. Hand pick sessions that are relevant to you from over 60 individual presentations. ‘Last chance’ stream The vast choice means the sessions you most want to attend may clash. So you don’t miss out, we will be running a ‘last chance’ stream to repeat the most popular presentations. More delegates Without sacrificing the seniority of delegates this year, we are reaching out even more to those responsible for information risk management from across the wider public sector so delegate numbers this year will increase by 30%. Don’t miss out on the chance to network with this diverse audience. ia09 gala dinner “A very good evening, food and service great... Overall thoroughly enjoyable” Praise for IA08 Gala Dinner Join us this year for the gala dinner at the QEII Centre on Monday 6th July to network with your peers in a relaxed, sociable environment. Gala Dinner Sponsor Leading Assurance IA09 Agenda Stream E Managing The Risks Around Cyber Security Stream A Progress Made In The IA Environment Post DHR Stream B Understanding Your Information Risk Management Stream C Culture Change Stream DInformation Sharing: Using IA To Deliver Stream Sponsor: Stream F IA In The Current Economic Climate Stream G Future Trends & Innovation Transformational Government DAY 01 08.50 Chairman’s opening address Iain Lobban, Director, GCHQ 09.05 The continuing journey: Assessing long-term strategic progress achieved in managing the nation’s information risk Sir Gus O’Donnell KCB, Cabinet Secretary and Head of the Home Civil Service, Cabinet Office 09.25 Clarity on GCHQ’s leadership role in the new IA environment Iain Lobban, Director, GCHQ 09.45 Industry insight: The role of industry in helping public sector organisations manage their risk Enrique Salem, President and CEO, Symantec Stream A Progress Made Stream B Risk Management Stream C Culture Change Stream D Information Sharing Stream E Cyber Security Stream F Current Climate Stream G Future Trends 10.15 Pangovernment progress report. Understanding the process for managing your risk. Exploring attitudes and how to change them: the citizen and the end user. The latest Government view on information sharing and Transformational Government. How to balance the information risks of social networking. Doing more with less: Information Assurance on a shoestring. An overview of new innovations for the new environment. 10.50 Morning coffee and networking 11.35 Update on progress: Lessons from the first round of the IA maturity model. Online awareness tools: making them work harder. Can I share? Setting down the rules for safe information sharing. Inside the criminal mind: An update on trends in criminal capability. Collaboration in Action: Progress in implementing the ICM. Green IT: Reducing carbon footprint without reducing your security. 12.45 Networking lunch sponsored by Case study: An innovative approach to raising awareness amongst staff at DWP. Overview of different information systems used across Government. Tackling fraud: recognising the increasing insider threat. Pinning clear business benefits to information risk management. Facilitating secure remote access. Stream 13.55 Information Assurance through the eyes of your SIROs. What should governance look like in an organisation that manages its risk well? How to refocus on risk-based decision making. 15.05 Afternoon coffee and networking 15.50 Stream chairs’ feedback followed by panel session Each chairperson will summarise three key next steps that have emerged from their stream throughout the day 16.25 A Confidential Matter: One year on from the DHR, is government still committed to improving the security of personal data? Paul Murphy, Secretary of State for Wales and Minister for Digital Inclusion 16.45 Life in the new IA regime: What we’ve learnt from the first 12 months and what we’ve yet to do David Smith, Deputy Information Commissioner 17.10 Culture change: An insight into the journey of one organisation Peer-to-peer case study 17.35 Chairmen’s closing remarks 19.00 Drinks reception 20.00 Gala dinner sponsored by Leading Assurance Stream A Industry Partnerships Stream B Latest Policy & Guidance Stream C Education, Training & Professionalism Stream DInformation Assurance In The Supply Chain Stream E Managing The Risks Around Cyber Security Stream Sponsor: Stream F Engaging Wider Government In IA Stream G Future Trends & Innovation DAY 02 08.50 Chairman’s opening address Nick Hopkinson, Chief Information Officer, GCHQ 09.05 Delivering collaboration with transformational results: Central and local government working together Peer-to-peer case study 09.25 Sparking a chain reaction: How do you get assurance across the delivery chain? Panel Session Stream A Industry Partnerships Stream B Latest Policy Stream C Education & Training Stream D Supply Chain Stream E Cyber Security Stream F Wider Government Stream G Future Trends Security Policy Framework assessed: the benefits, the challenges and the solutions. An update on the development of professional skills in government. Building trusted third party relationships: a case study. 