Lead Sponsor

6–7 July 2009, Qeii conference centre, london

ADVANCE NOtICE

ia09 chairmen Director, GCHQ

Nick Hopkinson Chief Information Offi cer, GCHQ

ia09 conference facilitator Edward Stourton Journalist and Broadcaster

confirmed key speakers Sir Gus O’Donnell KCB Cabinet Secretary and Head of the Home Civil Service

Paul Murphy Secretary of State for Wales and Minister for Digital Inclusion

John Suffolk Her Majesty’s Government Chief Information Offi cer, Cabinet Offi ce

David Smith Deputy Information Commissioner

Enrique Salem President and CEO, Symantec

Jos Creese Head of IT, Hampshire County Council

www.ia09.org.uk

Gala Dinner Sponsor Stream Sponsor

Leading Assurance I urge you to attend IA09…it will provide a powerful forum to take forward information risk management in government…

SIR GUS O’DONNELL KCB Cabinet Secretary and Head of the Home Civil Service Welcome to IA09 Iain Lobban, Director, GCHQ

Iain Lobban, Director of GCHQ, introduces IA09 and highlights some of the priorities that will focus the government’s premier Information Assurance event this year.

In the last 12 months, the collective response Industry has a critical role to play in helping to the requirements identified in the Data us deliver IA across government, which is why Handling Review (DHR) has been impressive. the creation of a viable, vibrant IA industry is We need to see those activities through in a further priority – strong collaboration must the coming year and build on the emerging be the way forward. examples of excellence we have in information risk management in the IA09 will provide a powerful platform for the public and private sector. most senior information risk experts from across government and industry. It is a vital However, there is a more strategic and opportunity to bring together the key players enduring threat to citizen and government involved in ensuring effective government by data and we must respond to that threat safeguarding citizen and government data in with the same determination and energy that the Internet Age. has characterised the follow-up to the DHR. Improving information risk management in government is key to success. The delivery of enhanced government services to the citizen will go forward under Transformational Government – the challenge is to enable that sign up today delivery whilst managing the associated risks For the best rate sign up to our information. We must all understand our respective roles in rising to that challenge. before 17th April and you’ll receive a £200 discount. The strength of our IA capability across government must be enhanced by increasing T +44 (0) 20 7089 5806 the knowledge and professionalism of our decision makers, their advisers and E [email protected] implementers. At IA09 a strong focus will be placed on education and training and www.IA09.org.uk the delivery of culture change, sharing some fascinating case studies. WHY AttEND IA09?

We asked you what is answer the Question: how far have we come in managing the keeping you awake at night nation’s information risk? and what you wanted to hear It’s two years since the launch of the National IA Strategy at IA07, and 12 months following at IA09. It has produced some the Data Handling Review, which provided compelling content that much of the focus for IA08. Before we get into the next steps of implementation, this addresses today’s challenges. year’s fl agship event will pause to take stock on progress to-date. Hear fi rst hand from know what is eXpected of you Sir Gus O’Donnell, Cabinet Secretary and in the coming year Head of the Home Civil Service, the progress that is being made, the challenges that we As the pace of implementation picks up, all face, and the critical next steps. so do the mandated requirements from government. IA09 is a key platform for the find out what real help is government to communicate changes and available now, not Just what’s plans. By making sure you’re in the room, on the drawing board you’ll give your organisation the best chance of being at the forefront of that change. Explore the range of expertise, research and services that CESG has poised to make your IA journey as pain free as possible. Find out what is available now, and how you can make the most of these products and services.

take away tried and tested solutions for culture change Following in the footsteps of other organisations, fi rst you’ll identify current perceptions and attitudes, and then you’ll be introduced to awareness tools that can alter this mind-set. Online tools, marketing techniques and innovative approaches will all be put under the spotlight, focusing specifi cally on how you can improve their effectiveness.

drive assurance down the supply chain Recent data losses have highlighted the vulnerability the delivery chain can represent to government departments. The sheer number of suppliers, uncertainty around the information security measures they may have in place, and their possible reluctance to invest, all adds to this complex challenge. Join suppliers and government bodies to debate ways to tackle this problem. hear best practice in information sharing what’s new at ia09? Data sharing is critical in delivering More sessions Transformational Government – but how This year’s packed agenda features do you go about it securely? What are seven streams, plus workshops and the recommended guidelines? Get clear topic tables running alongside them. direction from the top, and hear best practice Hand pick sessions that are relevant to you examples of central and wider government from over 60 individual presentations. delivering enhanced citizen service through information sharing. ‘Last chance’ stream soak up the wide variety of lessons The vast choice means the sessions learnt in the last 12 months you most want to attend may clash. So you don’t miss out, we will be The last 12 months probably mark the greatest running a ‘last chance’ stream to upheaval and change the IA community has repeat the most popular presentations. ever seen. Important lessons have been learnt.

