Blank

Events

The CTAG team holds anumber of workshops every year. The topics are diverse and can cover email security, the latest vulnerabilities, the dark web or simply events for networking.

See below for our latest workshop line ups.

zED - baselining your peers’ and suppliers' email

zED is a free-to-use specialised tool designed to assess the email security risks posed by your supply chain, peers, and stakeholders. Launched in 2019, it directly addresses a critical need identified by WARPs to evaluate email hygiene within public sector organizations.

Its Key features include: Assessing domain compliance, providing comprehensive reporting on SPF, DMARC, and MTA-STS standards and analysing TLS and DNS records to identify potential email-based threats. It also checks to see if domains meet the NHS DBC1596secure email standard by leveraging zED. Organisations can proactively protect themselves from email-borne risks and enhance their overall cybersecurity posture. To learn more and sign up:

24th Jan 2025 - https://www.eventbrite.co.uk/e/1043873211877

Securing your email domain

This workshop is designed for organizations with a zED/CTAG RAG score below 85. We will focus on a maximum of six domains or organisations, multiple participants per organisation is fine. The goal of this workshop is to delve into each domain's email security posture (SPF, DKIM, DMARC, MTA-STSetc), assessing its current standing and outlining actionable steps for improvement. To achieve this, attendees should have an understanding of their organisation's email security journey and be prepared to share insights with colleagues during the session. The zED scanner will be utilized to generate the ratings for each participant's domain, PTR and CIDR data and other detailed information will be reviewed.

11th Dec 2024 - https://www.eventbrite.co.uk/e/877307278687

7th Feb 2025 - https://www.eventbrite.co.uk/e/1043905388117

MTA-STS

This presentation has a heritage, in so much as it predates the active interest in MTA-STS by NCSC and Mail Check by over a year, and covers in a “cookbook” format how to set up MTA-STS and what can go wrong. This popular presentation has been used by manygov.uk organisation on their adoption of the MTA-STS standard.

MTA-STS is a standardalready in use by many major email systems including the NCSC as well as anincreasing number of councils up and down the country.

21st Nov 2024 - https://www.eventbrite.co.uk/e/877306476287

13th Mar 2025 - https://www.eventbrite.co.uk/e/1043928457117

Ransomware & The Dark Web

Based on the (SOCITM) award-winning Knapweed work, join us for this revamped and constantly evolving session where we review the impacts of ransomware on the UK Public sector and how hacker groups as well as state actors are going about their business on the dark web exfiltrating your and your supply chain data. The workshop in five sections, will cover how to access and find data in the dark web, and goes on to look at the techniques and techniques used by this group of threat actors as well as the evolution in their methods.

30th Jan 2025 - https://www.eventbrite.co.uk/e/1043886020187