The cyber weekly

Welcome back to The Cyber Weekly! In this episode, Deo sits down with Kago Ezekiel Setshogo, a SOC Analyst at Augmenta Cybersecurity. Kago brings a rare and fascinating perspective to the table: combining Lean Six Sigma process engineering with hands-on SOC analysis to eliminate operational noise and streamline triaging.

Whether you're a seasoned security professional looking to optimize your team's workflow, or an aspiring analyst trying to break into the industry, Kago shares actionable insights on building virtual labs, mastering frameworks like NIST and ISO, and understanding your own strengths through psychometric testing.

Make sure to like, subscribe, and hit the notification bell so you never miss an episode!

⏳ Timestamps:

🔗 Links & Resources Mentioned:

Watch the full episode: https://youtu.be/T0wHoyta1xk

Connect with Kago Ezekiel: https://www.linkedin.com/in/kago-ezekiel-setshogo/

NIST Cybersecurity Framework: https://www.nist.gov/cyberframework

ISO/IEC 27001: https://www.iso.org/isoiec-27001-information-security.html

Lean Six Sigma Resources: https://asq.org/quality-resources/six-sigma

Microsoft Azure Training: https://learn.microsoft.com/training/azure/

AWS Training and Certification: https://aws.amazon.com/training/

SANS Institute Training: https://www.sans.org

GIAC Cybersecurity Certifications: https://www.giac.org

ISC2 Entry-Level Certification: https://www.isc2.org/certifications/cc

Hashtags:

💼 LinkedIn

Body:

I had a fantastic conversation with Kago Ezekiel Setshogo, who transitioned from a System Administrator to a SOC Analyst. He brought an incredible framework with him: Lean Six Sigma.

We discussed:

If your security operations feel chaotic, you need to hear Kago’s breakdown of how to automate and optimize your incident response from step A to Z.

📺 Watch the full interview here: https://youtu.be/T0wHoyta1xk

What processes in your daily workflow do you think could benefit from a "Lean" overhaul? Let me know below! 👇

#CyberSecurity #InformationSecurity #SOC #LeanSixSigma #ProcessEngineering #TheCyberWeekly #TechCareers

Can you trust a digital forensics tool simply because it displays results on a dashboard? Not according to digital forensics professional Julian Derry.

In this episode of The Cyber Weekly, Julian joins Deo Okello to explain why investigators must go beyond graphical interfaces and independently validate digital evidence.

🔍 In this episode, you'll discover:

✅ Why digital forensics tools can produce misleading results.

Chapters

💡 Julian's advice to aspiring professionals: Build your skills, document your findings, and show your work publicly.

🎙️ Whether you're a cybersecurity student, SOC analyst, digital forensics enthusiast, or experienced investigator, this conversation will challenge how you think about digital evidence.

👍 Like, comment, and subscribe to The Cyber Weekly for conversations that make cybersecurity careers and expertise easier to understand.

💬 QUESTION:Have you ever encountered a tool that produced unexpected results? What did you do?

#TheCyberWeekly #DigitalForensics #CyberSecurity #DFIR #DigitalEvidence #CyberSecurityCareers

🎙️ Welcome to The Cyber Weekly Podcast!

In this episode, Deo Okello sits down with Venuste Niyodusenga, Senior Network Engineer at the National Bank of Rwanda. He holds CISSP, CCSP, CCNP, PMP and AWS Solutions Architect Professional credentials and has a Master's from Carnegie Mellon University Africa. He has 10+ years across IT, SCADA and industrial systems, and cybersecurity consulting.

🔥 In this episode you'll learn:

Ever feel stuck in a help desk role, wondering if cybersecurity is even reachable without a degree or years of "experience"? Grant Hughes was exactly there — until he sent one cold email that changed his career forever.

In this episode of The Cyber Weekly Podcast, Grant Hughes (CISO at The Nascent Group, Founding President of the ISC2 Cape Town Chapter) breaks down:

How he went from desktop support to CISO with zero security certs

🔗 Connect with Grant Hughes:

LinkedIn: https://www.linkedin.com/in/grant-hughes-52196569/

YouTube: https://www.youtube.com/@granthughes4989

🌍 African Tech Talent Support Project: https://isc2capetownchapter.com/africa-tech-talent-support-project/

🏢 ISC2 Cape Town Chapter: https://www.linkedin.com/company/isc2-cape-town-chapter/

💼 The Nascent Group: https://nascent.group/

 LinkedIn: https://www.linkedin.com/company/nascent-group-global/

Chapters

🚨 Most CISOs can explain every control on their stack but ask them what the business actually sells, and they go quiet.