IA09 will round up all this invaluable knowledge More delegates so you can share the successes and ‘war stories’ of your colleagues from across government. Without sacrifi cing the seniority of delegates this year, we are reaching see the value of ia laid bare out even more to those responsible for information risk management IA09 will tackle the elusive question of from across the wider public sector so the true value of Information Assurance. delegate numbers this year will increase IA costs money, and yes, it delivers important by 30%. Don’t miss out on the chance business benefi ts, but to what extent do to network with this diverse audience. they justify the investment? By examining the return on investment and the cost of incident management, you should leave with more ammunition to make your business case. eXplore the implications of the credit crunch on ia ia09 gala dinner What are the likely implications of the current “A very good evening, food and service economic climate? On government budgets? great... Overall thoroughly enjoyable” Suppliers ability to pitch for bids? On the Praise for IA08 Gala Dinner make-up of the supply chain? Join in discussion around these key issues. Join us this year for the gala dinner at the QEII Centre on Monday 6th July to bring your ia into the 21st century network with your peers in a relaxed, Looking to the future, IA09 will explore the sociable environment. implications of modern day phenomena such as social networking, remote working, and green Gala Dinner Sponsor IT. You’ll hear expert opinions on the increased level of threat, and you’ll go on to debate how to deal with the implications without restricting Leading Assurance development in these key areas. IA09 Agenda

Stream A Progress Made In The IA Environment Post DHR Stream E Managing The Risks Around Cyber Security Stream B Understanding Your Information Risk Management Stream Sponsor: Stream C Culture Change Stream F IA In The Current Economic Climate Stream D Information Sharing: Using IA To Deliver Transformational Government Stream G Future Trends & Innovation

DAY 01

Chairman’s opening address 08.50 Iain Lobban, Director, GCHQ

The continuing journey: Assessing long-term strategic progress achieved in managing the nation’s information risk 09.05 Sir Gus O’Donnell KCB, Cabinet Secretary and Head of the Home Civil Service, Cabinet Office

Clarity on GCHQ’s leadership role in the new IA environment 09.25 Iain Lobban, Director, GCHQ

Industry insight: The role of industry in helping public sector organisations manage their risk 09.45 Enrique Salem, President and CEO, Symantec

Stream A Stream B Stream C Stream D Stream E Stream F Stream G Stream Progress Made Risk Management Culture Change Information Cyber Security Current Climate Future Trends Sharing Pan- Understanding Exploring The latest How to balance Doing more An overview of government the process attitudes and Government the information with less: new innovations progress for managing how to change view on risks of social Information for the new 10.15 report. your risk. them: the information networking. Assurance on environment. citizen and the sharing and a shoestring. end user. Transformational Government.

10.50 Morning coffee and networking

Update on What should Online Can I share? Inside the Collaboration Green IT: progress: governance awareness Setting criminal mind: in Action: Reducing Lessons from look like in an tools: making down the An update Progress in carbon footprint 11.35 the first round organisation them work rules for safe on trends implementing without of the IA that manages harder. information in criminal the ICM. reducing your maturity model. its risk well? sharing. capability. security.

12.45 Networking lunch sponsored by Information How to refocus Case study: Overview Tackling fraud: Pinning clear Facilitating Assurance on risk-based An innovative of different recognising business secure remote through the decision approach information the increasing benefits to access. 13.55 eyes of your making. to raising systems insider threat. information risk SIROs. awareness used across management. amongst staff Government. at DWP.

15.05 Afternoon coffee and networking

Stream chairs’ feedback followed by panel session 15.50 Each chairperson will summarise three key next steps that have emerged from their stream throughout the day

A Confidential Matter: One year on from the DHR, is government still committed to improving the security of personal data? 16.25 Paul Murphy, Secretary of State for Wales and Minister for Digital Inclusion

Life in the new IA regime: What we’ve learnt from the first 12 months and what we’ve yet to do 16.45 David Smith, Deputy Information Commissioner

Culture change: An insight into the journey of one organisation 17.10 Peer-to-peer case study

