Channel Islands Cyber Security Conference 2026
Date and Time
Friday, 16 October 2026
8:30 | 7h 30m
Location
Radisson Blu Waterfront Hotel, Jersey
Rue de L'etau, JE2 3WF Saint Helier
Welcome to the Channel Islands Cyber Security Conference 2026!
Get ready to dive into the world of cyber security at this awesome in-person event. Whether you're a pro or just curious, it's the perfect spot to learn, network, and geek out over the latest in digital protection. Join us for inspiring talks, interactive sessions, and loads of fun with fellow security enthusiasts. Don’t miss out on the chance to boost your skills and connect face-to-face!
Tickets and Cost
General Admission
Table of 10
Sponsors & Speakers (only event manager to book)
Speakers
Andre Gorvel
Independent Consultant & vCISO at JE3
Andy Compton
CEO at Cortida
David Carney
Chair at CIISF
His Excellency Vice Admiral Jerry Kyd
Lieutenant Governor
Ken Munro
Security Writer & Speaker at Pen Test Partners
Matt Palmer
Director at Jersey & Guernsey Cyber Security Centres
Naveed Malik
Senior Director, EMEA MSP Channel Sales at Sophos
Paul Midian
CISO at easyJet
Peter Job
CEO at Intergence
Rob Shapland
Director & Ethical Hacker at Cyonic
Ross Asquith
Director, Solutions Engineering at Halcyon
Vincent Sider
CEO & Founder at DeepBlocker.ai
Agenda
Breakfast & Meet the Sponsors
Deputy Phil Romeril, Asst Minister Economic Development & Matt Palmer, JCSC
Why your human is the risk in your cybersecurity incident response
Cortida Limited is a trusted cybersecurity consulting company serving private and public organisations across the UK, Channel Islands, Europe, and North America. With extensive experience in shaping security strategies, Andy advises leadership teams and delivers risk assessments, security reviews, and incident response services for organisations across many sectors including Architecture, Engineering, Construction and Building Operations. Professional Credentials: • Certified Information Security Manager (CISM) • Qualified Security Assessor (QSA) • Lead Implementer & Internal Auditor of International Security Standards (ISO 27001 LI & IA) • Cyber Incident Planning & Response (CIPR) Beyond client engagements, Andy actively contributes to the cybersecurity community by: • Speaking at local, national and international conferences • Contributing to industry forums • Mentoring future professionals • Helping shape national security standards
His Excellency, Vice Admiral Sir Jerry Kyd KBE, Lieutenant-Governor of Jersey
Coffee & "Pay Nothing. Decrypt Everything: A Live Ransomware Recovery Demo"
Ransomware only works if you pay. This live demo shows how to get your data back without paying a penny - by stopping encryption in its tracks or decrypting it independently. We'll use an actual Dragonforce ransomware payload to simulate an attack and recover our files in real-time.
Navigating Today's Threat Landscape with AI and Managed Detection Response
In this session, Peter Job will share a real-world case study exploring a Council's cyber security journey, including the challenges faced, the role of Managed Detection and Response (MDR), and the importance of maintaining control over where and how security data is stored and managed. Attendees will gain practical insights into the decisions made, lessons learned and the outcomes achieved in strengthening the Council's cyber resilience. Building on these real-world experiences, Naveed Malik from Sophos, will explore how AI is reshaping the cyber security landscape. From enhancing threat detection and investigation to accelerating response times and improving security outcomes, Dave will discuss how organisations can leverage AI to stay ahead of increasingly sophisticated cyber threats. Together, the session provides a practical and strategic perspective on modern cyber defence, combining customer experience, operational insight and the latest innovations in security technology.
3rd Party Risk Mgt: Aviation ind working collaboratively to share intelligence
Paul has 30 years’ experience in information and cyber security and in that time has taken on a number of roles from the deeply technical to boardroom facing. Paul is currently CISO at easyJet. This is his second CISO role. Previously he was a director at PwC and led the cyber security business for South-East England. In his earlier career he built penetration testing businesses and has served on the board of a SME consulting firm. Paul was a founding board member of CREST and has sat on the advisory board of the Information Security Forum, and others. He has led incident response and forensics teams dealing with sophisticated and persistent attacks. In fact as an ex-penetration tester, Paul tends to view cyber security through the eyes of the attacker. As a result of this he has a deep interest in the effectivenes– or otherwise - of Security Operations Centres in mitigating attacks.
Lunch & "From Vibe Code to Real Code: Building CompliScan" Demo by JE3
Vibe coding makes it possible to turn an idea into a working application remarkably quickly. But what happens when that prototype needs to become a real, maintainable product? In this live demo, Andre Gorvel and the JE3 team introduce CompliScan, a third-party risk application originally created through vibe coding and subsequently rewritten by JE3 for its founder. We’ll look at the journey from rapid AI-assisted prototype to engineered application, before putting the finished product on screen for a live demonstration.
Representative from NPSA
Afternoon Keynote - "You hacked me at Hello"
Rob will speak on social engineering, telling a story of telephone phishing and physical break ins. Back by popular demand, Rob is an ethical hacker who has spent his life breaking into companies worldwide to help them secure their systems against criminal attacks. His specialty is physical intrusion - breaking into offices by dressing up as a cleaner, fake employee or even as a Hollywood film producer then stealing a computer from under their noses. Rob's unique approach to cyber security has earned him a reputation as one of the most exciting consultants and keynote speakers in the industry. He's a seasoned speaker at events and conferences around Europe and regularly appears on BBC TV and radio, Sky News, ITV, Channel 4 and others as a cyber security adviser.
Representative from NCSC
Tea Break & "Hello IT, it's the CEO": a live voice-clone attack
It now takes only a short recording of someone's voice to clone it. In this live demo, we'll clone the voice of a volunteer from the audience and use it to call an IT help desk as their CEO: "My phone has been stolen, I'm at a restaurant and MFA has locked me out. Please turn it off, reset my password and put me through to the CFO." You'll see how easy the attack is to run, how convincing it sounds, and where the process breaks. It's just one of the attacks criminals now have at their disposal, alongside multi-call sequences, call-back traps, deepfake video calls and fully AI-driven calls. Vincent Sider is CEO and founder of DeepBlocker.ai, the red team and blue team for AI-era social engineering. DeepBlocker runs the attacks criminals use, on phone lines and on AI agents, shows what got through and blocks it live. Vincent built it after criminals cloned his voice, website and email in an identity theft attack.
AI prompt injection and smart devices found in offices
Ken Munro is a security researcher and partner of Pen Test Partners, the UK’s largest independent penetration testing firm, with an established presence in the USA. He focuses on real-world security problems in connected products and embedded systems, including smart home devices, automotive systems, critical national infrastructure, and aviation technology. Ken and his team responsibly disclose vulnerabilities at scale and share practical lessons through conference talks and media commentary. He is also a recognised voice for reform and legislative change, having spoken at TEDx, briefed UK and US government departments, and contributed to EU consumer councils.