CXODX_Magazine_May_2025_for issuu

MAY 2025 / CXO DX

1

2

CXO DX / MAY 2025

» EDITORIAL

AI RESHAPES CYBERSECURITY The 2025 edition of GISEC is expected to deliver a clear message for enterprise leaders that the cybersecurity equation has fundamentally shifted, and the strategies meant to safeguard digital trust must evolve in tandem. The duality of AI-led innovation and AI-powered threats places CIOs and CISOs at the helm of one of the most complex and fast-moving cybersecurity landscapes to date.

AI is redefining how threats emerge and how organizations can defend against them. The attack surface is growing exponentially and much faster than most enterprises can manage. This is because of threats ranging from AI-generated phishing and adaptive malware to deepfake social engineering, but the same technology is also fuelling a significant shift in defense methods and tools. The focus is shifting towards enabling autonomous SOCs, hyperautomation for incident response etc. AI-enhanced exposure management platforms are delivering speed, context, and scale as never seen before.

In this fast-evolving landscape, CISOs need to move beyond conventional perimeter-focused defences and embrace architectural shifts such as security mesh, zero trust, and AI-augmented SIEM platforms. There is also an urgent need to address cybersecurity readiness holistically, and this can be done by bridging legacy infrastructure gaps, embedding threat intelligence into DevOps, and securing hybrid cloud and OT environments.

Across the region, the skills gap remains a looming concern as far as cybersecurity is concerned. There is a need to upskill security teams to enable them to interpret AI-driven insights, orchestrate responses, and mitigate false positives and this is as important as the tools themselves. The fact is that AI is not replacing the human analyst; it is augmenting them, and enterprises that embrace this synergy will be better placed to build more agile, resilient defense postures.

Security is now a boardroom issue. For CIOs and CISOs, the imperative is not just to adopt AI, but to understand its operational and strategic implications. They need to balance innovation with control in an increasingly complex, fast-moving threat landscape.

R. Narayan

narayan@leapmediallc.com Mob: +971-55-7802403

SAUMYADEEP HALDER Co-Founder & MD

saumyadeep@leapmediallc.com Mob: +971-54-4458401

...................

RAMAN NARAYAN Co-Founder & Editor in Chief

...................

Editor in Chief, CXO DX

MALLIKA REGO Co-Founder & Director Client Solutions

mallika@leapmediallc.com Mob: +971-50-2489676

.........................................................................................................................................................................................................

Sunil Kumar Designer

Nihal Shetty Webmaster

PUBLISHED BY - Leap Media Solutions LLC

REGISTERED OFFICE: Office 10, Sharjah Media City | www.cxodx.com MAY 2025 / CXO DX

3

» CONTENTS 22 » SECURING THE FUTURE

31 » ENABLING ECOSYSTEMS

Cybersecurity leaders are focusing on AI-driven resilience, unified defenses, and critical infrastructure protection in response to an increasingly complex threat landscape

Lakshman Nalvade , CEO and co-founder at Surakshate, a Dubai-based cybersecurity and digital transformation firm delivering innovative, expert-driven IT solutions across MEA and India discusses the company’s areas of focus

INTERVIEW 24 » SPOTLIGHT ON CYBERSECURITY

18

Mounir Sarkis, General Manager of Logicom UAE & Gulf discusses Logicom’s growing cybersecurity focus and their participation at GISEC 2025

COVER STORY

18 » REDEFINING EXPOSURE 26 » CHECK AND SECURE Ram Narayanan, Country Manager at MANAGEMENT Check Point Software Technologies, Tenable is rewriting the rules of vulnerability management with the shift towards a smarter, context-aware approach called exposure management.

FEATURE

12 » REIMAGINING CYBERSECURITY As AI reshapes the cyber battlefield, security leaders across industries are rethinking how they detect, respond to, and stay ahead of threats.

16 » CYBERHUB IN FOCUS With its 24x7 Cyberhub and a comprehensive suite of intelligent security solutions, Finesse is positioning itself as a strategic partner for enterprises seeking resilience, compliance, and future-ready protection.

4

CXO DX / MAY 2025

Middle East discusses the rise of multi-stage malware, the normalization of zero trust, the impact of Agentic AI, among other trends

28 » SMARTER DEFENSES FOR SMARTER THREATS Ajay Biyani (AB), Vice President – APMEA, and Sheik Abideen (SA), Regional Sales Director – MEA at Securonix, share how the company is evolving to stay ahead of an increasingly complex threat landscape—particularly as AI-powered attacks gain momentum.

30 » BUILDING TRUST Syed Yusuf, Founder & CEO, Synax Technologies, UAE, a cybersecurity solutions VAD in the region discusses the company's focus areas

32 » BUILDING THE GENAI-POWERED SOC Jishant Karunakaran, Founder and CEO of Mindfire Technologies discusses how Mindfire Technologies has launched an initiative using GenAI to empower analysts and revolutionize SOC effectiveness.

COLUMN 34 » SHADOW OF DOUBT Unsanctioned AI Is Undermining Your Organization’s Security Posture says Sascha Giese, Global Tech Evangelist, Observability, SolarWinds

36 » THE RISE OF THE ROC Mayuresh Ektare, VP of Product Management, Qualys discusses why today’s threats call for a new approach to risk management

38 » DATA IMMATURITY: A ROADBLOCK TO ADVANCED AI Lori MacVittie, F5 Distinguished Engineer says data immaturity is a drag on AI adoption and Organizations that fail to prioritize data maturity will struggle to unlock the more advanced AI capabilities

REGULARS

06 » NEWS 40 » TECHSHOW 42 » TRENDS & STATS

HOSTED BY

OFFICIAL GOVERNMENT CYBERSECURITY PARTNER

OFFICIALLY SUPPORTED BY

MIDDLE EAST AND AFRICA’S LARGEST CYBERSECURITY EVENT

GET INVOLVED

MAY 2025 / CXO DX

5

» NEWS

CISCO UNVEILS FINDINGS FROM ITS STATE OF AI SECURITY REPORT FOR 2025 The report highlights security risk to AI models, systems, applications, and infrastructure from both direct compromise of AI assets as well as vulnerabilities in the supply chain.

Ahead of GISEC GLOBAL in Dubai from 6-8th May 2025, Cisco, the global leader in networking and security, has unveiled the findings of its inaugural global State of AI Security report. The report aims to provide a comprehensive overview of important developments in AI security across several key areas: threat intelligence, policy, and research.

Artificial Intelligence AI has emerged as one of the defining technologies of the 21st century, yet the AI threat landscape is novel, complex, and not effectively addressed by traditional cybersecurity solutions. The State of AI Security report aims to empower the community to better understand the AI security landscape, so that companies are better equipped to manage the risks and reap the benefits that AI brings.

Cisco is participating at GISEC GLOB-

AL 2025 as a Platinum Sponsor, under the theme “Innovating where security meets the network”. Across its portfolio, Cisco is harnessing AI to reframe how organizations think about cybersecurity outcomes and tip the scales in favor of defenders.

Visitors at GISEC will learn how Cisco combines AI within its breadth of telemetry across the network, private and public cloud infrastructure, applications and endpoints to deliver more accurate and reliable outcomes.

“As AI becomes deeply embedded into business and society, securing it must become a top priority,” said Fady Younes, Managing Director for Cybersecurity at Cisco Middle East, Africa, Türkiye, Romania and CIS. “As our State of AI Security report indicates, traditional cybersecurity approaches are no longer sufficient to address the unique risks presented by AI.

Fady Younes

Managing Director for Cybersecurity, Cisco MEA GISEC serves as the ideal platform to discuss the new age of AI-enhanced cybersecurity – bringing together security leaders, innovators, and policymakers who are shaping the region’s cyber defense strategies. Through our thought leadership and innovations, we are showcasing at GISEC, Cisco aims to equip organizations with the insights, research, and recommendations they need to build secure and resilient AI systems.”

MANAGEENGINE TO DEMONSTRATE AI-POWERED CYBERSECURITY CAPABILITIES AT GISEC ManageEngine will be showcasing its latest enhancements at the event at booth #E10, Hall 4. long-standing commitment towards enhancing cybersecurity in the region. The event will see the organisation showcase its latest advancements in its AI-powered cybersecurity suite of IT solutions.

Nirmal Kumar Manoharan VP of Sales, ManageEngine

ManageEngine, a division of Zoho Corporation and a leading provider of enterprise IT management solutions, announced its participation at GISEC Global 2025. This year marks ManageEngine's 12th year of participation at the premier cybersecurity event of the UAE, reaffirming its

6

CXO DX / MAY 2025

"This year at GISEC Global, ManageEngine is advocating for a fundamental shift in cybersecurity strategy with the theme, Unified security for an evolving threat landscape call to action against fragmented approaches that leave organisations vulnerable to sophisticated threats. AI, once a nascent concept, has now become a dual-edged staple of cybersecurity, reshaping both offensive and defensive strategies.” said Nirmal Kumar Manoharan, vice president of sales, ManageEngine.

"Amidst these challenges, data privacy remains a foundational pillar of our operational ethos. Our commitment to safeguarding not only our own data but also that of our customers has been deeply embedded in our organisational fabric since the inception of our product journey—long before recent cybersecurity discussions.

Today, with thousands of organisations trusting ManageEngine, we recognise the weight of this responsibility. This trust is not incidental; it is the result of our unwavering dedication to integrating security into every dimension of our business strategy," he added.

ManageEngine will be showcasing its latest innovations and enhancements to its cybersecurity suite at GISEC Global, including its SIEM solution Log360, which has recently evolved into a unified security platform that helps simplify security operations and future-proofs security investments. In addition to this, ManageEngine also cemented its stance on identity-first security by bolstering its on-premises identity security solution, ADSelfService Plus, with the launch of passwordless, phishing-resistant FIDO2 authentication to combat ransomware attacks and identity theft, which have been a growing area of concern across the globe. ManageEngine also recently expanded its integration support for its IAM platform, AD360, with over 100 new, ready-to-use integrations.

» NEWS

POSITIVE TECHNOLOGIES TO SHOWCASE APPLICATION AND OT SECURITY AT GISEC GLOBAL Visitors to the Positive Technologies booth will have the opportunity to observe offensive security specialists simulating DMA attacks Positive Technologies is joining GISEC Global 2025, one of the largest cybersecurity and technology exhibitions in the Middle East, on May 6–8 in Dubai.

At the Positive Technologies booth (D 90, Hall 7), in-house experts will share their expertise in application security, industrial cybersecurity, and detection of cyberattacks in network traffic using PT Network Attack Discovery. The Positive Technologies team will also host workshops in the Hack-O-Sphere zone.

Ilya Leonov, Regional Director for MENA, Positive Technologies says, "At GISEC Global 2025, we will focus on application security (AppSec) and operational technology security (OT security). Our team will share best practices for using PT Network Attack Discovery, which detects cybercriminal activity in the network traffic and

also aids in incident investigation and proactive threat hunting. We'll also be talking about a range of our other products and solutions to help you get real value from your cybersecurity investments."

Visitors to the Positive Technologies booth will have the opportunity to observe offensive security specialists simulating DMA attacks, using various devices to bypass defenses and gain access to valuable information. An accessible and user-friendly tool for chip security analysis will also be presented to GISEC participants.

Positive Technologies will also be organizing four activities in the Hack-O-Sphere zone. At Fixathon, guests will have the opportunity to test their skills in fixing code vulnerabilities and improve their secure development skills. The second activity is dedicated to steganography: guests will

Ilya Leonov

Regional Director for MENA, Positive Technologies be encouraged to find words encrypted in the works of renowned artists and get acquainted with this fascinating method of information transmission. At the workshop on hacking devices, participants will learn how attackers exploit physical access vulnerabilities and how to defend against such attacks. At the soldering workshop, visitors will have the opportunity to craft a useful mini-gadget.

DUBAI ELECTRONIC SECURITY CENTER TO SHOWCASE CYBERSECURITY INITIATIVES AT GISEC 2025 AS OAFFICIAL GOVERNMENT PARTNER DESC will highlight its role in advancing Dubai’s cybersecurity ecosystem and strengthening Dubai’s digital infrastructure The Dubai Electronic Security Center (DESC) is set to participate as the official government cybersecurity partner for the eighth consecutive year in the 14th edition of the Gulf Information Security Expo and Conference (GISEC Global 2025), taking place from May 6-8 at the Dubai World Trade Centre.

Cyber Defense” CTF competition, which attracted registrations from over 300 university students, engaging them in technical challenges and hands-on training.

These programs form a key part of DESC’s ongoing efforts to build a pipeline of skilled cybersecurity professionals equipped to navigate evolving digital threats.

