Jersey Cyber Shield

Jersey Cyber Shield is a free service offered by JCSC for organisations. We have designed it to work with the security measures you already have to give you extra protection.

We use five methods to find security weaknesses which an attacker could target. If we find any weaknesses, we tell you what they are so that you can address them.

Jersey Cyber Shield is suitable for different sizes of organisation and is free to join.

(There are some optional elements which are more complex. Because of this, we may need to request a contribution if you want access to these services.)

To join Jersey Cyber Shield, complete this secure online form. It will help to have to hand your website address, contact details, and any fixed IP ranges you operate.

If you have any questions, you can contact us:

• by phone on 01534 500050
• via email (hello@jcsc.je)
• or by booking a meeting with the team

What does Jersey Cyber Shield include?

Jersey Cyber Shield includes five separate elements. These work together to protect you against potential cyber attacks.

• Vulnerability Advisory Service. We get regular information from other Cyber Emergency Response Teams (CERT). This includes information about security vulnerabilities. If we learn about a vulnerability that could affect Jersey, we will tell members so they can act.
• Advanced Breach Detection. Depending on the size and type of your organisation, we can set up a series of honeypots. A honeypot is a device designed to draw an attacker’s attention. It might look like a file the attacker might want access to, or a vulnerable device they could target. Honeypots act like a decoy: if someone tries to gain access to the honeypot, it will alert our team, and we’ll alert you. If our team see a lot of alerts for a honeypot, we can look at the patterns, which helps us spot coordinated attacks.
• Coordinated Vulnerability Disclosure. This service means that we can share any vulnerabilities that we learn about. We may receive this information from members of the public, or from security researchers. We’ll review any information we receive, and share it with members who are affected.
• Suspicious Email Reporting Service (SERS). You can share suspicious emails with us so that we can better understand threats to our Island, and provide advice and warnings. When you share a suspicious email with us, it will also be be analysed by the UK’s National Cyber Security Centre (NCSC). This can help NCSC to disrupt malicious phishing campaigns and take down malicious websites. You do not need to sign up to this service. To make it easier, you can set up automated reporting with Microsoft Outlook. Find out more about SERS here.
• Active Scanning. This service is still in development. Once it’s live, it will allow us to scan Jersey-based IP addresses for vulnerabilities. We will then be able to tell the owners of those IP addresses what we’ve found. Scanning for vulnerabilities is often what cyber attackers do. If we find the weakness before an attacker does, it gives your organisation time to respond. Active scanning is complex, and we need to make sure we do this in a legally-compliant way. Because of this, we’re looking at bringing in this service in an opt-in basis in 2024.

The diagram below explains more about how Jersey Cyber Shield works.

How much does it cost?

Jersey Cyber Shield is free to access. Honeypots and the active scanning parts are optional extras which are more complex. This mean that we may request a contribution for these services. To find out more, email hello@jcsc.je.

Who is eligible to join Jersey Cyber Shield?

We designed Jersey Cyber Shield for all Jersey organisations, no matter how big or small they are. Some parts of the Shield – like Active Scanning – are more complex. This means we’ll need to work with you to set it up.

If you want to talk about Active Scanning, you can contact us by phone on 01534 500050 via email (hello@jcsc.je) or  book a meeting with the team.

How do I join Jersey Cyber Shield?

To join Jersey Cyber Shield, complete this secure online form. It will help to have to hand your website address, contact details, and any fixed IP ranges you operate.

Remember, you can access the Suspicious Email Reporting Service (SERS) without signing up.