Minutes of the Seventh meeting of the Cyber Growth Partnership held on Monday 23rd March 2015 at BIS Conference Centre

Transcription

1 Minutes of the Seventh meeting of the Cyber Growth Partnership held on Monday 23rd March 2015 at BIS Conference Centre Attendees Ed Vaizey MP, Minister of State for Culture and the Digital Economy Andrea Young BIS David Raw Cabinet Office Giles Smith BIS Stephen Phipson UKTI DSO Ian Mabbott UKTI DSO Conrad Prince UKTI DSO Cyber Connect techuk techuk GCHQ EPSRC Cyber Security Challenge Gavin Patterson, CEO, BT Group BT Security Atkins Raytheon Sophos Intercede Atkins Cisco HP BAE Systems BeCrypt Surevine QUB Observers ADS Innovate UK Home Office Apologies ARM 1. Welcome and agree minutes of the November meeting No amendments to the minutes of the November meeting. BeCrypt, Surevine and L3-TRL welcomed as new members. ADS and Innovate UK welcomed in new capacity as observers and Mike Spain as CGP Programme Manager. Terms of Reference agreed with following considerations: - To consider an additional category of member. This would be for associates and to recognise those that were contributing to the CGP agenda although not on the board. This category of member would not necessarily attend board meetings. - To amend wording to make clear that board members will be removed from the CGP if not contributing to work streams. ACTION CGP 7.1: BIS and techuk to agree new category of member and TOR to be revised. 2. Cyber Camps & Mentoring Projects

2 The NCSP is funding the Cyber Security Challenge to deliver two CGP-endorsed pilot projects to complement wider efforts to tackle computer science graduate unemployment: A mentoring scheme where existing cyber security professionals mentor students and recent graduates interested in a cyber career; and 4 cyber insight camps for students and recent graduates, combining intensive exercises to strengthen technical, communication and business skills with the opportunity to gain an industry recognised foundation qualification. The first cyber camp will be held in Coventry in April. The project requires a graduate resource for a period of 3 to 4 months to help organise and run the cyber camps. The mentoring project has secured 40 of the 60 estimated mentors to date, and this is prior to a wider industry request for support. Cisco indicated they might be able to help with a graduate resource. ACTION CGP 7.2: CGP members to respond with offers of resource for cyber camp and mentoring projects. 3. Exports At a recent Ministerial meeting, it was agreed that a new export target should be set, of 4bn by Although the UK has seen an impressive rate of export growth, the new target will be difficult to meet as it exceeds global market growth and hence will require taking significant market share from other countries. There will be both supply side and demand side challenges. Industry and HMG need to refine these challenges and develop a joint plan of interventions needed to help minimise the challenges and achieve the new target. The Minister for the Cabinet Office subsequently announced the new cyber security export aim in an oral Statement to Parliament on the 24 March. 3.1 Market campaign plans Campaign plans for five priority markets setting out the export opportunities for UK firms and what HMG can do to facilitate are being progressed. Industry leads for four of the plans are developing this work BAES leading Malaysia, L3 TRL leading USA, BT leading KSA and Atkins leading Qatar. There is still a requirement for an SRO for Australia and although India has fallen by the wayside, UKTI is still keen to see what could be achieved if there is an appetite from Industry. UKTI will also consider other markets if there is interest and resource agreed with industry. In this respect, UKTI is looking closely at Kuwait, as it considers there are good opportunities for UK industry. UKTI also mentioned vertical areas of potential opportunity such as in training, banking & finance, energy, infrastructure and communications that could be considered if there is industry interest and resource to support and UK offer defined. Industry leads have experienced frustration in engaging the wider sector to actively contribute to the campaign work specifically in terms of information on potential opportunities, finding resources to assist, identifying relevant events of interest and generally commenting on the direction of the plans.

3 UKTI has appointed Andy Williams as the UK s first cyber envoy to the US. This position will help to further the significant progress that has been made on the US plan, with L3-TRL taking forward an approach that includes information sharing mechanisms and compelling events such as RSA 2015 and the NSA Information Assurance Symposium. A planning meeting was recently held with 25 companies, discussing business needs for the US market. The meeting was positive although only 1 company offered resource to support the plan in going forward. Similarly, seconding Conrad Prince to UKTI as the UK s Cyber Ambassador to develop wider business opportunities, primarily in the Gulf region but also to assist with USA and other countries. techuk mentioned that it had 4 companies actively looking to engage in the CGP work streams. It was encouraged that companies outside of the CGP do engage in its activity. Raytheon expressed a potential interest in leading on Kuwait and HP on Australia. BT has developed an approach for the KSA that may be relevant to some priority markets. The BT proposal is to primarily act as a facilitator for SMEs into the KSA. BT is working in collaboration with UKTI and OGDs (Home Office) to assess the market and to identify the key industry and government influencers. The approach also includes assessment of opportunities (import trends) and data to segment the market. This also includes a marketing campaign and a series of events to help exploit opportunities for SMEs in respect of promotion in country and access to key decision makers. It was agreed that the KSA approach should be adopted in Qatar. ACTION CGP 7.3.1: UKTI and techuk to deliver a plan to next CGP board of how the revised export aim will be achieved. This may potentially include revised priority markets and a focus on verticals. ACTION CGP 7.3.2: UKTI to follow up with Raytheon and HP, in respect to Kuwait and Australia SROs. ACTION CGP 7.3.3: Atkins to develop a campaign approach for Qatar based on the BT KSA example. ACTION CGP 7.3.4: CGP members to offer assistance for market campaign support relevant to their experience techuk to co-ordinate interest. ACTION CGP 7.3.5: techuk to approach the 4 companies interested in engaging in work streams to understand area of interest and resource commitments and, if agreed with the relevant SRO, to introduce them to the project. 3.2 Cyber Showcase The purpose of the cyber showcase facility is to provide a dedicated physical space for UK cyber security companies to be able to successfully demonstrate the full range of their products and services to both domestic and international clients. The facility was designed in collaboration with industry (industry lead Raytheon). Cisco has provided the video conferencing capability Government thanked both organisations for their strong support in developing the showcase.