The Center’s participation in GISEC Global 2025, which gathers over 25,000 cybersecurity professionals representing more than 160 countries, aligns with its strategic objectives aimed at advancing the Dubai Cyber Security Strategy and reinforcing Dubai’s position as one of the world’s digitally safest cities.

During the three-day event, DESC will spotlight a number of key initiatives, including the “Dubai Cyber Challenge”, an exclusive competitive simulation designed to enhance the cyber readiness of Dubai government entities, and the “School of

H.E. Yousuf Hamad Al Shaibani, CEO of the Dubai Electronic Security Center, commented: “DESC’s participation in GISEC Global 2025 reflects our steadfast commitment to securing Dubai’s digital future through proactive cybersecurity measures, innovation-driven initiatives, and an integrated ecosystem that fosters collaboration by building partnerships across public and private sectors. GISEC continues to serve as a dynamic platform where industry leaders, experts, and innovators come together to shape the future of cybersecurity.”

H.E. Yousuf Hamad Al Shaibani

CEO, Dubai Electronic Security Center Visitors to GISEC Global 2025 are invited to explore DESC’s initiatives at Stand A80 in Hall 7, where DESC will showcase its latest projects, including future-ready cybersecurity guidelines and certification programs designed to keep pace with the evolving digital landscape and strengthen national capabilities.

MAY 2025 / CXO DX

7

» NEWS

SANS INSTITUTE BRINGS CYBERSECURITY TRAINING AND EXPERT-LED SESSIONS TO GISEC SANS GISEC Academy is a community-led initiative offering three days of free-toattend technical training sessions led by SANS Certified Instructors SANS Institute, a global leader in cybersecurity training and certification, is participating in GISEC Global 2025 (6-8 May 2025) at the Dubai World Trade Center.

This year, SANS Institute joins GISEC Global as a strategic partner, highlighting the company’s long-term commitment to developing cybersecurity talent in the region.

From May 6 to 8, SANS also will host the SANS GISEC Academy. Located in Hall 4, SANS GISEC Academy is a community-led initiative offering three days of freeto-attend technical training sessions led by SANS Certified Instructors. These sessions are part of SANS’ mission to upskill defenders and contribute meaningfully to the UAE’s national and regional cybersecurity posture.

Each day will focus on a key cybersecurity domain. On day 1, instructor Jean-François Maes will lead a full-day track on Offen-

sive Operations, covering topics such as malware evasion, OSINT exposure in cloud environments, and common vulnerabilities discovered over a decade of penetration testing. Day 2 shifts to Cyber Defense with Ian Reynolds, who will explore deception-based defenses, the role of AI and deepfakes in modern threat landscapes, and advanced threat hunting techniques.

Day 3 will be led by Michael Hoffman, focusing on ICS/OT cybersecurity, with insights drawn from real-world incidents such as the Colonial Pipeline and Ukraine grid attacks.

"In the Middle East and beyond, digital infrastructure is under increasing pressure from AI-powered threats that are more deceptive, adaptive, and persistent,” said Ned Baltagi, Managing Director for the Middle East, Turkey, and Africa, SANS Institute. “From deepfake-enabled fraud to intelligent ransomware strains that evade detection, cybersecurity teams must shift

Ned Baltagi

Managing Director META, SANS Institute

from reactive defense to intelligence-driven prevention. At SANS, we’re focused on equipping professionals with the practical skills and threat context they need to defend against this next wave of AI-fueled attacks. Cybersecurity is not just a professional responsibility, but a shared priority for national safety and resilience."

Attendees can visit the SANS team at Stand D75, Hall 7.

AMIVIZ AND PHISHROD JOIN FORCES TO STRENGTHEN HUMAN RISK MANAGEMENT ACROSS THE MIDDLE EAST PhishRod is a global leader in human risk management and offers an integrated solution to address human risk by identifying vulnerable end-user behavior vulnerable end-user behavior, automating security awareness & phishing incident response, and ensuring policy compliance to build cyber resilience.

AmiViz, a leading cybersecurity-focused value-added distributor announced a strategic distribution agreement with PhishRod, a global leader in human risk management.

This partnership will see AmiViz represent PhishRod’s full suite of products and services across the Middle East and North Africa (MENA) region.

PhishRod, is a global leader in human risk management and offers an integrated solution to address human risk by identifying

8

CXO DX / MAY 2025

With the increasing sophistication of phishing attacks and social engineering tactics, the need to bolster the human layer of cybersecurity has become more urgent than ever.

The AmiViz–PhishRod partnership comes at a critical time when organizations across MENA are actively seeking robust cybersecurity awareness tools that go beyond traditional training programs.

Ilyas Mohammed, Amiviz's Chief Operating Officer, stated, “We are excited to onboard PhishRod to our growing portfolio of cybersecurity solutions. Their platform addresses a major pain point for CISOs

and security teams—how to transform employees from potential vulnerabilities into strong lines of defence. PhishRod’s focus on localised content, behaviour analytics, and compliance automation makes it a great fit for the regional market.”

PhishRod platform is multilingual, highly customisable, and designed to align with global and regional compliance standards, including NESA, SAMA, GDPR, and more. PhishRod’s analytics engine also enables security teams to identify vulnerable users, track progress, and tailor awareness Ilyas Mohammed content for maximum impact.

COO, AmiViz

Syed Abid Ali, Co-Founder & CCO of PhishRod, said, “This strategic partnership with AmiViz marks a significant step forward in our growth journey. As a leading cybersecurity distributor in the Middle East and North Africa, AmiViz brings deep market understanding and an extensive reach.

Together, we will amplify our mission to ‘Address the Human Risk’ and support organisations in building stronger cyber resilience"

NEW!

» NEWS Easy Setup

4G LTE N300 Wi-Fi Router G403C

Uncompromised Performance Fast, Reliable, and Secure Connectivity The G403C is an ideal solution for areas with or without wired Internet, including homes, businesses, events, cottages, and RVs. It offers reliable 4G LTE/3G connectivity with speeds up to 150 Mbps downlink and 50 Mbps uplink.

Wi-Fi Speed up to 300 Mbps

Boosted by 5dBi Antennas

Enhanced Security

Provide enough bandwidth with Wi-Fi speeds up to 300 Mbps for smooth Internet browsing, email, and social media use.

Equipped with 5dBi external antennas to enhance cellular LTE and Wi-Fi signals, ensuring better coverage and performance.

Keep your network secure with guest Wi-Fi, WPA3 encryption, and security certifications including EN18031 and IEC 1-4-62443.

Seamless Connectivity Anywhere: Ideal for Residential, Pop-up Stores, and Events

Residential Internet

Pop-up Store

Event

MAY 2025 / CXO DX

9

» NEWS

NOZOMI NETWORKS TO SPOTLIGHT CYBERSECURITY FOR CRITICAL INFRASTRUCTURE The showcase will include the latest additions to its platform including Nozomi Arc, which extends visibility to endpoints Nozomi Networks, a leader in OT and IoT security, will be present at GISEC Global 2025 (6-8 May) at the Dubai World Trade Center. The company will showcase its full suite of OT, IoT, and ICS cybersecurity solutions, demonstrating how its platform helps security teams gain unified visibility, detect and respond to threats in real-time, and simplify compliance across converged IT, OT, and IoT environments.

Nozomi Networks will spotlight the latest additions to its platform including Nozomi Arc, which extends visibility to endpoints, closing security blind spots in industrial environments; Guardian Air, that delivers RF-level visibility to detect wireless threats and rogue devices; and Vantage IQ which leverages machine learning to accelerate threat detection and incident triage.

Backed by its partner-first philosophy, Nozomi Networks will also be exhibiting alongside its key regional partner HelpAG. Together, they will highlight integrated

solutions tailored for Middle East enterprises, as well as real-world deployments and customer success stories across energy, government, utilities, and manufacturing sectors.

“Critical infrastructure in the Middle East is under growing threat as digitalization connects once-isolated systems, exposing them to more aggressive cyberattacks,” said Bachir Moussa, AVP EMEA, Nozomi Networks. “At GISEC, we’re showcasing how our AI-driven platform delivers unified visibility and real-time threat detection across physical, virtual and wireless environments – supported by strong local expertise through partners like HelpAG.” Including Bachir, Nozomi Networks will be represented by several global and regional executives – Marcus Josefsson (VP EMEA), Wagdy Magdy (RSD Egypt), and Alexander Foroozande (Channel Director).

GISEC 2025 also marks the debut of Luis Ferreira, recently appointed as Regional

Bachir Moussa

AVP EMEA, Nozomi Networks Sales Director for the Middle East at Nozomi Networks.

The team will be joined by technical specialists and engineers offering one-onone briefings and in-depth product walkthroughs at Hall 2 F62.

OMNIX AND HYPERFUSION PARTNER TO DELIVER NEXT-GEN AI AND HPC SOLUTIONS nizations in accelerating the deployment

This collaboration aims to accelerate the development and deployment of advanced AI, cloud, and data analytics solutions across high-growth markets

by Hyperfusion’s locally available state-ofthe-art Graphics Processing Unit (GPU) infrastructure across the UAE, and the wider MENA and South Asia markets.

Omnix, a leader in digital transformation and innovative technology solutions, announced that it has signed a partnership agreement with Hyperfusion, a leading provider of high-performance computing and AI solutions. Together, they will provide advanced AI-driven solutions, high-performance computing capabilities, and scalable cloud technologies powered

10

CXO DX / MAY 2025

With shared strategic goals, Omnix aims to broaden its portfolio of next-generation solutions, while Hyperfusion will work towards solidifying and expanding its presence in high-growth regional markets.

Together, the companies will provide organizations with tools and platforms needed to harness the full potential of artificial intelligence and high-performance computing, backed by locally based resources for better speed, security, and compliance.

Walid Gomaa, CEO of Omnix said, “We are happy to partner with Hyperfusion, a leading high performance computing provider with state-of-the-art technology solutions catering to organizations in a rapidly evolving world of AI computing. With this MoU, Omnix will be able to support orga-

of AI projects by providing a robust GPU infrastructure, enabling them to optimize costs and maximize their return on investment (ROI).”

Quentin Reyes, CEO of Hyperfusion, said, “This new partnership will help us strengthen our Middle Eastern expansion goals with the strong expertise that Omnix has in the region. We look forward to working together to address the growing demand for high performance computing and helping businesses accelerate their digital transformation.”

The MoU is focused on developing scalable AI-powered tools in data-intensive industries such as healthcare, finance, telecommunications, and government.

They will also co-develop AI solutions and cloud-based platforms that will help organizations accelerate digital transformation. Key areas of focus include machine learning model development, real-time data analytics, and advanced computing environments tailored to regional and sector-specific needs.

» NEWS

CPX RETURNS TO GISEC GLOBAL FOR THIRD CONSECUTIVE YEAR To spotlight UAE cyber leadership and international growth CPX Holding, a leading provider of cutting-edge cyber and physical security solutions and services, will participate at GISEC Global 2025 for the third consecutive year, marking its biggest presence yet at the region’s leading cybersecurity event.

Taking place from 6–8 May 2025 at the Dubai World Trade Centre, GISEC Global brings together global cybersecurity stakeholders to address the evolving threat landscape and unlock new opportunities for resilience and innovation.

“GISEC has become a key global platform for shaping the future of cybersecurity,” said Hadi Anwar, CEO of CPX. “For CPX this year, it will be a key moment that demonstrates the strength of our partnerships, the depth of our expertise, and our growing role in safeguarding digital ecosystems in the UAE and beyond.

During GISEC, we will also be announc-

ing several key milestones that reflect our ongoing commitment to building a secure, inclusive, and AI-empowered digital future. We’re proud to return for the third year in a row—not just to showcase innovation, but to drive meaningful conversations around security, readiness, and collaboration.”

The theme of this year’s participation is Experience the Power of Cyber Innovation, to empower organizations with cutting-edge, end-to-end cybersecurity solutions that are tailored to confront today’s most advanced threats. CPX will exhibit at booth A30 (between Halls 7 and 8), hosting a lineup of international technology partners and showcasing its comprehensive portfolio of cybersecurity solutions designed to protect digital environments across the public and private sectors. This year’s participation comes as CPX accelerates its international expansion, reinforcing its role as a trusted

Hadi Anwar CEO, CPX

national champion with a growing global impact.

The CPX booth will feature confirmed partner pods from: Palo Alto, Rilian Technologies, Corelight, Fortinet, Thales, Goteleport, Mindflow, Splunk, and Cribl.

Visitors can explore the CPX booth to learn more about its cybersecurity offerings, experience partner technologies, and hear from experts shaping the future of secure digital transformation.

OPSWAT ANNOUNCES GISEC 2025 PARTICIPATION Amid the ongoing merger of IT and OT, the critical infrastructure protection specialist pledges new approaches and demos of the latest protection techniques at upcoming event world will be able to learn from thought leaders at OPSWAT, while the company aims to forge strategic alliances that drive mutual growth and success in addressing cybersecurity challenges.