17.35 Chairmen’s closing remarks

19.00 Drinks reception

20.00 Gala dinner sponsored by Leading Assurance Stream A Industry Partnerships Stream E Managing The Risks Around Cyber Security Stream B Latest Policy & Guidance Stream Sponsor: Stream C Education, Training & Professionalism Stream F Engaging Wider Government In IA Stream D Information Assurance In The Supply Chain Stream G Future Trends & Innovation

DAY 02

Chairman’s opening address 08.50 Nick Hopkinson, Chief Information Officer, GCHQ

Delivering collaboration with transformational results: Central and local government working together 09.05 Peer-to-peer case study

Sparking a chain reaction: How do you get assurance across the delivery chain? 09.25 Panel Session

Stream A Stream B Stream C Stream D Stream E Stream F Stream G Stream Industry Latest Policy Education Supply Chain Cyber Security Wider Future Trends Partnerships & Training Government

Successful Security Policy An update Building trusted Research Delivering The citizen’s procurement Framework on the third party briefing on clarity on local view: what do approaches assessed: the development relationships: Cyberspace government they want from under the benefits, the of professional a case study. & the national guidance by government in 10.10 spotlight. challenges and skills in security of unravelling the future? the solutions. government. the UK. the array of messages.

10.40 Morning coffee and networking

Understanding The audit How to build Pushing Using technical Update What is Cipher the effects of process resilience assurance down capability to on central going to do the recession explained: into your the supply manage risks. government for you? 11.25 on the supplier how it works. Information chain. initiatives that base. Assurance leverage wider training. government involvement.

12.35 Networking lunch

The Bid New guidance Training for How to raise Cyberwar Making access Quantum Process: how on off-shoring incident awareness debate: to information computing: do we make it and near- investigation of security “This house easy for wider what will it faster, slicker, shoring. response. standards believes the UK government. mean for IA? 13.45 cheaper? amongst IT public sector contractors. has the technical resources to defend itself in a cyberwar.”

14.55 Afternoon coffee and networking

Stream chairs’ feedback followed by panel session 15.35 Each chairperson will summarise three key next steps that have emerged from their stream throughout the day

Taking the critical next steps: The Government’s IA vision for the whole public sector 16.10 Ministerial address

Putting Information Assurance into the Dragons’ Den Closing panel session 16.25 You’ve heard the strategy, now is your chance to probe the plan. A top level panel of the people who make a difference will field your challenging questions. If they can’t give an answer there and then, you’ll know that the issue is being taken back for discussion, and feedback will be posted as soon as possible on www.iauk.org.uk.

16.50 Chairmen’s closing remarks

16.55 Close of conference

This is a proposed agenda to give you an insight into the main themes at IA09. The detailed content is likely to evolve. For the latest version visit the website www.ia09.org.uk Workshops Workshop Sponsor

To allow you to delve deeper Workshop A An A to Z guide to the IA Maturity Model into the content, exchange What is it? How will it affect you? How do ideas and hatch real action you prepare for it? What value will your organisation see? Exploring the three plans for the future, IA09 different approaches to using the model. has introduced more niche interactive sessions. Workshop B Getting buy-in across your organisation Winning the support of top level management. Workshops and additional interactive breakout sessions Workshop C Red Team Sessions Your guide to digital continuity Following the success of the red team Protect your information assets from becoming session at the IA Industry Forum, CESG trapped in obsolete technologies. will be inviting volunteers to join them to formulate action plans for issues that raise Workshop D their head throughout the two days. Effective incident management CESG Clinic At various times throughout the programme Workshop E you’ll have the opportunity for some quality Understanding the threat time with the experts from CESG. An insight into data profiling, data mining etc. Topic Tables Includes live hacking demonstration. Round table discussions will be hosted by speakers and CESG experts to discuss Workshop F niche topics of interest. If you’d like ICM: Live Collaboration Exercise. to suggest a topic please contact the conference team on 020 7089 5895 or email [email protected]. SPEAKERS

CONFERENCE FACILITATOR Sir Gus O’Donnell KCB Cabinet Secretary and Head Edward stourton of the Home Civil Service Journalist & Broadcaster Sir Gus O’Donnell took over as Edward Stourton is one of the presenters Cabinet Secretary on 1 August 2005. Prior of the BBC’s Today programme and as to that, he was to host of the prestigious foreign affairs HM Treasury. Before that he had been programme Correspondent, was Managing Director, Macroeconomic nominated for an Emmy and won an Policy and International Finance since 1999. From 1998 – 99 Amnesty award. He regularly hosts he was Director of Macroeconomic Policy and Prospects, debates on Radio 4 and has also made numerous current and from 1997 – 98 was the UK’s Executive Director to the affairs documentaries for BBC television and radio. IMF and World Bank.

