The inaugural Gulf News Cybersecurity Forum today opened to a packed house of industry experts and IT professionals at the Anantara Downtown Dubai Hotel.
Experts from leading organisations in the UAE converged in Dubai to discuss the challenges and threats companies face as they undergo digital transformation. Over seven panel discussions spread across the day, business leaders and industry experts delved deep into the risks to offer invaluable insights and outline best practices to ensure a secure digital future.
Topical issues such as the significance of a strong CIO-CFO relationship for businesses; the future of cybersecurity; cloud security for the digital age; cybersecurity architecture; the need for security assessments; end-to-end security compliance; and managing trust, risk and security in the era of artificial intelligence were covered in detail in the panel discussions.
Gulf News Cybersecurity Forum 2023 is powered by leading technology companies such as Huawei, Recorded Future, Inshield Technologies, XM Cyber, Cyberknight, Skyhigh Security, Plus 971 Cybersecurity, EMT Distribution, Progress, Flexera, Mindfire Technologies, Infinidat, Finesse, Honeywell, Cloud Networks, SAF, Avanade and ABA Legal Consultants.
Follow the event as it unfolds
Closing remarks
Marclino Fernandes, Director – Operations, Gulf News, closed the event on behalf of the Dubai-based newspaper.
“As we draw the curtains close on this incredible event, I’d like to say thank you for your commitment and support. We have seen engaging, thought-provoking discussions from experts in the world of cybersecurity,” he said.
“The importance of this event can’t be understated. We have covered a series of topics from end-to-end security, AI, threats, trends and more. The panel discussions have given you knowledge to take back to your organisations.
“I’d like to thank our panellists, attendees and sponsors. Furthermore, I extend my gratitude to the events team at agnc3 by Gulf News, and sponsors for making this event a success.
“This event has been a resounding success and I encourage you to take the knowledge with you to create a safer digital world for all. As the threat landscape evolves so must our defences. I look forward to seeing you all again in a secure digital future.”
AI secure: How to manage trust, risk and security
The closing panel of Gulf News Cybersecurity Forum 2023 delved into the challenges and solutions surrounding trust, risk management, and security in the realm of artificial intelligence. The discussion highlighted the need for transparency and explainability in AI systems to build trust among users. Managing risks involves comprehensive risk assessments, ethical considerations, and robust governance frameworks. Security measures such as encryption, access controls, and vulnerability testing need to be explored to safeguard AI systems and data, said speakers.
End-to-end security: Governance and processes to ensure regulatory compliance
End-to-end security, encompassing governance and processes, is crucial to ensure regulatory compliance in the digital age. A comprehensive approach involves establishing clear policies and procedures aligned with relevant regulations and industry standards. Regular risk assessments and audits assess compliance gaps and facilitate corrective actions, said panellists at the sixth panel discussion at the event.
Snapshots of Gulf News Cybersecurity Forum 2023
UAE’s cyberlaws: A look at VASPs under VARA
Given that crypto is an emerging market, regulation is still evolving. But Dubai has set the gold standard in this regard. Geetha Lakshmi, Managing Counsel, ABA Legal Consultants, lauded Dubai’s landmark decision to set up the Virtual Assets Regulatory Authority (VARA).
“Anything that is of value is an asset. VARA is a self-made authority that takes care of all virtual assets in the UAE and we lead by example,” she said at the Gulf News Cybersecurity Forum 2023.
Gulf News Cybersecurity Forum 2023 - a walkthrough
Security assessment: Why breach and attack simulations are important
Attackers change gears and so do defenders. Breach and attack simulations offer extensive immediate threat testing on premises, cloud, and hybrid infrastructure and supports a wide variety of operating systems. Security is built upon a layered defence that needs continuous testing to assess if controls are working effectively, say speakers at the fifth panel discussion at Gulf News Cybersecurity Forum 2023.
Security is built upon a layered defence that needs continuous testing to assess if controls are working effectively, say speakers at the fifth panel discussion at Gulf News Cybersecurity Forum 2023.
Designing and implementing a secure network architecture
A well-designed cybersecurity architecture enables businesses to maintain resiliency in the face of a cyberattack or a failure of one or more components of their infrastructure, said speakers at the fourth panel discussion.
Data privacy: Understanding risks and protecting information
Vijay Babber, Channel Manager Middle East and Africa, Skyhigh Security, said: “AI is a science and technology based on concepts of attempting to replicate human behaviour. Now ChatGPT allows you to have a human-like conversation with a computer thanks to AI. What are the possible implications of taking ChatGPT into a business? Data security is one of them. Who has access to the information you provide ChatGPT?
“Novice users of ChatGPT are the ones that are keeping security teams up at night because of the amount of data being shared in order to get the response back that you need. A surgeon once shared medical information on ChatGPT to write a medical letter, which is the wrong way to use the technology, as it could be a serious breach of data.
“Novice users can use ChatGPT by adding more information into a prompt, without realising they’re giving out important company information, which isn’t wise. A lot of organisations are using ChatGPT for good by understanding what information should and shouldn’t be used when asking it questions.”
Cloud security for the digital age: Best practices
In the digital age, cloud security is paramount to protect sensitive data and ensure business continuity. Best practices involve a multilayered approach. This includes strong access controls and authentication mechanisms to prevent unauthorised access, said the speakers at the third panel discussion at the Gulf News Cybersecurity Forum 2023
The future of online crime: How ChatGPT is changing the rules of the game
It is increasingly common for criminals to misuse ChatGPT, an AI chatbox, to facilitate online fraud and attacks.The sophisticated technology of this bot allows it to bypass human detection of fraudulent activity and can help identify targets and write malware and malicious source code. In this session, Recorded Future provided an in-depth look at how ChatGPT is being used as a tool in online crime and what measures businesses and individuals can take to protect themselves against this new threat.
