BSides Bristol 2024

The squid that lost its shell
, Track 1

It is not a widely known fact that squid used to have shells. Ancient cephalopods in the Jurassic Period, the common ancestor of modern octopus and squid, were creatures like today's nautilus. They relied on a large external shell for defence. Squids evolved intelligence and agility and so must we.


As seas became more acidic, weakening shells made from calcium carbonate, squid gradually evolved three new mechanisms for self-defense: intelligence, camouflage and agility.

As networking perimeters dissolve, the imperative for us to collect and share intelligence about the interactions between business functions, data, attack surfaces, and threats has never been more important or challenging. We will describe how we have developed a security intelligence capability and operationalised it so that attack surfaces are managed (camouflage) and responses are rapid, and accurate (agility).

Simon leads security and internal IT at OVO. He has led the strategic development and operational execution of information security, infrastructure and intelligence programmes for government departments, financial institutions, global retail, and energy companies. He has coached boards, executive committees and engineering teams on cyber security risk and technology regulations and has lived and worked in Asia, mainland Europe, the Middle East and currently resides in the UK.

Simon has implemented risk reduction operations and technologies for national security, security and privacy, financial crime, cloud and DevOps in both large and small enterprises. He co-authored the ISO Standard for DevOps (ISO32675) and is a Chartered Engineer.

Simon is a passionate advocate for security as a team sport, the need for allies for the diverse talent already in the information security and technology professions and the urgent need to recruit more diversity into those professions.