In this episode of The Cyber Weekly, Deo sits down with Jake Bernardes CISO at Gambit Security, ex-pen tester, chartered accountant, and a guy who learned Chinese and German before ever touching cybersecurity.

We get into:

Here the links

Random Access Memories: https://randomaccessmemories.io

Jake Bernardes on LinkedIn: https://www.linkedin.com/in/jakeleobernardes/

Random Access Memories on YouTube: https://www.youtube.com/@RandomAccessMemoriesPod

If you're in GRC, trying to break into cybersecurity, or leading a security team through the AI shift this conversation will change how you think about your career.

00:00 Intro: The Intersection of Chinese & Cybersecurity

#TheCyberWeekly #CISO #Cybersecurity #GRC #RiskManagement #CyberCareers #InfoSec #CyberLeadership 🔐🎙️📈

In this episode of The Cyber Weekly Podcast, hosts Deogratius Okello and Angella Nabbanja sit down with Mădălin Bratu — General Manager and Founder of Sectio Aurea (operating under the brand Phi). Mădălin brings 20 years of experience across cybersecurity, governance, risk, and enterprise technology, sharing insights from his career at IBM, CA Technologies, and Eviden/Atos. He breaks down the realities of implementing frameworks like NIS2 and ISO 27001 in complex operational environments, why compliance must move beyond "paperwork security," and how he utilizes the expert-network model to deliver real-world security solutions. Whether you're starting out in GRC or looking to build your own consultancy, this conversation is packed with hard-earned lessons on compliance, operational friction, and building a resilient security program. 🎧

Connect with our guest:

Only 40% of her company completed the annual security awareness training. Human error was the #1 risk on the register. So she stopped writing policies and started recruiting people. 👥

In this episode of The Cyber Weekly Podcast, Deo Okello sits down with Heather Reed — cybersecurity leader, Cyber Security Woman of the Year finalist, competitive cookie designer 🍪 and former Cookie Wars contestant on the Food Network.

Heather came into security from marketing, people leadership and compliance, and she says that non-traditional path became her biggest advantage. She never carried the "Department of No" reputation, because she'd spent years on the other side of it.

We get into:

⚠️ One overlooked technical issue could become a major financial, operational or reputational crisis.

But what exactly is IT risk, and why do organizations invest so much in managing it?

In this episode of The Cyber Weekly Podcast, Deo Okello sits down with IT risk and security professional Peter Muhumuza to break down IT risk in practical, easy-to-understand language.

You will learn:

🔍 How technical weaknesses become business risks

Peter also explains why effective IT risk management is about more than fixing technical problems. It requires understanding business priorities, regulatory obligations, operational downtime and financial exposure.

If you work in cybersecurity, IT, banking, fintech, audit, governance or risk management, this conversation is for you.

👍 Like this episode

#TheCyberWeekly #ITRisk #RiskManagement #Cybersecurity #InformationSecurity #GRC #ThirdPartyRisk #CloudSecurity #CyberRisk #ITGovernance

Think your company is too small for cybercriminals to care about? Think again. 🚨

On this episode of The Cyber Weekly, cybersecurity leader and vCISO Brandon Krieger breaks down what businesses need to understand about cybersecurity right now.

We discuss:

🔐 What a fractional vCISO actually does

Brandon makes an important point: cybersecurity professionals must understand the business they are protecting—not just the technology

If you’re managing cloud infrastructure or responsible for cybersecurity in a hybrid environment, overlooking emerging threats can leave your organization exposed before you even notice the gap. In this episode, Muhiire Bill, a seasoned IT security professional with nearly a decade in financial institutions, reveals the cloud security blind spots most teams miss. From misconfigured cloud resources and weak access controls to API vulnerabilities and social media reconnaissance, this conversation uncovers the real risks hiding behind “secure” systems. Bill also breaks down how organizations can balance usability, compliance, and protection without slowing the business down.  You’ll learn:

If you work in IT, security, cloud operations, or leadership, this episode gives you the insight you need to avoid common mistakes and build a stronger security culture. Bill’s experience across financial and manufacturing sectors brings a practical, real-world perspective to one of today’s most important tech conversations. Stay ahead of the curve hit play now.