10.10 Successful procurement approaches under the spotlight. Research briefing on Cyberspace & the national security of the UK. Delivering clarity on local government guidance by unravelling the array of messages. The citizen’s view: what do they want from government in the future? 10.40 Morning coffee and networking The audit process explained: how it works. How to build resilience into your Information Assurance training. Pushing assurance down the supply chain. Using technical capability to manage risks. Update on central government initiatives that leverage wider government involvement. What is Cipher going to do for you? New guidance on off-shoring and nearshoring. Training for incident investigation response. How to raise awareness of security standards amongst IT contractors. Cyberwar debate: Making access to information easy for wider government. Quantum computing: what will it mean for IA? Stream 11.25 Understanding the effects of the recession on the supplier base. 12.35 Networking lunch 13.45 The Bid Process: how do we make it faster, slicker, cheaper? 14.55 Afternoon coffee and networking 15.35 Stream chairs’ feedback followed by panel session Each chairperson will summarise three key next steps that have emerged from their stream throughout the day 16.10 Taking the critical next steps: The Government’s IA vision for the whole public sector Ministerial address “This house believes the UK public sector has the technical resources to defend itself in a cyberwar.” Putting Information Assurance into the Dragons’ Den Closing panel session 16.25 You’ve heard the strategy, now is your chance to probe the plan. A top level panel of the people who make a difference will field your challenging questions. If they can’t give an answer there and then, you’ll know that the issue is being taken back for discussion, and feedback will be posted as soon as possible on www.iauk.org.uk. 16.50 Chairmen’s closing remarks 16.55 Close of conference This is a proposed agenda to give you an insight into the main themes at IA09. The detailed content is likely to evolve. For the latest version visit the website www.ia09.org.uk Workshops To allow you to delve deeper into the content, exchange ideas and hatch real action plans for the future, IA09 has introduced more niche interactive sessions. Workshops and additional interactive breakout sessions Red Team Sessions Following the success of the red team session at the IA Industry Forum, CESG will be inviting volunteers to join them to formulate action plans for issues that raise their head throughout the two days. CESG Clinic At various times throughout the programme you’ll have the opportunity for some quality time with the experts from CESG. Topic Tables Round table discussions will be hosted by speakers and CESG experts to discuss niche topics of interest. If you’d like to suggest a topic please contact the conference team on 020 7089 5895 or email charlottenutt @ theteam.co.uk. Workshop Sponsor Workshop A An A to Z guide to the IA Maturity Model What is it? How will it affect you? How do you prepare for it? What value will your organisation see? Exploring the three different approaches to using the model. Workshop B Getting buy-in across your organisation Winning the support of top level management. Workshop C Your guide to digital continuity Protect your information assets from becoming trapped in obsolete technologies. Workshop D Effective incident management Workshop E Understanding the threat An insight into data profiling, data mining etc. Includes live hacking demonstration. Workshop F ICM: Live Collaboration Exercise. SPEAKERS CONFERENCE FACILITATOR Edward stourton Journalist & Broadcaster Edward Stourton is one of the presenters of the BBC’s Today programme and as host of the prestigious foreign affairs programme Correspondent, was nominated for an Emmy and won an Amnesty award. He regularly hosts debates on Radio 4 and has also made numerous current affairs documentaries for BBC television and radio. IA09 CHAIRMEN Iain lobban Director, GCHQ Iain Lobban was appointed GCHQ’s Director in late July 2008. He is responsible directly to the Foreign Secretary for the management of GCHQ including control of operations in the UK and abroad, and through the Cabinet Secretary for the effective and economical management of the resources allocated to the department. He is a member of the Joint Intelligence Committee. NICK HOPKINSON Chief Information Officer, GCHQ Nick Hopkinson was appointed to a new GCHQ Director General post of Chief Information Officer in July 2008. He is a member of the GCHQ Board, and has held a Board position since February 2004, in his previous role as Director for Special Programmes. As CIO, he is responsible for helping to