OPSWAT, a global leader in Critical Infrastructure Protection (CIP) cybersecurity solutions, announced its participation as a Diamond Sponsor at MEA’s leading security event, GISEC Global 2025.

“Our main focus at GISEC Global 2025 will be critical infrastructure, the lynchpin of economic progress and an increasingly popular target for threat actors,” said Sertan Selcuk, Vice President for METAP and CIS, OPSWAT. “Our partnerships will involve devising ways of protecting the interconnected systems and technologies that drive the Fourth Industrial Revolution. Through our demonstrations and discussions at GISEC 2025, OPSWAT experts will show how our solutions directly address the latest cybersecurity challenges, especially the ongoing merger of IT and OT.”

Industry professionals from around the

CISO and industry visitors of GISEC can

Sertan Selcuk

VP of METAP CIS, OPSWAT

visit OPSWAT’s CIP Mobile Lab, where OP/X Labs will provide live demos of industry-leading solutions that secure critical infrastructure, while OPSWAT experts offer practical insights into safeguarding organizations’ most vital systems and networks.

Alongside the Mobile Lab will be OPSWAT’s Nuclear Plant Model Reactor, a display that underscores the company’s prowess in securing sensitive environments like nuclear power plants. Part of the demonstration will be the showcasing of the interconnectivity of the mobile lab with the nuclear plant model.

OPSWAT subject matter experts will also participate in speaking engagements and seminars at GISEC Global 2025. On day one, on the Dark Stage, OPSWAT will run a live hacking session to highlight the dangers that prowl today’s threat landscape.

MAY 2025 / CXO DX

11

» FEATURE

REIMAGINING CYBERSECURITY As AI reshapes the cyber battlefield, security leaders across industries are rethinking how they detect, respond to, and stay ahead of threats.

A

s artificial intelligence reshapes the cybersecurity landscape, security leaders across sectors are reimagining cybersecurity approaches to detect threats, respond to incidents, and balance innovation with compliance. AI is rapidly becoming the cornerstone of the next generation of cybersecurity—enabling faster threat detection, smarter response, and deeper visibility across diverse environments.

The AI-Driven SOC Cybersecurity has entered a transformative era. The rise of generative AI, machine learning, and automation is revolutionizing traditional security operations centers (SOCs), forcing security teams to rethink how they approach threat detection and response.

“AI is revolutionizing cybersecurity by enabling faster, more accurate threat detection and response,” says Nisha Rani, CISO at Emirates Leisure Retail. “Security teams are increasingly adopting machine learning models to analyze vast amounts of data in real time—identifying anomalies, flagging unusual behavior, and even automating remediation steps.”

AI tools are helping SOCs evolve from reactive hubs into intelligent, proactive command centers. “AI-powered tools are helping to reduce alert fatigue by prioritizing real threats and eliminating false positives,” Nisha adds. “While AI doesn't replace human expertise, it's certainly improving visibility and accelerating response times—especially when integrated with SIEM and SOAR platforms.”

12

CXO DX / MAY 2025

Faisal Khan, Acting Associate Director of Information Security & Compliance at DWTC, echoes this, saying, “AI is no longer a buzzword. In threat detection, it is helping us move from reactive to predictive, improving response times and threat visibility.”

At DWTC’s CyberSOC, machine learning and behavioral analytics are at the core. “We're seeing widespread use of UEBA (User and Entity Behavior Analytics), where AI helps correlate signals across identity, access, and endpoint layers to surface threats like lateral movement and privilege abuse,” Faisal explains.

In healthcare, the impact is similarly significant. “AI is completely changing the game,” says Abhinav Kumar, AVP – Information Security at NMC Group Services. “It enables improved incident response by providing more intelligence on attacker patterns and increases overall security operations efficiency.”

He highlights AI’s role in identifying insider threats. “A significant trend involves using AI-powered tools to identify user and device behaviour anomalies. This allows administrators to identify insider threats and inadvertently compromised accounts before they can cause further damage.”

The Rise of AI-Enabled Cybercriminals Even as defenders have enhanced their tools with AI to tackle cybercrime, so have adversaries. Cybercriminals are aggressively leveraging AI and coming up with more sophisticated attack methods to create and breach vulnerabilities.

» FEATURE

Nisha Rani

CISO, Emirates Leisure Retail

“Cybercriminals are using AI just as aggressively as defenders,” says Nisha. “We’re seeing a rise in deepfake videos and voice clones used for social engineering, along with AI-generated phishing emails that are contextually sophisticated and harder to detect.”

Ransomware is also evolving as well with AI “Ransomware variants are using AI to adapt and evade defenses in real time,” she adds. “To counter these threats, organizations are investing in behavior-based detection, digital watermarking for content authenticity, and advanced email filters. There’s also a growing focus on employee awareness and training to recognize AI-generated deception.”

Abhinav agrees that AI adds a dangerous new layer to common threats. “Health-specific UEBA solutions equipped with machine learning models help improve patient data risk assessment capabilities across huge data volumes,” he says. “But AI-generated threats, if undetected, can bypass legacy systems and exploit human error.”

Zero Trust: The Cornerstone of Modern Security To counter sophisticated threats, many organizations are embedding the Zero Trust Model in their security strategy, wherein there is no default trust and access is granted only after continuous verification of identity, device posture, and contextual risk—ensuring that every request is authenticated, authorized, and encrypted, regardless of where it originates.

“Zero Trust is no longer just a buzzword—it’s becoming a foun-

Faisal Khan

Acting Associate Director of Information Security & Compliance, DWTC

dational strategy for modern cybersecurity,” says Nisha. “The adoption is accelerating as organizations move to hybrid work environments and cloud-based systems.”

However, adopting Zero Trust isn’t without its hurdles. Nisha says, “Many believe Zero Trust is a single product or a quick fix, when in reality, it’s a mindset and a long-term journey,” she explains. “Common challenges include lack of visibility into assets, identity sprawl, and legacy systems that aren’t built for granular access controls.”

Faisal reinforces this, noting that Zero Trust is often misunderstood. He says, “Often perceived as an out-of-the-box product, it’s more of a mindset shift—and it’s not an easy journey for organizations, especially with legacy-based systems in place.”

Faisal adds that incremental progress is key when it comes to adopting Zero Trust. “There is always a starting point. Organizations can pilot with specific use cases like multifactor authentication, privileged access, or third-party vendors, and scale iteratively. In short, Zero Trust is a journey, not a destination.”

In healthcare, Abhinav sees Zero Trust as non-negotiable. “Continuous verification of each request for access and robust identity and access management ensure that only authorized individuals can enter sensitive systems,” he explains. “The SASE framework helps enforce consistent security practices across distributed sites and remote users.”

Securing a Distributed, Multi-Cloud World With the collapse of traditional perimeters, cybersecurity must now encompass clouds, endpoints, and remote environments— MAY 2025 / CXO DX

13

» FEATURE Embedding security and privacy by design is now a strategic imperative. “Compliance can’t be an afterthought,” she says. “It has to be a core component of development and operations.”

Faisal adds, “Data privacy regulations are no longer a checkbox exercise—they’re a core driver of cybersecurity strategy.”

This shift is reshaping internal structures. “Security controls now have to align with privacy-by-design principles, enforce data residency, and provide auditable proof of consent and breach notification,” he says.

Abhinav highlights the pressure this puts on healthcare providers.

He says, “Any tiny error could significantly impact your business plan or customers' welfare. Balancing cutting-edge technologies like AI and IoMT with stringent regulatory requirements is challenging.”

Abhinav Kumar

AVP – Information Security, NMC Group Services

However, he remains optimistic. “UAE healthcare organizations are investing in comprehensive frameworks and specialist tools to guarantee patient privacy and nurture trust, ” he adds.

Empowering Analysts with AI Despite the advances, it still holds true that technology is only as powerful as the people behind it. especially in industries like healthcare, where edge and IoMT (Internet of Medical Things) devices introduce new vulnerabilities.

“As more enterprises embark on the cloud journey, the security perimeter has effectively diminished,” says Faisal. “Technologies like SSE (Security Service Edge), CASB, and CSPM are becoming standard. They help with misconfiguration detection and continuous compliance.”

“ZTNA (Zero Trust Network Access) is replacing legacy VPNs with context-aware, least-privilege access,” he adds. “Data-centric controls like encryption, tokenization, and DLP are now embedded at every layer.”

In the healthcare sector, Abhinav emphasizes the same. He adds, “Endpoint Detection and Response (EDR) combined with micro-segmentation helps avoid lateral movement between clinical systems, IoMT devices, and administrative networks.”

Centralized visibility is critical in healthcare. “SIEM and CSPM tools designed specifically for healthcare offer real-time insights and ensure compliance with ADHICS, local regulations, and GDPR,” he adds.

Privacy-Driven Cybersecurity With regulations like GDPR, HIPAA, and the UAE’s PDPL, cybersecurity is no longer just about protecting data but also about maintaining high standards in data privacy and protection.

“Data privacy regulations like GDPR, CCPA, and DIFC Privacy Law are pushing organizations to rethink how they handle, store, and secure data,” says Nisha. “Many organizations struggle to keep up with changing requirements while trying to innovate.”

14

CXO DX / NOVEMBER 2024

“We need to understand this clearly,” says Faisal. “AI is only effective as the data pipeline feeding it. Poor data hygiene or siloed logs can cause noisy outputs. So architecture matters—integrating telemetry across endpoints, identity providers, and cloud platforms is critical.”

“AI doesn’t replace expertise,” he adds. “It augments skilled analysts and reduces fatigue, helping us move faster and smarter, not just louder.”

Nisha believes empowering analysts is crucial. “The shift to proactive security demands effort, manual data analysis, and skilled analysts who understand both tools and attacker tactics,” she says.

Abhinav adds that analysts need to stay ahead of threats creatively. He says, “AI helps with noise reduction and fast response, but human intuition, particularly in highly regulated sectors like healthcare, remains irreplaceable.”

AI has a predominant role today in the battle between cybercriminals and the defenders, with both racing to outpace each other across borderless networks and ever-expanding data landscapes.

As Faisal says, “The goal is no longer to secure a static perimeter.

It’s to secure identity, data, and workloads dynamically, wherever they live.”

Organizations need to strike a clear balance—using automation smartly while backing it up with skilled people, a new way of thinking, and built-in compliance from the start.

As Nisha adds, “Cybersecurity isn’t about waiting for alarms— it’s about anticipating fires before they spark. AI is helping us get there.”

» INTERVIEW

SPOTLIGHT ON CYBERSECURITY

Mounir Sarkis, General Manager of Logicom UAE & Gulf discusses Logicom’s growing cybersecurity focus and their participation at GISEC 2025 Discuss how GISEC has been an important platform for Logicom to showcase the cybersecurity focus of your portfolio to partners and other visitors?

GISEC 2025 marks Logicom’s debut at the region’s largest cybersecurity event, and we see it as a strategic milestone in amplifying our cybersecurity footprint and focus across the UAE and Gulf region. While this is our first year participating, the scale and caliber of GISEC—bringing together over 25,000 attendees, 750 cybersecurity brands, and technology leaders from 160+ countries—making it the ideal platform to connect with key enterprise and government decision-makers.

Our participation allows us to spotlight Logicom’s growing cybersecurity portfolio and ecosystem, which includes over 10 leading security vendors, a network of hundreds of partners, and a suite of 25+ technical services tailored for the channel.

What are the major cybersecurity focus areas in your portfolio and what have been some of the recent additions in terms of partnerships?

At Logicom, our cybersecurity portfolio is built around delivering end-to-end solutions that address the most critical security needs across today’s digital landscape. Our key focus areas include advanced threat protection, endpoint and network security, secure access, data loss prevention, and cloud security—ensuring our partners are equipped to protect every layer of their customer’s IT infrastructure.

A significant recent addition to our portfolio is Sophos, a globally recognized leader in next-generation cybersecurity. In addition to Sophos, we continue to work closely with our key strategic vendors—including Cisco, Microsoft, and others—who are actively expanding their cybersecurity capabilities. With a portfolio that includes over 10 leading security vendors, Logicom remains committed to enhancing its cybersecurity ecosystem through strong vendor alliances, technical enablement, and partner-centric services—supporting secure digital transformation across the region.

How are your partners enhancing their capabilities to address the changing cybersecurity demands of your customers? How are you enabling them?

Our partners are actively evolving to meet the growing complexity and sophistication of today’s cybersecurity landscape. They are investing in technical certifications, broadening their solution portfolios, and adopting a more consultative approach tailored to industry-specific needs.