IA09 CHAIRMEN David Smith Iain lobban Deputy Information Commissioner Director, GCHQ David Smith has responsibility for the Iain Lobban was appointed GCHQ’s Data Protection supervisory functions Director in late July 2008. He is of the Information Commissioner’s responsible directly to the Foreign Office based in Wilmslow, Cheshire. Secretary for the management As well as providing Data Protection of GCHQ including control of operations leadership across the Information in the UK and abroad, and through Commissioner’s Office, David has direct responsibility the Cabinet Secretary for the effective and economical for oversight of its Data Protection Practice and management of the resources allocated to the department. Development Divisions, its Regulatory Action He is a member of the Joint Intelligence Committee. Division, and the Scotland Office.

NICK HOPKINSON John Suffolk Chief Information Officer, GCHQ Her Majesty’s Government Chief Nick Hopkinson was appointed to a new Information Officer, Cabinet Office GCHQ Director General post of Chief John was appointed Her Majesty’s Information Officer in July 2008. He is Government Chief Information a member of the GCHQ Board, and has Officer in June 2006. Prior to this held a Board position since February he was the Director General of 2004, in his previous role as Director for Criminal Justice IT (CJIT) from Special Programmes. As CIO, he is responsible for helping February 2004. John has worked in the engineering to transform GCHQ for the internet age, and in particular and financial service industries and has extensive to lead this transformation in IA and technology. experience in delivering IT-enabled change. John leads the work of the CIO Council. SPEAKERS MIKE THOMPSON Paul Murphy DWP Security (Part of Legal Group) Secretary of State for Wales and Mike is a career Civil Servant, with broad experience Minister for Digital Inclusion of developing and delivering security controls within Paul Murphy was appointed Secretary DWP. Currently, Mike is leading work to further develop of State for Wales in 2008. He is chair of a secure information-handling culture within DWP. the new cross-Departmental Committee on He has led the development of the DWP culture-shift IT and Information Security and chair of the plan – covering security-related education, awareness Cabinet Committee on Local Government and communications – supported by other key areas and the Regions. Paul has been MP for Torfaen since 1987. including HR and IT Security. He was appointed Chair of the Intelligence and Security Committee in May 2005. sponsorship Lead Sponsor opportunities

2009 SPONSORS & EXHIBITORS

Gala Dinner Sponsor Stream Sponsor Session Sponsor

Leading Assurance

Networking Lunch Sponsor Workshop Sponsor Confirmed Exhibitors

“T his is the most important Information Assurance event in the calendar if your company is working for the government in the security arena.” John Kirby OBE Director, UK Government Consulting Services, Symantec

Why sponsor IA09? Ensure your voice is heard If you want to build your brand, raise This year’s programme is all about implementation awareness, generate leads or all of the and delivery of IA. Delegates and sponsors above, IA09 provides a prime opportunity alike will be invited to participate, debate and for your organisation. Here are just some provide feedback. It will be an unrivalled of the reasons to get involved. opportunity for your brand and business to show its thought leadership and engagement A package to suit your needs with the issues addressed in the programme. Our sponsorship packages have been carefully thought through to make sure there Network with new faces is something to match your business’s needs. IA is now, more than ever, at the top of the But if you can’t find the right fit, give us a government’s agenda. We’re harnessing this call and we can tailor a package to suit you. momentum to attract new faces from across the public sector to the event, and maximising Supporting Make sure your key contacts don’t miss you networking opportunities to enable you to Associations Often conferences don’t always connect meet them. exhibitors with delegates’ needs. IA09 is different. IA08 delegates commented that Take advantage of ongoing benefits they found the exhibition to be an essential It won’t be just your presence on the day source of information and a great place to that matters. There are many opportunities network with industry contacts. to get your brand and message to delegates in the event marketing and on the website, A clear return on your investment both before and after the event. We understand that ROI is important to you. Official Public Sector The environment at IA09 is designed to FIND OUT MORE Media Partner maximise interaction between sponsors and delegates so you can make the connections To find out more about sponsorship opportunities you want to help your business thrive. at IA09, contact Charlotte Nutt on 020 7089 5895 or email [email protected]. VENUE & AccomModation

The QEII Conference Centre Park Plaza Riverbank London 18 Albert Embankment is located in the heart of London SE1 7TJ

