We’ve observed that even the most cyber savvy professionals can be duped when their emotional state is hijacked. The average employee makes hundreds of micro-decisions every day, most of which are made under pressure. Cyber criminals know this, and they craft attacks that exploit precisely these conditions.

Creating a positive and aware culture

Building the foundation of a secure organisation starts with shifting use behaviours. A cyber-aware culture is one where security is not relegated to IT or Governance, Risk and Compliance (GRC) teams, but embedded into how every employee thinks, acts and collaborates.

Creating a positive and aware culture goes beyond setting rules. When protocols feel challenging, employees will naturally seek simpler approaches, highlighting the need for solutions that empower and support them.

Psychological safety and constant education are paramount. This means empowering your people to ask questions, report mistakes, challenge something that doesn’t seem right, and stay curious about threats. Clients must be encouraged to treat security awareness not just as a compliance check box, but as a continuous, evolving, and ultimately powerful tool in your arsenal.

This, quite simply, is because the cyber threat landscape in the UAE and across the wider GCC is escalating rapidly in complexity. AI-fuelled phishing, identity-driven breaches, and complex ransomware campaigns that simultaneously target production and backups are now commonplace. Resilience is the new readiness.

From automation to autonomy

Security needs to evolve from automation to autonomy, ensuring that systems not only detect and protect, but also decide and recover with speed, trust and intelligence. Even as many organisations move from traditional preventative models to autonomous, intelligence-driven security architectures, the human element is always a central pillar. Despite the most sophisticated systems, a distracted click, or a mishandled credential can still invite chaos.

This year’s insights are shaped by deep engagements across multiple sectors: whether optimising security adoption in Hyperscaler environments like Microsoft 365, securing AI deployments across industries, or enabling governments and enterprises to embed recovery resilience into their risk management frameworks.

Cyber security is moving closer to the heart of most organisation’s strategies. Security investment is no longer evaluated as a risk mitigator, but as a driver of operational continuity, customer trust and board-level credibility. As AI, Quantum computing, and hyper-connected ecosystems redefine business models, security innovation itself becomes the new frontier.

Digital trust

If the last decade was about digital transformation, the next will be about digital trust. And building that means aligning cyber security frameworks with the way people actually think and behave.

It means deploying user-centric protocols, creating emotially intelligent training and awareness programmes, and making every single employee feel like they are no longer a liability, but an empowered defender - an integral part of the security fabric.

We see cyber security as a strategic enabler of innovation, business continuity and trust. Today’s organisations need to build not only digital infrastructure, but an empowered, enriched and enlightened human infrastructure. After all, the human mind is the most adaptive, intuitive and resilient firewall of them all.

Niall Thurston, Special to Gulf News

Articles from the author

Understanding the psychology behind cyber attacks