CRESTCon and IISP Congress 2013

The surviving homepage gives a useful outline of the 2013 conference, but it does not contain the complete session programme. This record keeps those two things separate: the event and its themes are documented; the original running orders have not been recovered for this archive.

Independent archive: this page is published by Serallo Domains Ltd. It is not an official CREST or IISP publication, and we do not organise the historical event. For current events, use CREST's event information.

Event record

The homepage captured by the Internet Archive on 14 June 2013 advertised:

The capture date is when the archive saved the page. It is not the event date or the date this new article was published. The venue also differs from the Royal College of Physicians used in the later records on this site.

Technical stream

The first stream addressed security research, testing methods and lessons from data compromises. Its intended audience included consultants, researchers and people working on offensive and defensive security. The homepage linked its full agenda at /stream1.pdf.

That is enough to establish the stream's subject. It is not enough to attribute a particular technique, result or recommendation to a speaker. We have therefore not invented session titles, timings or a list of speakers.

If you followed an old agenda link, this is the available context rather than a replacement slide deck. The document address returns a missing-document response with a route back to this record.

Risk and management stream

The second stream considered cyber threats from the perspective of security management, risk and compliance across public and private organisations. Its full agenda was linked at /stream2.pdf.

A useful way to read the two-stream structure is as a pair of questions: what is happening technically, and what decisions should an organisation make about it? That is our editorial interpretation of the layout, not a quotation or a recovered conference conclusion.

What survives and what is missing

An absent copy does not establish that a document never existed. It means that we cannot currently provide an authenticated copy or use it to substantiate additional detail. A source that cites an agenda and an actual readable agenda are different kinds of evidence.

Current guidance

These are newly written resources from this publication. They are not endorsements by the conference organisers or speakers:

• Choose a security assessment to turn a broad concern into a question a testing engagement can answer.
• Scope and authorise a test to record the systems, owners and boundaries before work starts.
• Read security research critically to distinguish an interesting historical claim from evidence that applies to a current system.

For a simple reading exercise, make two columns in your notes: established by the record and still unknown. Put the date and venue in the first column and any proposed speaker list in the second until you have a source. The conference-learning notes provide a reusable structure.

Contribute a correction

If you hold an original agenda, a dated programme or a speaker's own publication, contact the publisher with its provenance and where it can be checked. Please do not send private attendee details. The source register explains how we distinguish recovered material from bibliographic references.