transform GCHQ for the internet age, and in particular to lead this transformation in IA and technology. SPEAKERS Paul Murphy Secretary of State for Wales and Minister for Digital Inclusion Paul Murphy was appointed Secretary of State for Wales in 2008. He is chair of the new cross-Departmental Committee on IT and Information Security and chair of the Cabinet Committee on Local Government and the Regions. Paul has been MP for Torfaen since 1987. He was appointed Chair of the Intelligence and Security Committee in May 2005. Sir Gus O’Donnell KCB Cabinet Secretary and Head of the Home Civil Service Sir Gus O’Donnell took over as Cabinet Secretary on 1 August 2005. Prior to that, he was Permanent Secretary to HM Treasury. Before that he had been Managing Director, Macroeconomic Policy and International Finance since 1999. From 1998 – 99 he was Director of Macroeconomic Policy and Prospects, and from 1997 – 98 was the UK’s Executive Director to the IMF and World Bank. David Smith Deputy Information Commissioner David Smith has responsibility for the Data Protection supervisory functions of the Information Commissioner’s Office based in Wilmslow, Cheshire. As well as providing Data Protection leadership across the Information Commissioner’s Office, David has direct responsibility for oversight of its Data Protection Practice and Development Divisions, its Regulatory Action Division, and the Scotland Office. John Suffolk Her Majesty’s Government Chief Information Officer, Cabinet Office John was appointed Her Majesty’s Government Chief Information Officer in June 2006. Prior to this he was the Director General of Criminal Justice IT ( CJIT ) from February 2004. John has worked in the engineering and financial service industries and has extensive experience in delivering IT-enabled change. John leads the work of the CIO Council. MIKE THOMPSON DWP Security (Part of Legal Group) Mike is a career Civil Servant, with broad experience of developing and delivering security controls within DWP. Currently, Mike is leading work to further develop a secure information-handling culture within DWP. He has led the development of the DWP culture-shift plan – covering security-related education, awareness and communications – supported by other key areas including HR and IT Security. sponsorship opportunities Lead Sponsor 2009 SPONSORS & EXHIBITORS Stream Sponsor Gala Dinner Sponsor Session Sponsor Leading Assurance Networking Lunch Sponsor Workshop Sponsor Confirmed Exhibitors “This is the most important Information Assurance event in the calendar if your company is working for the government in the security arena.” John Kirby OBE Director, UK Government Consulting Services, Symantec Why sponsor IA09? If you want to build your brand, raise awareness, generate leads or all of the above, IA09 provides a prime opportunity for your organisation. Here are just some of the reasons to get involved. A package to suit your needs Our sponsorship packages have been carefully thought through to make sure there is something to match your business’s needs. But if you can’t find the right fit, give us a call and we can tailor a package to suit you. Make sure your key contacts don’t miss you Often conferences don’t always connect exhibitors with delegates’ needs. IA09 is different. IA08 delegates commented that they found the exhibition to be an essential source of information and a great place to network with industry contacts. A clear return on your investment We understand that ROI is important to you. The environment at IA09 is designed to maximise interaction between sponsors and delegates so you can make the connections you want to help your business thrive. Ensure your voice is heard This year’s programme is all about implementation and delivery of IA. Delegates and sponsors alike will be invited to participate, debate and provide feedback. It will be an unrivalled opportunity for your brand and business to show its thought leadership and engagement with the issues addressed in the programme. Network with new faces IA is now, more than ever, at the top of the government’s agenda. We’re harnessing this momentum to attract new faces from across the public sector to the event, and maximising networking opportunities to enable you to meet them. Supporting Associations Take advantage of ongoing benefits It won’t be just your presence on the day that matters. There are many opportunities to get your brand and message to delegates in the event marketing and on the website, both before and after the event. FIND OUT MORE To find out more about sponsorship opportunities at IA09, contact Charlotte Nutt on 020 7089 5895 or email charlottenutt@theteam.co.uk. Official Public Sector Media Partner VENUE & AccomModation The QEII Conference Centre is located in the heart of Westminster in central London, and there are a number of hotels within walking distance. For your convenience we have