At Logicom, we play a pivotal role in this transformation through a robust partner enablement framework. This includes hands-on training focused on building skillsets and technical competencies, pre-sales support, and in-depth technical workshops. We also drive joint go-to-market initiatives and provide access to our regional technical services team, offering end-to-end implementation, consultancy, and support across a diverse range of cybersecurity solutions.

Mounir Sarkis General Manager UAE & Gulf, Logicom

In addition, we allocate a significant portion of our investments towards security-centric initiatives—from partner-led webinars and customer-facing events to targeted digital campaigns—ensuring our partners are not only technically capable, but also commercially empowered to create demand and close opportunities.

Discuss your solutions for cloud security?

Cloud security is a core pillar of Logicom’s cybersecurity strategy. We are committed to supporting our partners and customers in successfully developing and executing their ever evolving digital transformation journeys. Our portfolio spans a wide range of solutions designed to protect data, applications, and workloads across hybrid, public, and private cloud environments.

Logicom’s cloud security expertise is underpinned by top-tier certifications, including the Microsoft Security Solution Designation and Microsoft Specialization for Cloud Security.

We work closely with leading cloud security vendors such as Microsoft, Oracle, Acronis, and others to build and deliver comprehensive capabilities. These include Cloud Access Security Brokers (CASB), Cloud Workload Protection Platforms (CWPP), Extended Detection and Response (XDR), Secure Web Gateways, Identity and Access Management (IAM), and compliance monitoring— providing visibility, control, and protection across complex multicloud infrastructures.

A key enabler of our cloud security strategy is the Logicom Cloud Marketplace—a unified platform where partners can discover, provision, and manage a wide portfolio of cloud software and licenses.

MAY 2025 / CXO DX

15

» FEATURE

CYBERHUB IN FOCUS With its 24x7 Cyberhub and a comprehensive suite of intelligent security solutions, Finesse is positioning itself as a strategic partner for enterprises seeking resilience, compliance, and future-ready protection.

Pradeep Krishnan Nair

Eljo J.P

VP of IT Security, Finesse

Director & Chief Business Officer, Finesse Global

A

s organizations across industries undergo rapid digital transformation, cybersecurity has evolved into a board-level priority. Finesse, a leading digital transformation and system integration provider, is set to highlight its full suite of AI-powered cybersecurity capabilities under its division, Cyberhub 24x7.

Cyberhub 24x7 is the cybersecurity backbone of Finesse, offering comprehensive, round-the-clock protection against the modern cyber threat landscape. With state-of-the-art Cognitive Security Operations Centers (CSOC) in Dubai and Bangalore, the company ensures 24/7 monitoring, real-time threat detection, and rapid incident response.

"Cybersecurity today is no longer an IT afterthought. It is an essential pillar of business continuity and resilience. At Finesse, we’ve embedded AI into the very core of our security offerings to stay ahead of increasingly sophisticated threats," says Eljo J.P, Director & Chief Business Officer at Finesse Global‫‏‬ This strategic focus on AI-first security operations has been woven into Finesse's broader digital transformation approach which focuses on three pivots of advising, enabling, and securing.

While the 1CXO advisory and digital enablement arms focus on business outcomes, Cyberhub ensures all innovations are protected from inception to execution.

Cognitive SOC in action

Finesse’s CSOC leverages advanced analytics and machine learning algorithms to monitor every layer of a client’s digital ecosystem—from endpoints to networks to cloud environments. These systems detect subtle anomalies and anticipate risks, triggering

16

CXO DX / MAY 2025

automated incident response processes that resolve threats in minutes, not hours.

"Our Cognitive SOC can handle real-time decision-making with minimal human intervention. We continuously refine the intelligence of our systems so that every incident teaches the platform to react faster and smarter," says Pradeep Krishnan Nair, VP of IT Security at Finesse.

This capability includes customized threat modeling tailored to specific geographies and industry sectors. AI-driven threat intelligence allows businesses to neutralize threats before they cause damage, offering unparalleled operational continuity.

Guarding the Generative AI Frontier

Finesse also addresses the emerging security risks associated with generative AI technologies. The company has developed a comprehensive Gen AI Governance Framework to ensure responsible use of generative AI while remaining compliant with global regulatory mandates.

A key innovation in this space is the Gen AI Broker/LLM Gateway—a secure intermediary layer between enterprise systems and AI platforms. This layer implements advanced content filtering, guards against prompt injection attacks, and ensures data sanitization in real time.

"Generative AI is a powerful tool, but without the right safeguards, it becomes a significant risk vector. Our governance framework and Gen AI Gateway create a secure, auditable and intelligent interaction model for our clients," Pradeep elaborates.

» FEATURE and digital identity. These systems actively scan surface, deep, and dark web environments to identify impersonation attempts and compromised credentials.

On the data privacy front, their AI-powered Data Vault and Data Leakage Protection systems identify exfiltration attempts and ensure secure access controls are in place.

AI driven Zero Trust

Finesse has modernized traditional Zero Trust architecture by layering AI-driven behavioral analytics and dynamic microsegmentation. This is further enhanced with intelligent PIM/PAM systems that adapt authentication flows based on contextual risk.

The system maintains full audit trails of AI interactions and model engagement, reinforcing transparency, security, and accountability.

Cloud and Identity Protection—Reimagined with AI

Finesse’s AI-enhanced cloud security ecosystem includes CASB, CSPM, and CNAPP modules that work in tandem to monitor cloud usage, automate vulnerability response, and maintain continuous compliance.

"We’ve redefined cloud security by using AI to sift through noise, prioritize alerts, and ensure IT teams focus on what truly matters.

That level of efficiency is the difference between a breach and a block," says Eljo.

Finesse’s AI-driven solutions also extend into brand protection

Cyberhub at a Glance Finesse's Cyberhub offers a suite of AI-powered cybersecurity solutions designed for modern threat landscapes. Our comprehensive suite integrates cutting-edge artificial intelligence to provide unparalleled protection for enterprises facing increasingly sophisticated cyber threats.

Core AI-Driven Operations • Cognitive Security Operations Center (CSOC): Our 24/7 operations centers in Dubai and Bangalore leverage advanced AI analytics and machine learning algorithms to continuously monitor your digital ecosystem—from endpoints to networks and cloud environments. This AI-driven approach enables real-time anomaly detection, identification of unusual activity patterns, and proactive threat neutralization before damage occurs.

• Automated Incident Response: Our AI systems automate critical security workflows, reducing response times from hours to minutes. The system continuously learns from each incident, improving future response capabilities and ensuring business continuity during threats.

Specialized AI Security Generative AI Security: Finesse provides a Gen AI Governance Framework to ensure responsible implementation and compliance. Our Gen AI Broker/LLM Gateway acts as a secure inter-

"We’re not just implementing Zero Trust—we’re evolving it," says Pradeep. "With AI, identity management becomes predictive and proactive, reducing reliance on static rules."

Gearing up for GISEC 2025

Finesse plans to spotlight these innovations at GISEC through immersive, hands-on demos. Attendees can experience the CSOC in action, witness the speed of AI-automated incident response, explore the Gen AI Gateway, and understand how Zero Trust principles are being revolutionized.

"GISEC is the perfect stage to showcase how AI transforms cybersecurity from reactive to proactive," Eljo states. "We want to demonstrate that organizations can innovate confidently when they have intelligent systems standing guard."

mediary between users and AI systems, delivering content filtering, protection against prompt injection, and automatic data sanitization.

• AI-Enhanced Zero Trust: We elevate Zero Trust architecture with AI-powered micro segmentation algorithms and behavioral analytics for Privileged Identity & Access Management (PIM/PAM). Security protocols adapt dynamically based on user behavior and risk.

Cloud, Identity & Data Protection • AI-Enhanced Cloud Security: Our multi-layered protection integrates CASB, CSPM, and CNAPP solutions powered by AI to monitor cloud usage, identify misconfigurations, orchestrate responses, and ensure compliance.

• AI-Powered Digital Identity & Brand Protection: Our AI systems monitor the internet, including dark and deep web environments, to detect brand misuse, impersonation, and compromised credentials.

• AI-Driven Data Protection & Privacy: We provide AI-powered Data Vault, Data Masking, and DLP systems that analyze data patterns to prevent exfiltration and unauthorized access.

Assessment Services

• AI/Cybersecurity Assessment: Finesse offers comprehensive evaluations of your AI and cybersecurity landscape, identifying vulnerabilities and providing strategic, tailored recommendations.

MAY 2025 / CXO DX

17

» COVER FEATURE

REDEFINING EXPOSURE MANAGEMENT

Tenable is rewriting the rules of vulnerability management with the shift towards a smarter, context-aware approach called exposure management

A

s cybersecurity continues to evolve into a board-level priority, the nature of enterprise defense strategies is undergoing a fundamental shift. In an era dominated by cloud-first architectures, remote workforces, and interconnected systems across IT and OT environments, traditional vulnerability management practices are proving insufficient. Tenable, a cybersecurity leader, is focused on redefining the approach to exposure management that can address the challenges in an AI-driven technology landscape.

Addressing Vulnerability Management for Modern Risks The digital attack surface has exponentially expanded with increased cloud adoption, more edge technologies being adopted, and the increasing IT-OT convergence. To address the changing nature of the threats, Tenable is leading the shift from traditional vulnerability scanning to a smarter, context-aware approach called exposure management.

Maher Jadallah, Vice President for the Middle East and North Africa at Tenable says, “The shift towards context-driven vulnerability management is not just about improving cybersecurity; it's about aligning security efforts with business priorities to reduce the organisation's overall risk.“

18

CXO DX / APRIL MAY 2025 2025

Maher Jadallah

Vice President for the Middle East and North Africa, Tenable

» COVER FEATURE

Contextual information plays a crucial role as only by understanding the connection between a vulnerability and its potential impact on sensitive data and systems, can organisations correctly prioritise where to focus efforts to address true business risks.

With thousands of vulnerabilities identified across the enterprise’s entire environment each day - across IT, OT, Cloud, IoT and everywhere in between, security teams don’t have the time and the business doesn’t have the luxury to guess which ones to focus on first.

and action across the entire attack surface, equipping modern organisations to isolate and eradicate priority cyber exposures from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. This enables them to clearly explain the effectiveness of proactive, preventive security programs in a language the business will understand. And it transcends the limitations of siloed security programs. It gives cybersecurity leaders a way to reclaim the narrative from the reactive, headline-grabbing breaches and attacks" Maher adds.

Maher adds, “An exposure management program combines the people, processes and technologies associated with exposure management. Technologies such as vulnerability management, Web application security, cloud security, identity security, attack path analysis and attack surface management are used to help an organisation understand the full breadth and depth of its exposures and take the actions needed to reduce them through remediation and incident response workflows.“

The platform empowers cybersecurity leaders to reclaim the narrative from reactive breach responses to proactive risk management.

Effective exposure management requires a unified view of the entire attack surface, allowing security teams to detect toxic risk combinations, identify attack path choke points, and prioritise weaknesses based on their true impact on the organisation. Maher points out that exposure management differs fundamentally from traditional vulnerability scanning.

He elaborates, “Organisations need solutions to help them better understand the actual, not theoretical, impact of vulnerabilities, and focus remediation efforts based on business risk. Tenable’s unified attack surface visibility and insight enables business and security leaders to answer their single most important question: “Are we exposed, and are we at risk?”

It’s a business-driven approach that resonates well with both technical teams and C-suite executives alike.

To manage the overwhelming complexity of the threat landscape, Tenable has adopted powerful AI and machine learning capabilities in its solutions. The company's Vulnerability Priority Rating (VPR) system is a prime example. "The VPR model uses machine learning to predict the likelihood of a CVE being targeted for exploitation in the next 28 days. This dynamic model runs every 24 hours, taking into account the latest threat and vulnerability data," says Maher.

Additionally, the Attack Path Summary feature uses a pre-trained large language model to deliver contextual narratives of potential attack paths, helping security teams understand not just the "what," but also the "why" behind a threat. Users can further train this system using feedback, creating a virtuous cycle of AI-enhanced detection.

These capabilities converge in Tenable One, which the company claims as the world's first AI-powered exposure management platform. "Tenable One, the world’s first AI-powered exposure management platform, radically unifies security visibility, insight

Protecting Critical Infrastructure in a Converged World As more operational technology (OT) devices connect to the internet, the convergence of IT and OT systems has dramatically expanded the threat surface. In modern industrial and critical infrastructure environments, an increasing number of operational technology (OT) devices are now connected to the outside world.

Maher says, “Long-gone are the days where air-gapping alone can keep your environment secure. Today’s converged IT/OT world creates more challenges and new risks for industrial cybersecurity. So how do you keep your ever-expanding attack surface safe?“ Tenable OT Security protects industrial networks from cyber threats, malicious insiders and human error. It provides industrial and critical infrastructure operations with the visibility, security and control needed to ensure ongoing, safe facility operation while reducing overall risk.

