My Experience at the 2024 FIRST & AfricaCERT Symposium: A CyberGirl’s Perspective- Part Final

Mariem Mahjoub’s session highlighted how open-source tools can transform Operational Security Management (OSM), providing effective, low-cost solutions for organizations with limited budgets.

Key Benefits of Open-Source Tools:

Network Monitoring and Log Analysis:

Proactive Security Measures:

Digital Forensics and Incident Response (DFIR): Mariem highlighted several tools for DFIR, including:

Takeaways: Mariem emphasized that open-source tools strengthen network monitoring, log analysis, vulnerability scanning, and incident response. These tools offer cost-effective solutions to build a robust cybersecurity framework, improve operational capabilities, and support compliance, all while encouraging innovation and collaboration.

Sithembile Songo’s session focused on strengthening Operational Technology (OT) cybersecurity, especially in industrial control systems (ICS) and critical infrastructure. Using Eskom as a case study, Sithembile shared practical strategies to improve OT cybersecurity maturity.

OT Cybersecurity Maturity Journey: Sithembile introduced a maturity model to help organizations improve OT security:

Key Components of OT Security:

Eskom Case Study: Eskom’s journey from “Defined” to “Optimized” stage highlights the importance of structured security protocols, better visibility, and collaborative efforts between IT and OT teams. Frequent drills ensure effective response to incidents.

Key Takeaways:

Conclusion: Sithembile emphasized the need for continuous improvement in OT cybersecurity. By focusing on visibility, control, and preparedness, organizations can protect critical infrastructure and ensure resilience against growing cyber threats.

Judy Ngure’s session focused on the critical need for bug bounty programs to secure Africa’s growing digital ecosystem. With mobile penetration increasing and more digital adoption, ensuring data privacy and cybersecurity is essential for Africa’s development.

Africa’s Digital Security Challenges:

Bug Bounty Programs: A Solution

Lessons from Bug Bounty Programs:

Africa’s Contribution & Opportunities for Growth:

Common Vulnerabilities Found in Bug Bounty Programs:

Key Takeaways:

Judy emphasized that bug bounty programs are a key strategy for securing Africa’s digital future, fostering innovation, and strengthening defenses against cyber threats. Judy said “ You don’t marry before courting” which she meant you have to learn Bug Bounty before just jumping into it.

On the final day of the symposium, I participated in a Cyber Drill on the Cyber Ranger platform, where we tackled a simulated ransomware attack, testing our skills, adaptability, and teamwork.

Drill Highlights

2. Reverse Engineering Challenge:

Key Learnings

2. Teamwork & Communication: Even with hesitation, we collaborated well, turning challenges into shared successes.

3. Analytical Thinking: A methodical approach in the reverse engineering task led to the best results.

4. Observation Skills: Small details can unlock big solutions in cybersecurity.

Broader Implications

This drill reinforced key lessons in adaptability, team dynamics, and practical training. It also showed how adversary tactics like social engineering can be used defensively when applied ethically.

The Cyber Drill was a great learning experience in incident response, creative problem-solving, and teamwork. It emphasized the importance of staying flexible and thinking differently to handle evolving threats.

Attending the 2024 FIRST & AfricaCERT Symposium has truly been an enriching and unforgettable experience. From the moment I arrived, I knew it would be a journey filled with invaluable insights, new connections, and countless opportunities to grow in the field of cybersecurity. I am deeply grateful for the chance to participate in such an impactful event, where the exchange of knowledge and ideas was both motivating and eye-opening.

Gaining Practical Knowledge and Skills

One of the most rewarding aspects of the symposium was the opportunity to engage in hands-on learning. Whether it was building a honeypot or diving into the complexities of network security monitoring, I walked away with new skills that I am eager to apply in my own work. The event’s diverse tracks, covering areas like cyber threat defense, open-source cybersecurity tools, and bug bounty programs, have expanded my perspective on the tools and strategies needed to secure our digital environments.

Additionally, the Capture The Flag (CTF) challenges provided a practical test of my abilities. It was not just a test of technical prowess, but a reminder of the importance of continuous learning in the ever-evolving cybersecurity landscape.

Gratitude and Future Aspirations

I’m incredibly thankful to the organizers, sponsors, and all those who contributed to making this symposium a success. The connections I’ve made with fellow cybersecurity professionals from across Africa and beyond are priceless, and I am excited to continue nurturing these relationships. This experience has motivated me to push harder, learn more, and strive for excellence in my work.

Looking ahead, I’m excited about the future and what it holds. This event has inspired me to not only continue building on the skills and insights I’ve gained but also to contribute actively to Africa’s growing cybersecurity landscape. I hope to come back to future symposiums, not only as a participant but also as a speaker, sharing my experiences and the knowledge I’ve acquired along the way.

The Journey Continues

As I reflect on the lessons learned and the incredible conversations I’ve had, I’m more motivated than ever to contribute to the Cybersecurity ecosystem. My journey is far from over; in fact, I’m just getting started. This experience has given me the confidence to aim higher and push beyond limitations. Also, may this serve as the resilience of being a CyberGirl. An organization that aims to get more women into the Tech space. “You educate a woman, you have educated the whole generation”

To everyone who made this symposium possible, thank you once again, Mr. Jean-Robert Hountomey and Mrs Confidence Staveley, to name a few. I am ready to continue on this journey, better equipped than ever before.

Don’t cut your wings — fly high, be unstoppable, and shine

- By Gamu — the next big thing.