Zero Trust thinking: doing resilient digital preservation in a world of cyber risk

Check for your local time

Digital preservation involves risk management processes: to identify, analyse and mitigate the risks to long-term access to digital materials. Due to a multitude of factors, cybercrime poses a bigger risk to digital materials than ever before.

Cybercrime is also a risk that can affect every one of us, and something all digital preservation practitioners need to manage.

But understanding the cybercrime risk, and deploying methods to prevent it, can feel daunting and complex. This is especially so for digital preservation organizations, who must often work with digital materials from unknown sources in hazardous file formats. Collecting organizations also keep collections of immeasurable social, political, scientific and economic value: this makes them prime targets for cybercrime.

The DPC last held a focused event on cybersecurity in 2022. Since then we have sadly witnessed several damaging cyber attacks on significant cultural heritage institutions. But the digital preservation community is not beaten. On the contrary, organizations have responded and adapted in the face of this adversity; so that digital materials can survive in the very worst of circumstances, and so that digital preservation operations can happen within an appropriate framework of security and trust.

This event will bring together examples of this response from across the world. As an audience, we will analyse where we are now on our collective cyber resilience, and debate where digital preservation is helpful – and not so helpful – to this endeavour. This will lead on to the launch of a new DPC Technology Watch Guidance Note on Cybersecurity, which will share recommendations and key principles – such as Zero Trust - for those seeking to do resilient digital preservation in a world of cyber risk.

Draft Agenda (times in UTC)

08:00   Welcome and introduction

08:10   Audience engagement: where are we on cyber resilience?

08:20   ‘You can’t patch digital heritage: Balancing cyber security controls with digital preservation practice’
Matt Burgess (The State Library of New South Wales)

08:50   ‘Hard Lessons, Stronger Systems: Recovering a Museum after a Cyber-Attack’
Amy Adams and George Wilson (National Museum of the Royal Navy)

09:20   BREAK

09:35   ‘From Threats to Sovereignty: Managing Digital Risks and Preservation at the Bibliothèque nationale de France’ 
Yannick Grandcolas (Bibliothèque nationale de France)

10:05   ‘Understand, engage, respond: a new DPC Technology Watch Report on Cyber Security’
Heather Lowrie (Resilionix) and Garth Stewart (DPC)

10:35   Panel discussion and Q&A

11:00   Close

Recordings

All presentations will be recorded and made available to DPC Members and Supporters via this web page after the event (login to DPC website required).

Recordings will also be shared with non-members who pay to attend the event.

Please note – DPC Members do not need to register in order to access the recordings after the event.

Registration

Registration is open to all, with no charge for DPC Members or DPC Supporters and £250 for non-Members. Full Members may register 3 attendees and Associate Members may register 1 attendee for this event. DPC Members can claim their free place by entering the promotional code DPCMEMBER. DPC Supporters can claim their free place by entering the promotional code DPCSUPP. Any additional attendees can attend for a charge of £250.

Registration will close 48 hours before the event starts. If you wish to register after registration has closed, please email eleanor.oleary@dpconline.org

DPC events rely on having minimum numbers to run successfully and effectively. Low numbers may mean events are not viable and will need to be cancelled, so please check that you can attend before booking.

If you register for this event and find that you can no longer attend, you are welcome to send a colleague in your place. If you need to cancel, please email eleanor.oleary@dpconline.org with the event name. If cancelling please try to provide more than 48 hours’ notice before the scheduled event time, otherwise a cancellation fee of £50 may apply.

DPC Inclusion & Diversity Policy

The DPC Community is guided by the values set out in our Strategic Plan and aims to be respectful, welcoming, inclusive and transparent. We encourage diversity in all its forms and are committed to being accessible to everyone who wishes to engage with the topic of digital preservation, whilst remaining technology and vendor neutral. We ask all those who are part of this community to be positive, accepting, and sensitive to the needs and feelings of others in alignment with our DPC Inclusion & Diversity Policy.