He adds, “Tenable OT Security delivers visibility, security, and control to industrial environments, critical infrastructure, building management systems, and more. It reduces business risk and protects organisations from attacks across today’s rapidly converging OT/IT environment. Using a patented hybrid discovery approach to safely gain visibility into OT, IT, and IoT devices and cyber-physical systems, Tenable OT Security delivers a thorough asset inventory with deep situational awareness, all within a single interface. From vulnerability management and threat detection to configuration control and reporting, Tenable OT Security enables organisations to prioritise actions and foster collaboration between their OT and IT security teams to close their exposure.“

Interoperability and Threat Intelligence Tenable integrates with SIEMs, SOAR platforms, and threat intelligence feeds to enhance vulnerability management and incident response. By leveraging integrations, customers can automate vulnerability scanning, correlate findings with threat intelligence, and streamline remediation workflows.

MAY 2025 / CXO DX

19

» COVER FEATURE Maher says, “Tenable Identity Exposure can be integrated with SIEMs to provide real-time alerts for Indicators of Exposure (IoEs) through Syslog integration, allowing for centralised logging and improved alert management. This allows security teams to correlate events from different sources, including Tenable, to identify complex threats faster.“ When a vulnerability is detected, Smart SOAR can trigger an incident response playbook, notify teams, or generate IT tickets for remediation. Tenable can also be integrated with threat intelligence platforms to compare vulnerabilities found by Tenable with threat intelligence data. This allows for the automated creation of tasks to notify users about matching vulnerabilities and the dynamic creation of watchlists in Tenable.

Helping eliminate blind spots With the rise of remote work and the increasing adoption of cloud services, organizations are struggling to track all externally exposed assets. Tenable helps organisations eliminate cybersecurity blind spots by providing comprehensive visibility into the entire attack surface to prioritize and remediate vulnerabilities.

Maher says, “The problem for most organisations is they are largely blind to the full and ever-changing scope of internet-facing assets and services. Available through Tenable One, Tenable Attack Surface Management is an external attack surface management (EASM) solution that identifies which assets and services the organisation has residing on the internet that could be accessible externally to threat actors. Once those assets and services are properly attributed to the organisation, Tenable Attack Surface Management performs a number of different actions to provide context around security posture.“

The path ahead In January Tenable announced its acquisition of Vulcan Cyber.

Vulcan Cyber, now a Tenable company, breaks down organizational cyber risk into measurable, manageable processes to help security teams go beyond their scan data and actually reduce risk.

With powerful prioritization, orchestration and mitigation capabilities, the Vulcan Cyber risk management SaaS platform provides clear solutions to help manage risk effectively.

With its integration with Tenable One means customers will gain significanly on different fronts.

Maher says, “By integrating with more than 100 security products across vulnerability assessment, endpoint security, cloud security, application security, and threat intelligence, Tenable will ingest, normalise, and unify data across the security stack. This streamlined approach centralises critical data and empowers security teams to operate more efficiently and proactively across the entire attack surface.“ This also enables AI-powered Risk Prioritisation. Siloed security products create blind spots where attackers thrive, leaving critical gaps across the attack surface.

20

CXO DX / MAY 2025

“Enhanced risk prioritisation closes these gaps by integrating enriched threat intelligence and context, helping organisations focus on the most critical vulnerabilities while optimising the use of their security tools and technology.“ Further, optimised remediation with automated campaigns, advanced tagging and ticketing ensure that security issues, along with corrective guidance, get into the hands of the right security team members to automatically fix exposures quickly, wherever they might exist in their environment.

Leveraging a single unified risk data set, Tenable is also laying the foundation for advanced exposure AI capabilities that will revolutionise how customers manage and mitigate risk across the security stack.

With the spotlight on cybersecurity innovation at GISEC this year, Tenable is set to give attendees a first-hand experience of the capabilities of Tenable One and how AI is being harnessed to provide a real-time, risk-based view of the modern attack surface.

With exposure management emerging as the next frontier in cybersecurity, Tenable is positioned to lead with its context-driven, AI-fueled approach, leading to a strategic reimagining of enterprise cybersecurity.

"Tenable’s unified attack surface visibility and insight enables business and security leaders to answer their single most important question: “Are we exposed, and are we at risk?"

» COVER FEATURE

MAY 2025 / CXO DX

21

» FEATURE

SECURING THE FUTURE

Cybersecurity leaders are focusing on AI-driven resilience, unified defenses, and critical infrastructure protection in response to an increasingly complex threat landscape

Meriam ElOuazzani

Ned Baltagi

Senior Regional Director, META, SentinelOne

Managing Director META, SANS Institute

A

s GISEC 2025 convenes global cybersecurity leaders in Dubai, the message that is likely to resonate throughout the exhibition halls is how cybersecurity has changed radically and why organizations must evolve fast or risk falling behind. With AI-powered threats surging and infrastructure perimeters disappearing, cybersecurity vendors are responding with next-generation solutions that are built for scale, speed, and complexity and to help address the new kinds of threats on the dynamic threat landscape.

From autonomous security to AI-driven threat intelligence, the spotlight this year is firmly on resilience that can be enabled not just by technology, but with strategy, skills, and cross-functional coordination. As insights from a cross-section of vendors suggest, the threats are significant, and organizations require a mix of proactive cybersecurity strategies.

AI’s Expanding Role in Cybersecurity The paradoxical nature of AI both as a threat and as a proactive tool for cyber defence remains one of the defining themes of GISEC 2025. From augmenting SOC teams to enabling autonomous threat response, AI has become indispensable—but also a weapon in the hands of cybercriminals.

Meriam ElOuazzani, Senior Regional Director, META, Sen-

22

CXO DX / MAY 2025

tinelOne says, “The rise of AI technology offers organizations a complex landscape, combining remarkable opportunities with growing challenges. AI improves operational efficiency, facilitates predictive decision-making, and revolutionizes cybersecurity. However, this same capability also heightens risks, as malicious actors are increasingly using AI to conduct quicker and more flexible attacks.”

To meet this challenge, SentinelOne is unveiling innovations like the Purple AI Athena release an agentic AI designed to mirror the deep reasoning and orchestration capabilities of top-tier SOC analysts. “Through Purple AI Athena, we’re delivering deep security reasoning at machine speed,” adds Meriam. “This enables autonomous investigations, triage, and threat response that mirror the logic of expert SOC teams.”

Echoing the importance of pairing AI with actionable insights, Luis Ferreira, Regional Sales Director, MEA at Nozomi Networks, draws attention to their intelligent platform Vantage IQ. “We ensure that alerts are not only fast but also actionable and explainable, giving security teams the insights they need to act decisively.”

At the same time, vendors acknowledge that cybercriminals are also evolving.

» FEATURE

Bernard Montel EMEA Technical Director and Security Strategist, Tenable

Sujoy Banerjee Associate Director, ManageEngine

Evgeniya Popova, Director of International Business Development at Positive Technologies, says, “Generative AI systems allow criminals to gather information, create content for attacks, generate malicious code, and search for vulnerabilities. This has automated and scaled attacks in unprecedented ways.”

maturity is widening.”

However, it’s not all bleak as AI is also enabling proactive measures.

He says, “One of the key challenges is the growing interdependence between digital and physical systems, where a breach can impact not just data, but operational continuity and public safety.”

For Evgeniya, the biggest readiness challenge lies in facing advanced persistent threats (APTs), “Protecting against professional cybercriminals using standard tools has become irrelevant. Enterprises should be ready to restructure their defense systems and adopt new approaches to cybersecurity.”

According to Abdul Rehman Tariq Butt, Regional Director - Middle East at SolarWinds, “While AI augments attacks, it’s also a powerful force in shortening response cycles. With our recent acquisition of Squadcast, we’re enhancing intelligent incident response to significantly reduce mean time to resolution (MTTR).”

As AI becomes more embedded in enterprise defenses, ethical concerns are beginning to surface. Vendors are increasingly being asked not just how they’re using AI—but how they’re governing it.

Sertan Selcuk, VP for METAP & CIS, OPSWAT, says, “The AI-powered future presents both remarkable opportunities and complex challenges. Organizations must also contend with ethical concerns, data privacy, and the technical complexities of integration.”

Cyber Readiness in the Middle East While the cybersecurity technology stack continues to evolve rapidly, regional readiness is still catching up, especially among enterprises who are migrating to cloud and digital-first operations.

Sujoy Banerjee, Associate Director at ManageEngine, highlights the challenges. He says “Many organizations still operate with outdated or fragmented IT infrastructures. This makes them easy targets for ransomware, phishing scams, and other AI-enhanced threats. The gap between technology adoption and cybersecurity

Raising similar concerns, Luis emphasizes the vulnerability created by the convergence of IT and OT systems, especially as IoT adoption expands

Meriam mentions that the region’s readiness concerns center around three areas, “ransomware resilience, cloud and supply chain security, and the speed of detection and response. Manual, siloed security operations are no longer sufficient.”

Another concern is around incident response maturity. Bernard Montel, EMEA Technical Director and Security Strategist at Tenable, says, “Historically, organizations have focused their investments in reactive security solutions, achieving a lower level of defense than necessary. It’s time to change that vision and instead move toward proactive and preventive security.”

GISEC 2025: Innovation on Display GISEC as always is likely to play launchpad for several new innovative cybersecurity solutions. One can expect new launches in different areas from AI SIEM to zero-trust orchestration, critical infrastructure protection and more.

SentinelOne is highlighting the advances in its Singularity PlatMAY 2025 / CXO DX

23

» INTERVIEW

Luis Ferreira

Sertan Selcuk

Regional Sales Director, MEA, Nozomi Networks

VP for METAP & CIS, OPSWAT

form. With the launch of Purple AI Athena and an AI SIEM for autonomous SOC operations, the company is “demonstrating the most sophisticated AI security analyst globally,” says Meriam.

ty skills to attendees regardless of experience level.”

There will also be an interactive “Mortal vs. Machine” challenge at their booth that underscores the human-AI collaboration theme.

Tenable, meanwhile, is spotlighting its Tenable One Exposure Management Platform.

As enterprises embrace digital transformation across the Middle East, threat actors are shifting focus in terms of their attack methods, from traditional data breaches to complex lateral movement across IT-OT layers, and AI-generated phishing.

Bernard says, “Exposure management takes security to the next level. To be effective, teams must have a unified view of the attack surface, allowing them to detect toxic risk combinations and prioritize weaknesses based on their real-world impact.”

According to Tenable’s Bernard, regional organizations face persistent threats from phishing, ransomware, and supply chain intrusions. “These often stem from misconfigured identities or security gaps,” he says.

ManageEngine is focusing on promoting a unified cybersecurity strategy. “We’ll showcase our upgraded PAM360 platform,” says Sujoy, “equipped with AI-powered features like intelligent least privilege access and automated risk remediation.”

OPSWAT, a Diamond Sponsor this year, is delivering a hands-on experience through OPX Labs and a nuclear plant model reactor, simulating cybersecurity challenges in highly sensitive environments.

“Our solutions use patented technologies like multi-scanning, Deep CDR, and advanced threat intelligence,” says Sertan.

SANS Institute will seek to draw attention to the critical area of training cybersecurity experts.

“We’re launching the SANS GISEC Academy—our first free, hands-on training program at the show,” says Ned Baltagi, Managing Director for the Middle East, Africa, and Turkey. “It’s about turning knowledge into action and offering practical cybersecuri-

24

CXO DX / MAY 2025

Threats on the Regional Landscape

According to SANS Institute’s Ned, “The Middle East faces a range of complex threats, from attacks on ICS/OT environments to rapidly evolving ransomware campaigns. We help organizations address these threats through real-world, skills-based training.”

For Nozomi Networks, it’s about protecting the backbone of critical infrastructure. “Attacks that move from IT to OT are becoming common,” says Luis. “And IoT devices—especially in healthcare and finance—are creating an expanded and complex threat landscape.”

In addition to technical responses, regulatory and policy considerations are becoming a strategic priority. Governments across the Middle East are stepping up national cybersecurity frameworks, often mandating standards for critical sectors. This creates both compliance challenges and new investment opportunities for solution providers.

» INTERVIEW

Abdul Rehman Tariq Butt Regional Director - Middle East, SolarWinds

Evgeniya says, “Due to the active digital transformation of enterprises and the shift toward e-government, the relevance of APT attacks will only increase. But governments in the region are now facilitating policies to maintain enterprises’ awareness and responsibility. This is a promising sign for long-term security culture.”

Building Skills in the Workforce As automation and AI reshape SOC operations, the importance of upskilling the cybersecurity workforce is greater than ever.

GISEC 2025 emphasizes that resilience is not only built through tools—but through talent.

