Anything You Want to Know About InfoSec but Were Afraid to Ask 2026
A moderated, no-judgement open forum where members bring any security question and share experience from the coal face.
- Hosted by chapter members
Since 2016 the chapter has brought practitioners, researchers and leaders to audiences across the East of England, in person and online. Here is every talk, workshop and forum we have run.
A moderated, no-judgement open forum where members bring any security question and share experience from the coal face.
ADHD in the workplace: its strengths, the barriers that remain, and the environments that let neurodivergent colleagues thrive.
From reverse engineering and CTF competitions to automated exploitation, firmware security and AI in security research.
An interactive event helping SMEs adopt AI securely, built around the SECURE-AI framework: AI-driven deception, police and government support, DNS threats, hacking AI, and Gen-AI in cyber security.
ISO 19650 and security-minded information management for critical national infrastructure, digital twins and structured data.
Two sessions: managing information as an asset for critical infrastructure, and safeguarding vulnerable people from online harm.
Our annual open forum: members' questions answered by the collective experience of the chapter.
Personal testimony and a call for stronger safeguards and accountability to protect vulnerable people from serious online harm.
Implementing Zero Trust architecture in practice, and how AI and machine learning accelerate it with fewer resources.
Game theory and security productivity measurement, and AI-driven intrusion detection for IoT-enabled critical infrastructure.
Aviation cyber security research, from in-flight entertainment to electronic flight bags, and the lessons for security on the ground.
An open discussion on certifications, qualifications, skills, experience and career paths in cyber security.
Using DNS threat intelligence to track attackers, including how the VexTrio traffic distribution system was uncovered.
Celebrating the chapter's partnership with Anglia Ruskin University and graduates gaining ISC2 certifications.
Why phishing still works, how AI-powered detection helps, and tracking adversary infrastructure with DNS.
Members' questions, answered by members, in a relaxed online setting.
The launch of the chapter's educational outreach programme, and updates direct from ISC2 leadership.
Magecart attacks and the privacy risks of rogue tracking pixels, against a backdrop of stricter regulation.
Defeating the fakes: domain and brand impersonation, takedowns, VIP impersonation and a debate on deepfakes and AI.
DNS tunnelling and exfiltration, domain generation algorithms, lookalike domains and MITRE ATT&CK in practice.
The first of our annual open forums, open to everyone.
Seventeen years of forensic and incident response investigations, and practical tips to avoid becoming a victim.
Lessons from implementing a Zero Trust project in the health sector, presented by a chapter member.
Turning strategic and tactical intelligence into effective, prioritised vulnerability remediation.
Real-world breaches: how two-factor authentication is defeated, and why disk encryption alone is no longer enough.
Beyond the hype: the threat quantum computing poses to secure communication, and how quantum technology may also protect it.
Short talks from regional cyber resilience leaders, followed by an anonymous open question forum.
Managing cyber risk intelligence, supply chain risk and insider technology risk in a global organisation.
What cyber insurance really covers, and what it doesn't, from a broker and an insurer.
A moderated discussion of the challenges, pitfalls and successes of information governance and data sovereignty.
How human and cultural factors shape cyber security, and an update on the newly formed UK Cyber Security Council.
Which certifications suit which roles? An open discussion covering ISC2, SANS, ISACA, Microsoft, AWS and more.
Beyond Tor: credential stuffing, risk modelling, data watermarking, and dark web countermeasures in incident response.
Using a DNS sinkhole to block unwanted content and see exactly where your IoT devices send data.
Live attack demonstrations and how they map to real-world criminal tactics.
Systemic IoT flaws, live demos, responsible disclosure and why regulation struggles to keep up.
Warfare, sporting or political tactic, or serious cyber security solution? Deception technology explained.
Testing organisational security from the adversary's perspective with scenario-based red team simulations.
Lessons from decades of crisis response, from natural disasters to cyber attacks, on preparing, responding and recovering.
Cloud incident response and forensics: isolating resources, capturing evidence and spotting unauthorised changes with APIs.
More real incident response cases, plus destructive worms, nation-state threats and geopolitical crossfire.
Cutting through the GDPR hype with a pragmatic, risk-based view, followed by a Chatham House Q&A.
A pragmatic, jargon-free look at what GDPR means for organisations, with an open Q&A.
Real incident response cases, from business email compromise to a multimillion card data breach and a rogue sysadmin.
Protecting SCADA and operational technology environments from attack, layer by layer.
Preparing for the biggest change to data protection in two decades, and why it isn't just a security problem.
Supply chain security assumptions versus real threats, and how changing legislation affects businesses.
CopperDroid: automatic analysis and classification of Android malware using machine learning.
What technology can and can't do to protect children online, from content filtering to social media, gaming and online bullying.
The changes the GDPR brings, business priorities, grey areas, and what leaving the EU might mean for the UK.
We welcome vendor-neutral, educational talks from practitioners and researchers in every area of security.