CSIDES: Strengthening Cyber Security

Jo Dalton and Shelley Booker will be presenting: The invasion of IoT: The privacy snatchers 

2025-10-03 11:00–11:40, Regency 

The Internet of Things (IOT); that huge network of everyday objects that can connect to the internet; able to “talk” to other devices and send information. Did you know your TV could be spying on you? Could your CCTV make you easier to compromise?

IoT ecosystems are complicated; yet they are being deployed regularly and rapidly across the planet. A cyber-secure smart device requires expertise in firmware, hardware, cryptography, cloud, APIs, mobile connectivity, mobile apps, web apps and more. Outsourcing to solve this complexity problem is therefore common, often to third parties that provide a variety of services.

Through real world examples, relatable to the home and workplace, Jo will highlight how the potential for security mistakes grows exponentially and what we can do about it via the concept of Threat Modelling. With inspiring insight and practical tips you can implement straight away. Don’t miss this chance to hear some interesting war stories and develop a new skill that will enable you to build resilience in an increasingly vulnerable digital landscape.

Later in the day Jo Dalton and Tom Roberts will doing a session: Insider threat – could it be you? Absolutely

2025-10-03 15:20–16:50, Captain Jack’s 

Tough conversations. Home truths. Real self-reflection.

This is not just another breakout. It is an immersive, provocative session where insider threats take centre stage, fuelled by audience participation. Expect conspiracies, revenge, and more drama than a Korean soap opera as we pull back the curtain on one of cyber security’s most complex challenges: the trusted insider.

We will explore the psychological and situational triggers that can turn loyal employees into dangerous risks, and ask the uncomfortable question: “Could I become the malicious insider?” Through real-world scenarios, we will examine red flags, motivations, and the thin line between carelessness, exhaustion, and intent.

Attendees will leave with sharper awareness of human behaviours, practical strategies to spot and support at-risk colleagues, and a deeper appreciation of the human stories behind insider incidents. This is not about hunting villains. It is about recognising when the risk lies within ourselves, and walking away equipped to better protect your people, your organisation, and your own role in the security chain.