Ned of SANS Institute explains, “Our courses are designed to build immediate capability in areas like threat intelligence, incident response, cloud security, and offensive operations. We also offer tailored programs and mentorship to support long-term workforce development.”

Industry experts agree that even the most advanced tools are only as good as the teams that operate them. There is growing demand across the region for AI-fluent cybersecurity professionals who can interpret machine-driven insights and make high-stakes decisions.

“Cybersecurity isn’t just about technology. It’s about people,” says Sujoy of ManageEngine. “That’s why we’re investing in platforms that simplify threat visibility and response for security teams at all levels of maturity.”

Toward a Unified Cybersecurity Future Amid a rapidly evolving threat landscape, the focus at GISEC is

Evgeniya Popova Director of International Business Development, Positive Technologies

loud and clear that siloed approaches to cybersecurity cannot be effective. The future is autonomous, predictive, and deeply integrated.

ManageEngine’s Sujoy says, “Our approach is rooted in cybersecurity mesh architecture. By integrating AI and ML across the platform, we unify security telemetry into one view—helping organizations detect and remediate faster.”

Nozomi Networks shares that view, positioning unified visibility across IT, OT, and IoT as critical to operational resilience.

Luis adds, “Only with end-to-end awareness can you detect and respond effectively to threats that cross digital and physical systems.”

For Positive Technologies, the path to readiness lies in restructuring. “The standard security toolkit won’t cut it anymore,” says Evgeniya . “Defenses must be designed so that attackers can’t cause intolerable damage—even if they breach the network.”

GISEC as a Catalyst As GISEC 2025 demonstrates, the lines between traditional IT security and broader organizational resilience are blurring. Today’s cybersecurity leaders must not only protect systems—they must safeguard trust, operations, and brand.

Whether it's through AI-powered detection, exposure management, unified mesh architecture, or critical infrastructure defense, the future of cybersecurity lies in agility, proactivity, and collaboration.

MAY 2025 / CXO DX

25

» INTERVIEW

CHECK AND SECURE

Ram Narayanan, Country Manager at Check Point Software Technologies, Middle East discusses the rise of multi-stage malware, the normalization of zero trust, the impact of Agentic AI, among other trends, and how Check Point Software is geared to address the challenges from a fast-evolving thread landscape What are some of the biggest cybersecurity trends you’re seeing across enterprises and governments in 2025?

In 2025, cybersecurity is being shaped by a few major shifts. One of the most significant is the widespread adoption of AI, both by defenders and attackers. Organizations are using AI to automate detection and response, while threat actors are leveraging it to craft more adaptive, evasive malware. This dual-use of AI has turned cybersecurity into a high-speed chess match, where adaptability is everything. Another key trend is the normalization of zero trust. As hybrid work continues and cloud adoption deepens, there’s a growing realization that traditional perimeter-based security doesn’t hold up. Organizations are prioritizing identity-based controls and segmenting access across networks and environments. Governments are also getting more serious about critical infrastructure protection. That’s especially true in places like the UAE, where the cybersecurity stakes are high. According to Check Point Software’s latest threat intelligence report, organizations in the country are facing an average of 1,756 attacks per week, with the retail/wholesale, finance and consultancy sectors among the hardest hit. Email remains a dominant attack vector—56% of malicious files in the UAE were delivered this way in the past month, while the rest came via the web. That’s forcing organizations to rethink their approach to email security and web access protection in parallel.

Discuss Check Point Software’s latest innovations in cloud security and threat prevention?

Cloud environments have become critical to business operations, but they’re also a prime target for cybercriminals. Check Point Software’s innovations focus on securing these environments without slowing them down. One standout is Check Point CloudGuard, which provides unified cloud security across public, private, and hybrid setups. It helps businesses prevent misconfigurations, enforce security policies, and ensure compliance.

What makes CloudGuard effective is how it integrates threat intelligence to adapt to emerging risks in real time. Another important piece is Infinity ThreatCloud AI, the engine behind much of Check Point Software’s proactive defence. It pulls insights from millions of sensors globally to detect threats before they can spread. Check Point Software has also focused on delivering consistent protection across workloads, APIs, containers, and serverless functions, key areas that are often overlooked in cloud migrations.

With the rise of agentic AI and autonomous systems, how is Check Point Software preparing to secure next-generation environments?

Agentic AI, systems that can make decisions and take actions

26

CXO DX / MAY 2025

Ram Narayanan Country Manager, Check Point Software Technologies, Middle East

on their own, brings a new set of risks. These platforms, while powerful, are vulnerable to data poisoning, logic manipulation and adversarial attacks that exploit how the AI “thinks.” Check Point Software is addressing this by embedding behavioural security into these environments. Instead of relying only on known threats, it uses anomaly detection to spot unusual activity and stop potential breaches before they escalate. Protecting the data pipelines that feed these systems is another focus. If AI models are trained on tampered data, they can produce flawed outcomes with real-world consequences. Securing data integrity is just as important as securing the code. By combining AI-powered defence with robust threat intelligence, Check Point Software aims to protect these advanced environments without slowing down innovation.

» INTERVIEW

What new types of threats or attack vectors are you most concerned about right now?

The threat landscape continues to evolve, but certain trends are especially concerning. One is the rise of multi-stage malware, including remote access trojans (RATs) and botnets. In the UAE, recent malware activity includes FakeUpdates and Androxgh0st— both of which are capable of establishing persistent access and downloading further payloads. The presence of Groooboor, a virus-type threat, also highlights the diverse range of attack strategies in play. Another major concern is the effectiveness of phishing. With 56% of malicious files being delivered via email, attackers are investing more in social engineering. Their lures are more convincing and in some cases, they’re backed by AI-generated content. A third and often underestimated threat is information disclosure vulnerabilities. These have impacted 75% of organizations in the UAE, making it the most commonly exploited vulnerability type. Attackers aren’t just crashing systems, they’re quietly stealing data that can be weaponized later.

How is Check Point Software helping customers implement effective zero-trust strategies across hybrid and multi-cloud environments?

Zero Trust has become foundational for modern cybersecurity.

Check Point Software helps customers implement Zero Trust by unifying security across users, clouds, networks, and applications through the Check Point Infinity Platform, ranked #1 by Miercom in its 2024 Zero Trust assessment. The platform enforces strict access controls, microsegmentation, and continuous validation of identities and device posture. Tools like Check Point CloudGuard and Check Point Harmony Connect secure workloads and endpoints while enabling least-privilege access and consistent policy enforcement across hybrid and multi-cloud environments. Check Point Software also leverages ThreatCloud AI for deep threat intelligence, enabling proactive detection and automated response to suspicious activity. Its Hybrid Mesh Network Security Architecture ensures scalable, resilient protection across on-prem and cloud. This unified approach simplifies Zero Trust deployment while improving visibility and operational efficiency. By embedding security into every layer—from identity to infrastructure, Check Point Software empowers organizations to adopt Zero Trust without compromising agility, performance, or user experience.

How is Check Point Software helping customers defend against increasingly sophisticated ransomware campaigns?

Ransomware attacks have become more sophisticated and targeted, often causing prolonged business disruptions. Check Point Software combats this threat with a layered approach cantered around its Anti-Ransomware solutionz, part of the Harmony Endpoint platform. Harmony Endpoint provides real-time behavioural analysis to detect and block ransomware before it encrypts data. In the event of an attack, it can automatically restore affected files, ensuring minimal impact on operations. The system automates 90% of detection, investigation, and remediation, reducing response time and pressure on IT teams. Powered by ThreatCloud AI, Harmony Endpoint leverages global threat intelligence and over 60 prevention engines to deliver industry-leading catch rates. This combination of prevention, rapid recovery,

and automation ensures organizations remain resilient against ransomware and avoid costly downtime.

Discuss Check Point Software's focus at GISEC 2025?

At GISEC 2025, Check Point Software is focused on practical, region-specific cybersecurity challenges. The UAE faces high attack volumes, a mix of sophisticated malware and pressure to secure digital transformation at scale. Check Point Software’s presence is about offering solutions that meet those challenges head-on. One area of emphasis is collaboration. Check Point Software is showcasing alliances with AWS, Radware, TechBridge, and WIZ. These partnerships allow for integrated, multi-layered security that covers everything from infrastructure to cloud-native services. The event will also spotlight ThreatCloud AI’s role in providing actionable threat intelligence. In a region where cyberattacks average over 1,700 per week per organization, being able to anticipate and neutralize threats is crucial. Check Point Software is also underlining its investment in regional support— offering localized intelligence, fast response services and upskilling through programs like SecureAcademy. The message is clear: cybersecurity resilience is not just about technology; it’s about being ready for what’s next.

"Zero Trust has become foundational for modern cybersecurity. Check Point Software helps customers implement Zero Trust by unifying security across users, clouds, networks, and applications through the Check Point Infinity Platform, ranked #1 by Miercom in its 2024 Zero Trust assessment."

MAY 2025 / CXO DX

27

» INTERVIEW

SMARTER DEFENSES FOR SMARTER THREATS Ajay Biyani (AB), Vice President – APMEA, and Sheik Abideen (SA), Regional Sales Director – MEA at Securonix, share how the company is evolving to stay ahead of an increasingly complex threat landscape—particularly as AI-powered attacks gain momentum. novation. We’re not just building on our AI foundation—we’re redefining it. With the integration of GenAI and Agentic AI technologies, we’re building an agentic mesh, creating agent-to-agent communication, enhancing both the speed and accuracy of threat detection and response, and helping organizations stay resilient in the face of evolving cyber risks.

Can you elaborate on how Securonix is using AI and machine learning for threat detection and response?

AB: Securonix has strategically integrated artificial intelligence (AI) and machine learning (ML) into its cybersecurity platform to enhance threat detection and response capabilities. Here's an overview of how these technologies are utilized: Policy Agent: Converts analyst intent into high-precision detection rules. It simulates outcomes, flags issues, and enables fast, clear content creation from natural language input.

Response Agent: Executes high-confidence response actions instantly—like user lockouts or host isolation—based on validated threats, reducing MTTR and analyst burden.

Insider Intent Agent: Detects early insider threats via psycholinguistic cues, behavioral drift, and contextual risk. Uses access patterns, HR signals, and UEBA to adaptively flag risk.

Ajay Biyani VP – APMEA, Securonix

How has Securonix evolved its platform to address the increasingly sophisticated threat landscape, especially with the rise of AI-powered attacks?

AB: Securonix has continuously evolved to meet the demands of an increasingly sophisticated threat landscape—especially as AI-powered attacks become more prevalent. From the outset, we recognized the transformative potential of AI and machine learning in cybersecurity. As early pioneers in User and Entity Behavior Analytics (UEBA), we’ve long focused on uncovering subtle, high-risk behaviors that conventional tools often overlook.

Our latest innovation, Securonix EON, marks a significant step forward. It brings together advanced behavioral analytics, contextual intelligence, and language-based intent analysis to uncover and respond to threats with unprecedented precision. These capabilities allow security teams to detect complex and previously invisible threats more effectively.

What truly distinguishes Securonix is our relentless focus on in-

28

CXO DX / MAY 2025

Noise Cancellation Agent: Reduces false positives and alert fatigue using LLMs, behavior patterns, and analyst feedback— keeping focus on real threats without losing visibility.

Spotter Agent: Acts as an autonomous threat hunter. Translates analyst queries into optimized searches across data lakes, surfaces anomalies, and refines results via feedback.

Investigate Agent: Delivers real-time context by scoring and categorizing IOCs. Enhances triage by helping other agents prioritize threats based on global indicators.

How is Securonix optimizing security monitoring for hybrid and multi-cloud environments?

SA: Securonix optimizes security monitoring for hybrid and multi-cloud environments by delivering a cloud-native SIEM that’s purpose-built to operate seamlessly across diverse infrastructures. Its platform continuously monitors and analyzes events in real time, enabling rapid detection of malicious behavior across both on-premise and cloud-based systems. With deep integrations and partnerships with major cloud providers and security vendors—including Snowflake, AWS, Microsoft, CrowdStrike, and Netskope—Securonix ensures visibility and enriched telemetry across hybrid environments. Because the platform is built in

» INTERVIEW What makes the Securonix platform “next-generation” compared to legacy SIEM tools?

AB: Securonix goes beyond legacy SIEMs with a cloud-native, AI-powered platform built for scalable, adaptive threat detection and response. It enables rapid deployment, reduced overhead, and precise threat identification using behavioral analytics, GenAI agents, and intelligent risk scoring. Features like Noise-Canceling SIEM minimize false positives, while our modular Cyber Data Fabric streamlines data handling. Threat Content-as-a-Service keeps detection content continuously up to date. Coupled with built-in SOAR capabilities, and automation-driven workflows, we empower SecOps to move faster and respond smarter in today’s complex threat landscape.