4 The showcase is behind schedule due to contractual challenges. It is now unlikely to launch before May 2015, following a 1 to 2 month trial. Reference was made to the Defence Growth Partnership demonstrator facility based in Farnborough as collaboration between the defence sector and government. That could be used for cyber demonstrations. There may be an opportunity to link its video facility to the cyber showcase, with the project also having potential to inform other CGP work streams, such as on UK capability. 3.3 High Value Opportunities (HVOs) At the last CGP it was agreed that UKTI would initially focus on the Omani rail HVO and report back on progress made. The decision was taken to look at a single rail HVO in Oman for further analysis as an approach across all rail HVOs was assessed as too costly and complex. E&Y were appointed to do this. They will visit Oman in April The E&Y report will provide tangible information to the CGP on cyber security opportunities in the Omani rail project. Action CGP 7.3.6: UKTI to deliver E&Y report to the CGP at next board 4. Domestic Demand Atkins delivered a presentation on the developments of a domestic demand portal. It was proposed that the portal will cover: cyber events in the UK that might be of interest to wider business; UK events aimed at other sectors which might present opportunities for the CGP to promote the UK s cyber security capability. A capability framework describing the UK cyber security sector, linked to the sector mapping being undertaken by Cyber Connect. Access to information in a single place about the whole range of government cyber initiatives that would be of interest to wider business. The portal would also provide news on the site that would be relevant to its audience. This would include alerts linked to registration. It was also suggested that the site should allow users to provide feedback on cyber suppliers. After discussion it was agreed not to progress with this option for now. Atkins also proposed a CGP brand and suggested that the CGP should have its own industry event. It was agreed to press ahead with the new brand identity, subject to changes to ensure it had a UK identity (UK flag etc). It was agreed that an event could be taken forward and potentially linked to bring together associate members. It was also requested that CGP members support the project by committing resource. Atkins asked for clarification on hosting. techuk volunteered to host and manage the portal through its site. It was suggested that the content should also reference research capability and future tender opportunities. It should also direct to the skills portal that is being developed.

5 Action CGP 7.4.1: Atkins to continue to develop portal in line with amendments recommended by CGP and to present revised site at next CGP. Action CGP 7.4.2: CGP members to inform Atkins if they wish to be involved in this project. Action CGP 7.4.3: Atkins and techuk to progress hosting and agree resourcing. Action CGP 7.4.4: Atkins to revise brand and present to BIS / techuk for clearance prior to use. Action CGP 7.4.5: Atkins to progress a CGP event. 5. AOB 5.1 RSA Plans for a first UK national presence at RSA 2015 are well underway. This is the first time that the UK will have a Pavilion there. Eight companies including three CGP Board members (Intercede, BeCrypt and Surevine) will be on the UK stand, along with the USA campaign lead from L3 TRL. Places have also been offered to Crest. Additionally, UKTI are supporting around ten SMEs who are visiting the show. A programme will include opportunities to meet with the Global Gateway team from Silicon Valley Bank and the Stanford Cyber Initiative. UKTI thanked Intercede for their organisation of an evening networking event to coincide with RSA. It was suggested that some other British themed activity could be developed to attract visitors to the stand. UKTI would like to talk to all the CGP members exhibiting at the show, even if they are not part of the mission, to present a unified picture of the UK s cyber security capability on show at RSA. Action CGP 7.5.1: CGP members attending RSA to inform UKTI if not already done so. 5.2 InfoSecurity Europe: Infosecurity Europe is Europe's number one information security event. The event features over 345 exhibiting companies and over 15,000 industry professionals travelling from over 70 countries. BIS, in partnership with techuk is establishing a new UK Cyber Innovation Springboard zone at the show and will run an innovation focussed competition to identify the high-growth cyber security businesses of tomorrow to be featured. BIS is seeking sponsorship from CGP members to further enhance the offering and to support the activity. HP indicated that they would be willing to contribute. Action CGP 7.5.2: CGP members to approach BIS with offers of support. 5.3 Export Controls

6 BAES raised challenges with the UK s interpretation of new export controls around cryptography. The UK currently applies a more restrictive interpretation of these than many other countries. This is creating a barrier to UK exports. techuk said it would take up the issue with HMG. BIS asked BAES for further information. Action CGP 7.5.3: techuk/bis to take forward. 6. Date of Next Meeting - 23 rd July from 16:00-17:30