“A cybercriminal can use ChatGPT for their advantage in four ways, phishing, malware, fraud and disinformation. A criminal can use phishing attacks and templates created by ChatGPT, like writing a fake letter from your bank saying your account has been compromised,” said Nour Fateen, Director, Sales Engineering EMEA, Recorded Future.
“Criminals can use ChatGPT to create malware – malicious code, exploit code and even improve already written code – which helps cybercriminals create an attack.
“Fraud is ridiculously easy when it comes to ChatGPT because all it does is use convincing language to create fake documents, SMS, emails, invoices etc. So we have to be extra careful when it comes to cybersecurity now.
“Disinformation is very important because now it’s hard to know whether what we’re being told is true or not. ChatGPT can produce fake scientific studies to promote a specific agenda, for instance it can do a study saying smoking is good for you.”
Future of cybersecurity: Challenges, best practices and effective strategies for cyber safety
Cybersecurity has risen to the top of corporate agendas, and businesses will need to continue to grapple with cyberthreats amid the push towards digital information, says the second panel at Gulf News Cybersecurity Forum 2023.
“You have to be agile and prepared for the unknown. The maturity of software is always challenging to get a proper understanding. Smaller companies usually haven’t invested in security as much because they just want the product out the door, it’s risky because it’s not about sustainability,” said Stephen Kruger, Chief Technology Officer, Careem.
Mohammed Noufel, Cluster Manager, IT Infrastructure and Operations, Royal Continental Hotels & Suites, said, “Risk management is very important nowadays. When you’re talking about the hospitality industry we’re having workshops and talks about employee awareness. We are always discussing technology and employee awareness so there is a good understanding of it all because otherwise you spend a lot of money and risk losing everything.”
For Jacob Mathew, Head of Information Technology, Government of Abu Dhabi Entity, cybersecurity is about partnership. “It has to be a part of every project, not done in isolation. From inception, planning, execution and monitoring – this is how companies can be more efficient and run better,” he said.
“In my opinion, cybersecurity should be the key driver for business now, and it is not the liability anymore. The technology we are using is all connected and to defend it is important,” said Rakesh Narang, Vice President Technology, Aldar Properties.
Collaborative efforts required to enhance cybersecurity
Why a strong CIO-CFO relationship is crucial for business success
CIOs and CFOs haven't always gotten along in the past. But with digital transformations now dominating budgets, business success depends on their ability to work together, says the first panel at Gulf News Cybersecurity Forum.
“For me, culturally I think it’s a good thing if CIOs and CFOs butt-heads. The CIO should be aligned to driving business forward and the CFO needs to be supportive of the company vision. So I think that tension between the two brings the best out of both parties. If you’ve got a dominant CFO, it’s unlikely that you’ll put technology at the forefront of your business,” said Richard Jackson, COO, TASC.
How does the CIO help the CFO build relationships? “They should focus on alignment,” said Ameena Raheem, Head of Information Technology, Engineering Office. “The tech has to be aligned with the strategy of the organisation. ChatGPT is a good example, everyone is talking about it, but does it add value to the business? If you are in the media industry it’s totally different from being in healthcare, so you have to ask yourself as a business do we need this tech, or is it just trendy.”
According to Ramesh Subramanian, Chief Financial Officer, RAKEZ: “The CFO was seen as a transactional back-office guy crunching numbers, those days are over with automation. The role of the CFOs is clear - to partner with the business and be a strategic partner with all the C-suite executives.
On the topic of the evolving dynamic between CIOs and CFOs, Ahmad Al Mulla, former chairman & board member, CIO Majlis said: “I think the role of finance would be more forward-looking, more advisory, more partnership with business – that’s how the dynamics of CIO-CFO relationship is changing today.”
Securing the future
In the second key note address Dr Bushra Al Blooshi, Head of Research and Innovation, Dubai Electronic Security Center, Digital Dubai Authority, gave an overview of Dubai’s cybersecurity landscape and developments in digital skills.
Building strong cybersecurity strategies
Dr Mohammed Al Kuwaiti, Head of Cybersecurity, UAE Government, set the tone for the day with his keynote address, pointing out the digital transformation the UAE is undergoing across all sectors, from aviation to transportation to education to healthcare and beyond.
“The digital transformation we’re going through must be done in the proper way to avoid the potential for great attacks and vulnerabilities that could be easily exploited, resulting in devastation for critical infrastructures. This could be a data leak or data breaches that could cause a national security disaster that impacts us all, because of this it’s important that we build cybersecurity strategies.
“All of our private data is online and so we need to ensure all our information is protected based on the UAE’s data protection laws and privacies.”
Welcome speech
In his opening remarks, David George, Publisher, Agnc3 by Gulf News, which is organizing the forum, emphasised the importance of events such as the Gulf News Cybersecurity Forum against the backdrop of increasing cyberattacks that are becoming more sophisticated, relentless and disruptive.
"Gulf News Cybersecurity Forum is a platform to come together, exchange knowledge and experiences, and collaborate on finding innovative solutions to combat the evolving cyberthreats that confront us," he said.
"Over the course of the day, we will have the privilege of engaging with insightful keynotes, thought-provoking presentations, and interactive panel discussions that explore the latest trends, emerging technologies, and best practices in cybersecurity. Our esteemed speakers will share their expertise, shedding light on innovative strategies to mitigate risks, protect critical infrastructure, and safeguard sensitive data.
“Together, we have the power to shape a future where individuals, organisations, and nations can thrive in the digital age with confidence and resilience."