Sheik Abideen Regional Sales Director – MEA, Securonix

the cloud, it eliminates the need to download massive volumes of data for analysis; instead, it allows direct access to cloud-native data sources. This streamlined architecture, combined with advanced analytics and correlation across data sources—including those from different cloud environments—provides organizations with comprehensive, end-to-end threat detection and response capabilities.

How is Securonix optimizing security monitoring for hybrid and multi-cloud environments?

SA: Securonix optimizes security monitoring for hybrid and multi-cloud environments by delivering a cloud-native SIEM that’s purpose-built to operate seamlessly across diverse infrastructures. Its platform continuously monitors and analyzes events in real time, enabling rapid detection of malicious behavior across both on-premise and cloud-based systems. With deep integrations and partnerships with major cloud providers and security vendors—including Snowflake, AWS, Microsoft, CrowdStrike, and Netskope—Securonix ensures visibility and enriched telemetry across hybrid environments. Because the platform is built in the cloud, it eliminates the need to download massive volumes of data for analysis; instead, it allows direct access to cloud-native data sources. This streamlined architecture, combined with advanced analytics and correlation across data sources—including those from different cloud environments—provides organizations with comprehensive, end-to-end threat detection and response capabilities.

What role does cloud-native architecture play in the scalability and efficiency of your threat detection capabilities?

SA: Securonix delivers fast, scalable threat detection through a cloud-native architecture built on AWS EMR. Unlike appliance-based SIEMs that struggle with massive data volumes and costly infrastructure, we use dynamic scaling to analyze billions of events weekly, without hardware limits. This ensures real-time performance, even at peak load. One private banking customer processes over a billion events per second and 35+ terabytes daily. For them, and many others, scalability isn’t optional, it’s essential. That’s what Securonix is built for. As complexity grows, CISOs must scale security without losing speed or visibility. Securonix meets that need.

How is threat intelligence operationalized within the Securonix platform?

SA: Threat intelligence is seamlessly operationalized within the Securonix platform by integrating both open-source and premium feeds, including indicators of compromise (IOCs) and adversary tactics, techniques, and procedures (TTPs), which are continuously correlated with internal telemetry for real-time threat detection. Securonix’s Adversary Behavior Analytics (ABA) translates these threat intelligence feeds into actionable models, detecting patterns aligned with known threat actors and campaigns. The platform also includes a constantly updated library of threat models mapped to frameworks like MITRE ATT&CK, enabling rapid deployment without manual rule creation. Securonix combines external intelligence with behavioral data for context-rich, accurate detection and alert prioritization. Its SOAR capabilities automate responses—like isolating endpoints or blocking IPs, cutting response times and boosting efficiency.

How do your behaviour analytics models differentiate between real threats and false positives?

AB: Securonix employs advanced behavioral analytics models to effectively distinguish genuine threats from false positives, enhancing the precision of its threat detection capabilities. We combine isolated testing, behavioral analytics, and risk scoring to reduce false positives and alert fatigue. The Analytics Sandbox lets teams safely test detection models on real data without affecting production. Contextual behavioral analysis establishes baselines to flag meaningful anomalies, while a risk-based scoring system prioritizes high-impact threats—so analysts can focus on what matters most.

What specific measures or capabilities does Securonix offer to detect and mitigate ransomware or zero-day exploits?

SA: Securonix takes a proactive, behavior-driven approach to detecting ransomware and zero-day exploits early, often before encryption begins. By leveraging ransomware dwell times and continuously monitoring for anomalies, the platform identifies early signs of compromise. Adversary Behavior Analytics (ABA) reveals attacker tactics in real time, enabling preemptive action against threats like phishing and fraud. Backed by a dedicated Threat Research team, Securonix delivers timely detection strategies for zero-day attacks. Its advanced analytics and threat hunting go beyond signatures to expose even subtle, novel threats.

MAY 2025 / CXO DX

29

» INTERVIEW

BUILDING TRUST

Syed Yusuf, Founder & CEO, Synax Technologies, UAE, a cybersecurity solutions VAD in the region discusses the company's focus areas

in-house, they usually end up buying from multiple vendors SIEM from one, SOAR from another, TIP somewhere else, plus NTA, AI SecOps tools - it gets messy really quick. It’s not just expensive; it’s hard to integrate, manage, and skill up internal teams to handle it all. At SYNAX, we’re solving this by offering an integrated platform approach. We bring all of it together in one place - so MSSPs and enterprises don’t have to juggle tools or vendors.

Our partnership with NSFocus gives them access to ISOP, a tightly integrated AI powered SOC platform with full functionality built in. It reduces the burden on internal teams, speeds up deployment, and ensures smoother operations. So, any MSSP that wants to level up their SOC game can totally take advantage of all this - it’s all there, ready to plug in and go.

Syed Yusuf Founder & CEO, Synax Technologies Describe your focus as a cybersecurity solutions VAD in the region.

At SYNAX Tech, our identity as a cybersecurity-focused VAD is built on three unwavering values - quality, comprehensiveness, and affordability. We believe world-class cybersecurity shouldn’t be a privilege reserved for large enterprises; it should be accessible, effective, and scalable for every business, from mid-market firms to large enterprises. Our focus isn’t just on delivering products - it’s on building security ecosystems that are tailored to real-world risks and regional challenges. In markets like MEA, where threat sophistication is rising but budgets are often constrained, we bridge the gap by offering next-gen technologies with local context, backed by presales, managed services, and technical support. Our upcoming Global Delivery Centre in India will further enhance our value - delivering enterprise-grade Akar expertise at Omar scale and speed. More than a distributor, SYNAX is a cybersecurity enabler committed Regional VP,- Middle Eastto&empowering Emerging our partners and customers withPure solutions that are not only powerful, but also Africa, Storage practical and affordable. That’s the value we stand for.

What services or platforms do you provide to help MSSPs and enterprises build or augment their SOC capabilities?

Today, if a company wants to build even an average-sized SOC

30

CXO DX / MAY 2025

How are you enabling partners to shift from traditional monitoring to advanced threat detection and response (e.g., XDR, SOAR)?

That’s a great question - and honestly, helping partners shift from traditional monitoring to advanced threat detection and response is at the heart of what we’re doing at SYNAX. It’s not just about giving them tools like XDR, SOAR, or UEBA - it’s about making sure they have the right people, processes, and knowledge to really use them effectively. And that starts with our own internal teams. We’ve built a structure where sales, pre-sales, tech, and delivery teams all work in sync to support this journey.

We make sure every team member is continuously trained - with help from our vendor partners and engineers - on the latest capabilities. Whether it’s certification programs, technical deep dives, or hands-on labs, we invest in our people so that they are equipped to guide partners through that shift. And we tailor this across different regions, because maturity levels vary market to market. So, when a partner comes on board, they’re not just buying a solution - they’re getting access to a fully trained ecosystem that understands how to build real-world threat detection capabilities. Our pre-sales team helps design the right approach, our delivery team ensures smooth implementation, and our technical team provides ongoing support along with our vendors. It’s this holistic, people-led model that really makes the transition successful.

Elaborate on your plans for your GISEC participation this year and how important is the event from the point of view of connecting with customers and partners?

GISEC’s been a big platform for us - this is actually our third year, and honestly, it’s done wonders in terms of visibility and acceleration. It’s not just about the booth and the branding - it’s about meeting partners, vendors, customers and also great minds in Cybersecurity, all in one place.

» INTERVIEW

ENABLING ECOSYSTEMS

Lakshman Nalvade , CEO and co-founder at Surakshate, a Dubai-based cybersecurity and digital transformation firm delivering innovative, expert-driven IT solutions across MEA and India discusses the company’s areas of focus

emerging global cybersecurity vendors to enter MENA markets with minimal friction. We invest in their onboarding, set up technical labs, train partners, localize messaging, and co-create demand pipelines. It's not just distribution; it's partnership development—with shared risk and shared success.

What are the major focus areas in terms of solutions at Surakshate?

We are focused on high-impact domains like AI based Cybersecurity, Operational Technology (OT) security, cyber threat intelligence, Quantum Computing, AI-driven SOC solutions, and Physical and Virtual Cyber range solutions. We are offering National Visibility solutions via Border Gateway Protocol(BGP) Monitoring and other solutions. These are areas where we see both high demand and the potential for measurable impact on national and enterprise-level security postures.

Lakshman Nalvade CEO and co-founder, Surakshate Discuss the vision behind the founding of Surakshate and how has the company's mission evolved since 2021?

When I founded Surakshate in 2021, my vision was to build a cybersecurity ecosystem that empowers emerging markets—especially in the Middle East and Africa—with trusted, scalable, and intelligent security solutions. Over the years, our mission has matured from being a product enabler to becoming a strategic Incubation based value-added distributor, offering end-to-end support to global OEMs and regional partners, while actively contributing to local cyber maturity.

How does Surakshate differentiate itself in the competitive cybersecurity landscape of the MENA region?

Surakshate differentiates itself through deep localization, an Incubation based consultative approach, and our unique focus on co-building regional capability. Unlike transactional distributors, we prioritizeOmar long-term Akarvalue creation—supporting OEMs with strategic market entry,VP, hands-on and sustained partRegional Middle enablement, East & Emerging ner growth across MENA region.

Africa,the Pure Storage Elaborate on Surakshate's 'Incubation Approach' and how it fosters partnerships with global OEM vendors?

Our Incubation Approach is a structured framework that allows

What strategies does Surakshate employ to enhance regional visibility for its partners and end-users in the Middle East and Africa?

We use a hybrid approach: executive-level engagements like CISO roundtables and government forums, technical awareness through bootcamps and webinars, and presence at marquee industry events. Additionally, our in-region sales and technical teams ensure constant touchpoints and trust-building with end-users and decision-makers.

Which of Surakshate services—such as cyber range, OT security, or cybersecurity training—are currently in highest demand, and why?

OT security and cyber range training are currently in strong demand. Governments and critical infrastructure sectors are under growing pressure to secure legacy industrial systems, while Physical cyber ranges help address the acute skills gap by offering real-world, immersive training environments for professionals and students alike.

How does Surakshate tailor its solutions to address the unique cybersecurity challenges faced by organizations in the MENA region?

We start by listening—understanding regulatory requirements, geopolitical risk factors, and sector-specific needs. Our teams then work with partners to adapt global solutions into locally relevant offerings. Whether it's Arabic language support, compliance mapping for NCA or UAE's NESA, or OT threat modelling for energy sectors—we tailor at every step

MAY 2025 / CXO DX

31

» INTERVIEW

BUILDING THE GENAI-POWERED SOC

The cybersecurity landscape is changing rapidly—and traditional Security Operations Centers (SOCs) are struggling to keep up. Jishant Karunakaran, Founder and CEO of Mindfire Technologies discusses how Mindfire Technologies has launched an initiative using GenAI to empower analysts and revolutionize SOC effectiveness.

Discuss the initiative to integrate GenAI into your SOC strategy?

Traditional SOC models have grown stagnant. For over a decade, many have operated with outdated playbooks and over-relied on tools. These setups often provide a false sense of security. We saw a need to fundamentally rethink how we defend against modern threats. GenAI gave us a chance to reimagine the SOC. Under the visionary leadership of our CTO, Rejeesh Kumar, we've launched an initiative that's creating virtual analysts with near-limitless speed and effectiveness – practically 100 times faster than traditional methods. Our new platform acts as an intelligent force multiplier for threat hunting across your security platforms. It’s not about hype—it’s about speed, context, and effectiveness.

What sets your GenAI-powered SOC apart from conventional approaches?

The key difference is proactivity and intelligent prioritization.

Traditional SOCs treat all alerts equally. Whereas, this groundbreaking system meticulously analyzes logs and events, intelligently prioritizing their criticality by correlating threat intelligence and vulnerabilities across your entire attack surface. The results have been nothing short of remarkable. This platform isn't just an improvement; it's a fundamental leap forward in our ability to proactively defend against evolving threats.

That means a low-severity issue on a critical server won’t be overlooked just because the severity tag says "low." We’re aligning detection with business impact—something legacy systems can’t do well.

What shifts are required to overcome the limitations of traditional SOCs? For 15 years, many traditional Security Operations Centers have operated with outdated playbooks, leaving us dangerously exposed. We've invested in tools, hoping alerts would suffice. But what happens when tools miss threats – zero-days, living-off-theland attacks? Our analysts become blind, fostering a false sense of security. Relying solely on reactive alerts is like waiting for the fire alarm. We need proactive, intelligent approaches. The traditional model treats all alerts equally, lacking business context. A low-severity vulnerability on a critical server is different from one on a dev machine. A risk-based approach is crucial.

