##What’s going on this week
A year ago the Copilot sessions were all “look what it can do”. This week they’ve split in two. One camp is still the demo. The other is the question every IT lead is now being asked: we’ve paid for it, so what’s it actually doing, and why is the bill moving? That second camp is where the value is, and Softcat have two sessions in it.
Wednesday 10:00
The two non-Copilot picks are the ones I’d protect the diary for. Email is still how most attacks start, which makes Barracuda’s live teardown worth an hour, and ISO 42001 is the governance standard that’s starting to appear in supplier questionnaires before most of us have read it.

PickLiveWed 28 Oct, 10:001 hour
Inbox Autopsy: Case Files from the New Era of Email Attacks
BarracudaCybersecurityFree
Wednesday 14:00
Barracuda take five real email attacks and dissect them live, with the audience voting on each one before the reveal. It works because it’s specific: not “phishing is bad” but here’s the exact email, here’s why it got through, here’s what gave it away. Worth it even if you’ve sat through a dozen awareness sessions, and a good one to send to whoever runs your staff training.

PickLiveWed 28 Oct, 14:00
ISO 42001: Where to Start with AI Governance
SecarmaArtificial Intelligence & CopilotFree
Tuesday 10:00
ISO 42001 is the AI management standard, and it looks set to do what ISO 27001 did a few years ago: turn up in a tender before anyone’s planned for it. Secarma treat it as a practical question rather than a certification pitch: where AI is already being used in the organisation, who owns it, and what governance needs to come first. I’ve been to a fair few of their webinars and they’ve stayed on the informative side of the line, which isn’t true of everyone covering this.

PickLiveTue 27 Oct, 10:001 hour
Copilot Journeys: What We're Seeing and What Works
SoftcatArtificial Intelligence & CopilotFree
Picked by FrontRow. Nobody pays to be in the brief.
Softcat on what the organisations getting real value from Copilot are doing differently, from pilot through to rollout. The useful part is the patterns: which departments it lands in, and what the people who switched it on and walked away found six months later. If you’re being asked “should we buy more licences”, watch this one first. Their usage-based billing session on Wednesday is the natural follow-on.
If you’ve only got 30 minutes
Nothing live under 45 minutes this week, so one from the library. URM Consulting on what AI actually changes in a penetration test, and what it doesn’t. Sign-up required.

From the library
BCN build three Microsoft 365 Copilot agents live, no code, in 46 minutes. No sign-up. If the Copilot sessions this week leave you wanting to try something, this is the one to put an hour aside for.

Watch
AI That Works, Episode 4: How to Automate Everyday Work – Building Your First AI Assistant
BCN46 minNo sign-up
Read next
If Copilot’s the thing you’re being asked about, Getting your organisation Copilot-ready puts six sessions in the order you’d actually tackle it. And if you haven’t yet worked out which AI tools staff are already using, start with the Shadow AI guide before the ISO 42001 session, because that’s question one.
That’s it for this week.
If this was useful, have next Monday’s sent to you.