Westminster in central T +44 (0)20 7958 8000 London, and there are a www.parkplaza.com number of hotels within • £170 per night, including bed and breakfast, walking distance. single occupancy (including VAT) • £180 per night, including bed and breakfast, For your convenience we have negotiated double occupancy (including VAT) allocations at favourable rates at the hotels • Please quote 050709THTA when booking listed. Please quote the relevant code to ensure you receive the best price for your stay. City Inn Westminster Please note that delegates and sponsors 30 John Islip Street are responsible for booking and paying for London SW1P 4DD accommodation. Rates correct at the time +44 (0)20 7630 1000 of printing, but may be subject to change. T www.cityinn.com

• £205.85 per night, including bed and breakfast, single occupancy (including VAT) Queen Elizabeth II Conference Centre • £217.35 per night, including bed and breakfast, double occupancy (including VAT) Broad Sanctuary, Westminster London SW1P 3EE • Please quote THE050709 when booking

T +44 (0)20 7222 5000 Crowne Plaza St James Buckingham Gate www.qeiicc.co.uk London SW1E 6AF

T +44 (0)20 7834 6655 www.london.crowneplaza.com

• £170 per night, including bed and breakfast (including VAT) • Please quote ‘The Team’ when booking

Jolly St Ermin’s 2 Caxton Street London SW1H 0QW

T +44 (0)20 7227 7971 www.nh-hotels.com

• £170 per night, including bed and breakfast (including VAT) • Please quote 86.904.602 when booking IA09 Contact Details REGISTRATION E [email protected] T +44 (0) 20 7089 5806 FORM F +44 (0) 20 7089 5900 www.ia09.org.uk

REGISTRATION CODE: WEBAMP

DELEGATE DETAILS

Title First Name Last Name Position Organisation Address Tel Mobile Postcode Country Email

Dietary or other requirements Once we have received your completed faxback form we shall send confirmation within 48 hours. How did you hear about this event? Please state your sector: Public Private Please state your organisation type: e.g. Central Government, If you’d like to register more than one delegate, please photocopy this Police, NHS, NDPB, Systems Integrator, Penetration Tester, etc. form and submit one for each delegate. Alternatively, we are happy to process group bookings by telephone as you may find this quicker.

attendance & fees payment DETAILS

Do you wish to pay by: Amex Mastercard Visa Public Sector Private Sector Switch/Maestro Cheque Invoice

Early Bird Early Bird Full Early Bird Early Bird Full Card payments Price Price Price Price Price Price Book by Book by Book by Book by Card number 17th April 15th May 17th April 15th May Expiry date Issue number Security code Amex security code SAVE £200 SAVE £100 SAVE £200 SAVE £100 £499 +VAT £ 5 9 9 + V AT £ 6 9 9 + V AT £1099 +VAT £ 11 9 9 + V A T £1299 +VAT Name on card

Tick here Tick here Tick here Tick here Tick here Tick here Invoiced payments If you’d like us to add your purchase order number to your invoice, please note it here Do you intend to join us for the gala dinner? Yes No Billing address if different to above • All ‘Early Bird’ discounts require payment within 30 days of the cut off date. Delegates wishing to pay after this deadline will be charged the full fee. Cheque payments • All prices include the gala dinner and unfortunately no refund If you would like to pay by cheque please make it payable to IA09 will be available for anyone not attending the dinner. Conference and please write the delegate name(s) on the back of the cheque and post to the conference office at the address below. Cheque attached Cheque to follow

Signature Conditions of booking

Attendance at the event without payment in advance will not be permitted. Cancellations will be subject to full payment. DATA PROTECTION By completing and returning this form, you give your explicit consent that the personal data Non-payment or non-attendance does not constitute cancellation. contained in this form may be used for our purposes in connection with this conference only. Requests for substitutions will be considered and credit notes Personal data will be processed according to the Data Protection Act 1998. The Data will be issued against cancellations at CESG/GCHQ’s discretion. Controller is The Team Ltd. We reserve the right to offer your place to someone on a ONGOING CONTACT WITH US If you would like to be kept up to date with future events and CESG news please tick here. waiting list if we do not receive payment from you within the It is CESG/GCHQ’s intention to provide access to delegate list onsite at the event. agreed timeframe. We will of course consult you prior to Please tick the box if you DO NOT want your name, job title and organisation listed. offering your place to someone else. Please note: by registering for this event you are agreeing to The Team’s Terms and Conditions. These are available from the conference office.

Alternatively you can post this form to: IA09 Conference Office, c/o The Team, 11 Southwark Street, London Bridge, London SE1 1RQ.