The HEP System Managers meeting is a traditional event to gather administrators responsible for high-energy IT resources in UK to share experience and discuss current topics. The last HEP SYSMAN meeting took place at the Rutherford Appleton Laboratory on the Harwell Campus (STFC, UK Research and Innovation) last week. As part of the meeting a security workshop was organized, where members of EGI CSIRT had the opportunity to present current developments in the team and discuss incident response procedures with the participants. A hands-on training session was also organized, focused on a recent Service Security Challenge (SSC-19.03), where attendees could learn the foundations of digital forensics and practice how to get evidence about illicit activities and analyze the artefacts. The materials from this year’s meeting are available online.