ScotlandIS Cyber

Most security risks in Microsoft 365 aren’t visible at first glance. For MSPs managing multiple tenants, unmanaged permissions in SharePoint can quietly grow into serious threats such as data exposure, compliance failures. Putting the clients trust at risk.

Join Hornetsecurity for an exclusive in-person event designed for Managed Service Providers, where we uncover the risks hidden below the surface and show how you can turn visibility into control, security, and new revenue opportunities.

What you see in Microsoft 365 is only the tip of the iceberg.

Why Attend?

Whether you’re already working with Hornetsecurity or exploring new security solutions for your customers, this event will help you:

• Understand the real risk of hidden permissions in Microsoft 365
• Learn how to identify, manage, and standardise permissions across clients
• Gain practical sales and technical training you can immediately apply
• Take the first step toward becoming a Hornetsecurity Partner
• Network with fellow MSPs facing the same challenges

Dive into the threats hiding in today’s digital supply chains and see why traditional security perimeters no longer cut it.

Arctic Wolf’s Connor Milligan and Brian Stewart kick off with a quick inside look at how Arctic Wolf is helping organisations stay ahead of modern attacks.

Concierge Security Engineer Megan Henchin then lifts the lid on real supply chain compromises, shares what organisations can control and how, and highlights the emerging threats she’s seeing across the cyber landscape.

A sharp, insight‑packed session designed to leave you more informed and better protected.

Who should attend?

Anyone working and/or volunteering for a third sector organisation in Scotland at the beginning of their cyber resilience journey, and maybe not sure where to start, who provides leadership and/or is responsible for aspects of operations/IT.

Don’t miss this opportunity to take the first steps towards a safer, more secure organisation. Together, we can build a resilient third sector, equipped to thrive in the face of digital challenges.

Public speaking expert, Greg Summers, will talk about the importance of improving communication skills in relation to public speaking, presenting and pitching.

Greg will share his top 10 tips that will help you look forward to your next Public Speaking / Presentation & Pitch opportunity with improved confidence.

The audience will take away a number of learned skills that will help ease fear and aid you in approaching your next speaking opportunity, making the process enjoyable and successful.

Summary of background and contact details:

Greg Summers has been a Professional Presenter and Communication skills trainer for over 20 years. He had hosted some of the UKs largest events and trains some of the biggest names in business. You can find out more at www.gregsunmers.co.uk

Join our series of events, ScotlandIS Tech Tidbits, on the first Tuesday of every month!

These 30 minute webinars will be short, informative sessions on a variety of topics, from exporting to cybersecurity, cloud computing to procurement, and many more.

Each event will feature a ScotlandIS member offering their expert insights and advice on the topic in hand, however you do not need to be a member to attend these talks.

For May, we’ll be joined by ScotlandIS member Phoenix and their partner, N-able.

In this session, N‑able will walk you through a real attack scenario drawn directly from recent frontline experiences. We’ll then tie the scenario to today’s threat landscape—where phishing, credential theft, and AI‑generated social engineering continue to target individuals directly. Finally, we explore how AI is transforming the SOC, helping IT teams better protect users, detect malicious behaviour sooner and accelerate a response through best practices and tools.

Here’s what we’ll cover in this session:

1. Attacks Start with a User: Most breaches begin with a human moment and why recognising early warning signs is crucial

2. Today’s Threats Are Faster and Smarter: Phishing, identity attacks, and AI‑driven impersonation have grown by 50% in 2025 according to the NCSC

3. AI Strengthens Defences: AI‑powered detection, analysis, and response help security teams act faster, cut through noise and offer organisations a strong return on investment in their security operations

In Brodies’ regular six monthly Data Protection and GDPR update, we look at recent developments in data protection, ePrivacy law, AI and cyber including:

• the latest on implementation of the Data (Use and Access) Act 2025;
• an update on progress of the Cyber Security and Resilience Bill;
• recent cases and regulatory enforcement action; and
• what’s on the horizon.

Join our series of events, ScotlandIS Tech Tidbits, on the first Tuesday of every month!

These 30 minute webinars will be short, informative sessions on a variety of topics, from exporting to cybersecurity, cloud computing to procurement, and many more.

Each event will feature a ScotlandIS member offering their expert insights and advice on the topic in hand, however you do not need to be a member to attend these talks.

For September we’ll be joined by David Beardshaw, CISO and Cyber Security lead at 3VRM.

Supply chain risk now regularly features as a mainstream news item. While cyber security is only one element of this, events at Jaguar Land Rover and M&S (among others) have reinforced the importance and impact of supply chain risk management.

From a Third Party Risk Management (TPRM) perspective, the challenge of ensuring the cyber security and resilience of supply chains has never been more critical. Organisations of all sizes – and in all sectors – are increasingly recognising this and want to strengthen their risk management in response.

Nevertheless, “Despite an increasing trend in supplier-based breaches, just 14% of UK businesses reviewed the cyber risk of their immediate suppliers in the last 12 months”. (NCSC Annual Review 2025, “It’s time to act”). Whether acting as a ‘buyer’ managing their own supply chain or as a ‘supplier’ responding to due diligence from their (potential) clients, organisations will need to act to strengthen their TPRM for the future.

This presentation aims to help by providing an overview of cyber threats in the supply chain, a framework for effective Third Party Risk Management and by sharing relevant insights and examples.

A full-day event for technical professionals and leaders in the sector. As one of Scotland’s biggest software conferences for over 25 years, ScotSoft allows you to connect, learn, and innovate while meeting new talent at the Young Software Engineer of the Year Awards.

This year, the event offers an unparalleled opportunity to gain invaluable insights from industry leaders, collaborate with peers, and explore the latest industry trends.

Stay tuned as more speakers and our evening’s entertainment act are revealed!

Click the ‘Learn More’ link below for more details.