negotiated allocations at favourable rates at the hotels listed. Please quote the relevant code to ensure you receive the best price for your stay. Please note that delegates and sponsors are responsible for booking and paying for accommodation. Rates correct at the time of printing, but may be subject to change. Queen Elizabeth II Conference Centre Broad Sanctuary, Westminster London SW1P 3EE T +44 (0)20 7222 5000 www.qeiicc.co.uk Park Plaza Riverbank London 18 Albert Embankment London SE1 7TJ T +44 (0)20 7958 8000 www.parkplaza.com •£ 170 per night, including bed and breakfast, single occupancy (including VAT) • £180 per night, including bed and breakfast, double occupancy (including VAT) • Please quote 050709THTA when booking City Inn Westminster 30 John Islip Street London SW1P 4DD T +44 (0)20 7630 1000 www.cityinn.com • £205.85 per night, including bed and breakfast, single occupancy (including VAT) • £217.35 per night, including bed and breakfast, double occupancy (including VAT) • Please quote THE050709 when booking Crowne Plaza St James Buckingham Gate London SW1E 6AF T +44 (0)20 7834 6655 www.london.crowneplaza.com •£ 170 per night, including bed and breakfast (including VAT) • Please quote ‘The Team’ when booking Jolly St Ermin’s 2 Caxton Street London SW1H 0QW T +44 (0)20 7227 7971 www.nh-hotels.com • £170 per night, including bed and breakfast (including VAT) • Please quote 86.904.602 when booking REGISTRATION FORM IA09 Contact Details E enquiries@ia09.org.uk T +44 (0) 20 7089 5806 F +44 (0) 20 7089 5900 www.ia09.org.uk REGISTRATION CODE: WEBAMP DELEGATE DETAILS Title Position Address First Name Postcode Dietary or other requirements Last Name Organisation Tel Mobile Email Country Once we have received your completed faxback form we shall send confirmation within 48 hours. How did you hear about this event? Please state your sector: Public If you’d like to register more than one delegate, please photocopy this form and submit one for each delegate. Alternatively, we are happy to process group bookings by telephone as you may find this quicker. attendance & fees Public Sector Early Bird Price Book by 15th May SAVE £200 £499 +VAT SAVE £100 £599 +VAT Tick here Tick here Full Price £699 +VAT Tick here Please state your organisation type: e.g. Central Government, Police, NHS, NDPB, Systems Integrator, Penetration Tester, etc. payment DETAILS Do you wish to pay by: Amex Switch/Maestro Private Sector Early Bird Price Book by 17th April Private Early Bird Price Book by 17th April Early Bird Price Book by 15th May SAVE £200 £1099 +VAT SAVE £100 £1199 +VAT Tick here Tick here Do you intend to join us for the gala dinner? Yes Full Price £1299 +VAT Tick here No • All ‘Early Bird’ discounts require payment within 30 days of the cut off date. Delegates wishing to pay after this deadline will be charged the full fee. • All prices include the gala dinner and unfortunately no refund will be available for anyone not attending the dinner. Card payments Card number Expiry date Security code Name on card Mastercard Cheque Visa Invoice Issue number Amex security code Invoiced payments If you’d like us to add your purchase order number to your invoice, please note it here Billing address if different to above Cheque payments If you would like to pay by cheque please make it payable to IA09 Conference and please write the delegate name(s) on the back of the cheque and post to the conference office at the address below. Cheque attached Cheque to follow Signature Conditions of booking Attendance at the event without payment in advance will not be permitted. Cancellations will be subject to full payment. Non-payment or non-attendance does not constitute cancellation. Requests for substitutions will be considered and credit notes will be issued against cancellations at CESG/GCHQ’s discretion. We reserve the right to offer your place to someone on a waiting list if we do not receive payment from you within the agreed timeframe. We will of course consult you prior to offering your place to someone else. DATA PROTECTION By completing and returning this form, you give your explicit consent that the personal data contained in this form may be used for our purposes in connection with this conference only. Personal data will be processed according to the Data Protection Act 1998. The Data Controller is The Team Ltd. ONGOING CONTACT WITH US If you would like to be kept up to date with future events and CESG news please tick here. It is CESG/GCHQ’s intention to provide access to delegate list onsite at the event. Please tick the box if you DO NOT want your name, job title and organisation listed. Please note: by registering for this event you are agreeing to The Team’s Terms and Conditions. These are available from the conference office. Alternatively you can post this form to: IA09 Conference Office, c /o The Team, 11 Southwark Street, London Bridge, London SE1 1RQ.