• Examine the latest cyber threat landscape affecting public services
• Understand national priorities and policy developments
• Explore how collaboration is improving cyber resilience across government

• Balance innovation with robust cyber security governance
• Understand security-by-design principles
• Embed cyber resilience into digital transformation programmes

This discussion will focus on shifting from a "checkbox compliance" mindset to a strictly risk-based approach to cyber security. Experts will share actionable methods for identifying and protecting an organisation's "crown jewels" (its most critical data and infrastructure) first. The conversation will cover the cost-effectiveness of automated security tools, the benefits of shared-services models across local authorities, and creative ways to upskill existing staff to bridge the skills gap without expensive external hiring.

• Examine how security can be embedded into digital services from the outset
• Explore the challenges of securing legacy technology while continuing to modernise public services
• Consider how government organisations can adopt emerging technologies securely without creating new vulnerabilities

• Explore the evolving role of human behaviour in public sector cyber security
• Examine how organisations can move beyond traditional awareness training to build a stronger culture of cyber security
• Consider the skills, behaviours and organisational approaches needed to create a genuinely cyber-resilient workforce

• Examine how cyber security can be positioned as a strategic organisational risk rather than solely an IT responsibility
• Explore effective approaches to communicating cyber risk and accountability at board and senior leadership level
• Consider how governance, risk appetite and investment decisions can translate into stronger cyber resilience across public services

• Explore the key priorities for strengthening cyber resilience across local government
• Examine why compliance alone is not enough to protect essential public services
• Identify practical approaches councils can take to improve preparedness, resilience and recovery despite resource constraints

This session will explore the critical gap between theoretical incident response plans and actual execution during ransomware or data breach scenarios. Panellists will discuss the maturity of current business continuity strategies, the speed of multi-agency communication, and the psychological impact of attacks on staff. Attendees will gain insights into managing public communication transparently, negotiating vendor support, and practical strategies for securely restoring essential citizen services under extreme time pressure.