We must correlate vulnerabilities with asset criticality and exposure. Which high-value assets are vulnerable and exposed? What threats target us? Connecting these dots prioritizes efforts and fuels proactive threat hunting – actively searching for compromises

32

CXO DX / MAY 2025

Jishant Karunakaran Founder and CEO, Mindfire Technologies guided by risk. This shift demands effort, manual data analysis, and skilled analysts understanding both tools and attacker tactics.

You’ve mentioned virtual analysts. Can you explain how they work and what impact they’ve had?

Think of them as AI-driven threat hunters with infinite memory and speed. Our platform processes and correlates data across the entire attack surface in real time, something human analysts can’t do at scale. These virtual analysts triage threats, surface critical issues faster, and even guide human analysts with context. It’s like adding elite talent to your SOC—at scale and on demand.

The results have been phenomenal.

What are the key challenges facing traditional SOCs today— and how does your platform overcome them?

We've often over-relied on tools, hindering analytical skill development. Data overload also complicates manual correlation. Fortunately, SOAR, threat intelligence, and advanced analytics are evolving, offering automation and better insights. However, technology alone isn't enough. We need a fundamental mindset shift from reactive to proactive, risk-informed strategies. Empowering analysts to become true threat hunters is key. Adversaries are evolving. Relying on outdated approaches is like fighting a modern war with old weapons. It's time for a proactive, risk-based security operations era, driven by skilled analysts and intelligent technology – and now, augmented by the power of GenAI. That shift requires training, data, automation, and GenAI. We’re doing all of it.

» COLUMN

MAY 2025 / CXO DX

33

» COLUMN

SHADOW OF DOUBT Unsanctioned AI Is Undermining Your Organization’s Security Posture says Sascha Giese, Global Tech Evangelist, Observability, SolarWinds

other factors, not the least of which are security and compliance.

So, let’s look at the risks of shadow AI and outline a multipronged approach to turn your team's AI enthusiasm from a security risk to a productivity driver.

What Is Shadow AI? The rise of Shadow AI mirrors the rapid adoption of consumer-friendly artificial intelligence tools in the workplace. With platforms offering writing, design, coding, research, and data analysis capabilities, employees are increasingly leveraging AI without formal approval from IT teams. This trend is driven by enthusiasm for AI’s potential: the SolarWinds IT Trends Report 2024 found that 56% of surveyed IT professionals want their organizations to invest more in AI, while 46% wish adoption would happen faster. However, as AI tools proliferate outside official oversight, organizations face growing security, compliance, and data privacy risks that must be addressed.

Sascha Giese Global Tech Evangelist, Observability, SolarWinds

A

I enthusiasm among Middle Eastern consumers rides high, with most now utilizing it as part of their daily routines. So much so that in its recent study, BCG found that 83% of Saudi respondents were aware of and using ChatGPT, which grew to 91% in the neighboring UAE. This is just one popular AI service; today, even "innocent" browsers have AI features capable of recording URLs and data. All this means is that today, regional employees can sometimes be a step ahead of their organizations when embracing AI. After all, employees are primarily concerned with getting the job done, while organizations need to consider many

34

CXO DX / MAY 2025

However, taking advantage of AI tools without pre-approval from your IT department can open up a world of risk. In the first instance, employees might accidentally download malicious applications, and sensitive material may inadvertently be revealed to third parties. After all, many of these AI applications are free to use, and by now, hopefully, all of us are familiar with the adage, “If it’s free, then you’re the product.” This concern has been highlighted in the weeks following the launch of DeepSeek’s R1 model, during which governments in the US, South Korea, Australia, Italy, and Taiwan all placed restrictions on its utilization, citing concerns about how user and usage data could be handled.

The rise of shadow AI introduces significant risks beyond accidental malware downloads and data leaks. One primary concern is the potential for non-compliance with industry regulations and data protection laws. Unvetted AI applications may not adhere to necessary compliance standards, leading to unauthorized data processing and storage practices that violate legal requirements. Additionally, the lack of oversight in shadow AI usage can result in inconsistent data handling and decision-making processes, undermining the integrity of business operations and leading to unreliable outcomes.

» COLUMN

Addressing Unsanctioned AI Combating shadow AI starts with clear communication and well-defined policies. While AI tools are becoming increasingly prevalent, many employees may not fully understand the security risks posed by unsanctioned applications. Organizations should establish clear guidelines on AI use, reinforcing them through training sessions, webinars, and ongoing education.

Rather than relying solely on IT surveillance, fostering a culture of open discussion and personal accountability around AI use can be just as effective. Employees are more likely to adhere to policies when they understand the risks and feel included in the conversation rather than being monitored or restricted.

At the same time, organizations must acknowledge the factors driving employees towards unsanctioned AI. Tight deadlines, complex workflows, and rising expectations mean workers naturally seek tools to enhance productivity and efficiency. If the enterprise fails to provide approved AI solutions, employees may turn to external tools out of necessity, potentially exposing the business to security threats. A balanced approach is essential — one that involves assessing employees’ needs, identifying AI solutions that align with security and compliance requirements and integrating them into the approved technology stack.

By offering safe, sanctioned alternatives, businesses can mitigate shadow AI risks while maintaining a competitive, innovation-friendly workplace.

Four Principles for Effective AI Integration Thinking about bringing AI into your organization? It’s a game-changer, but only if done safely and responsibly. That’s where an AI by Design approach comes in. Developed by SolarWinds, it’s a framework for building AI systems designed to be secure, fair, transparent, and easy to use from the start, rather than trying to fix problems after the fact.

A strong Privacy and Security foundation is key. That means going beyond basic protections to implement advanced access controls and smart anonymization techniques, helping ensure user data stays protected at every stage. Then there’s Accountability and Fairness — AI should work for everyone, not just a select few. Human oversight and continuous feedback loops help prevent systems from reinforcing biases and ensure they evolve in the right direction.

Transparency is another must-have. With AI making more decisions that impact real people, Transparency and Trust principles help set clear safeguards and guidelines so AI-generated outputs are not just accurate but also practical and relevant. And let’s not forget Simplicity and Accessibility — because no matter

how powerful an AI system is, it’s only as useful as it is understandable. The goal is to turn complex tech into intuitive, user-friendly tools that anyone can operate.

By embedding these principles from the start, organizations can harness AI’s potential without compromising on ethics, security, or usability.

Out of the Shadows While going against company policy is unacceptable, a worker’s desire to gain help from cutting-edge technology is undoubtedly understandable. By encouraging a culture of conversation, warning of the dangers of shadow AI, and implementing processes by which the right tools can be made available through official channels, organizations can turn security anxieties on their head to reap the benefits of a productive, AI-assisted workforce. This will no doubt go a long way in helping the region realize the US$320 billion in economic impact that analysts project it will achieve by the turn of the decade.

"The rise of shadow AI introduces significant risks beyond accidental malware downloads and data leaks. One primary concern is the potential for non-compliance with industry regulations and data protection laws."

MAY 2025 / CXO DX

35

» COLUMN

THE RISE OF THE ROC Mayuresh Ektare, VP of Product Management, Qualys discusses why today’s threats call for a new approach to risk management

Mayuresh Ektare VP of Product Management, Qualys

W

hile the GCC continues on its trajectory of innovation and economic diversification, stakeholders are justifiably concerned about external factors destabilizing their transformation efforts. Adoption of AI, the convergence of IT and OT, the mass migration to cloud and multi-cloud environments — all present risks, and risks must be managed. By one count, the United Arab Emirates (UAE) endured an average of 1,546 cyberattacks per organization each week in the second quarter of last year, an 18% increase on the same period in 2023. The story is similar for its Gulf peers. How then do we protect our precious progress from the nefarious intentions of the threat actor?

Those entrusted with the defense of systems and data face many challenges, but at their forefront is the mismatch in skills and resources between them and their adversaries. Security suites tend to be fragmented, which is reflected in a global average of more than 70 tools per organization, each presiding over just one area — network, cloud, endpoints, and so on — with little data inter-

36

CXO DX / MAY 2025

play. How are teams expected to whittle down the white noise to a manageable number of verifiable threats and mitigate harm efficiently? Considering the UAE average of more than 200 true attacks per day, this is a tall task for security teams, not to mention the volume of false positives that have to be eliminated.

Security teams are familiar with relying on an SOC for the correlation of security events to enable a coordinated incident response.

However, I’d argue they will benefit even more from information that includes the potential financial and operational impact of knowing their enterprise risk even before an incident happens, so as to be better prepared and one step ahead. There is that word again: “risk”. Organizations need to have a risk operations center, or ROC, to manage decisions proactively around risk. The ROC provides a unified risk approach where asset inventories and risk telemetry are combined with business context and threat intelligence to form a single-pane, real-time view of the environment that makes risk triage more straightforward and relevant to each organization’s unique situation at any point in time.

» COLUMN

Culture shift It is important to note that the ROC is more than an evolution of the security function. It is an evolution of the business. Traditionally, security tools operate in silos — they assess the security of the assets they are protecting in isolation and as a consequence, the response to these signals is fragmented. These silos will have to be dismantled. Where we’re familiar with the attack surface, the ROC offers a central point that is cross-functional and designed to respond to changes in the “risk surface”.

The benefits of a dedicated ROC are plentiful. It gives birth to a new language that will allow for efficient communication of important information between finance, operations, HR, IT, and security. With everyone on the same page and with the same understanding of the biggest risks to the business, they can react more quickly and in lock step. Additionally, the presence of business context and the quantification of financial impact allows risk management to follow a path that aligns with broader business goals.

The SOC transformed incident response by bringing together data from different security tools. The ROC is going a step further by bringing in all the risk data — vulnerabilities, misconfigurations, policy violations — and overlaying it with threat intelligence and business context to make informed risk remediation decisions and transform the organization’s proactive defense.

No more firefighting The ROC fulfils a long-held wish to cut through the white noise of risk signals and zero in on true dangers. Through a structured, repeatable process, the center leaves behind frantic, unfocused firefighting and replaces it with data-driven, business-aligned decisions. Risk management is now strategic, with each step automated, streamlined, and thoroughly understood by all stakeholders. Of course, “automated” implies a unified platform, one powerful enough to collate risk signals from a diverse set of detection tools and identify the indicators of exposure at scale.

It will consume real-time threat intelligence and prioritize risks based on business context rather than just technical severity.

The ROC will reach into multiple environments in search of risk.

For that to happen, however, and for risk managers to be able to use the right data and business context for mitigation, they need an enterprise platform that can act as the control center of the ROC and dole out the actionable insights needed to lower the organization’s risk. The ROC platform amalgamates risk assessment, prioritization, and remediation to create a comprehensive proactive security platform. It allows risk leaders to manage the

environment deftly and accurately. It is capable of compiling and leveraging a unified asset inventory. It aggregates risk factors. It enriches the sum of its knowledge with up-to-date threat intelligence. It puts the business and its goals front and center in every actionable insight, prioritizing risks appropriately and orchestrating responses accordingly. And it ensures the utmost standards in compliance and executive reporting.

Leveraging uncertainty Risk comes from uncertainty. The Risk Operations Center breathes some surety back into the enterprise by providing operational oversight for risk reduction programs. While nobody can guarantee what the future holds, much less one that is risk-free, the ROC gives risk managers more control over uncertainty and the ability to mitigate harm.

"The benefits of a dedicated ROC are plentiful. It gives birth to a new language that will allow for efficient communication of important information between finance, operations, HR, IT, and security"

MAY 2025 / CXO DX

37

» COLUMN

DATA IMMATURITY: A ROADBLOCK TO ADVANCED AI

Lori MacVittie, F5 Distinguished Engineer says data immaturity is a drag on AI adoption and Organizations that fail to prioritize data maturity will struggle to unlock the more advanced AI capabilities

E

very survey on generative AI—including our own—points to one inescapable conclusion: data immaturity is going to get in the way of fully realizing the potential of generative AI.

When we asked about challenges to AI adoption in our 2024 State of Application Strategy report, the top response with 56% of respondents was “data immaturity.”

A quick look around the industry validates that data immaturity is a serious obstacle on the AI adoption path.

What is data immaturity?

Data immaturity, in the context of AI, refers to an organization’s underdeveloped or inadequate data practices, which limit its ability to leverage AI effectively. It encompasses issues with data quality, accessibility, governance, and infrastructure such as: • Poor data quality: Inconsistent, incomplete, or outdated data leads to unreliable AI outcomes.

• Limited data availability: Data silos across departments hinder access and comprehensive analysis, limiting insights.

• Weak data governance: Lack of policies on data ownership, compliance, and security introduces risks and restricts AI usage.

• Inadequate data infrastructure: Insufficient tools and infrastructure impede data processing and AI model training at scale.

• Unclear data strategy: Lack of a clear strategy results in uncoordinated initiatives and limited focus on valuable data for AI. Data immaturity prevents organizations from harnessing the full potential of AI because high-quality, well-managed, and accessible data is foundational for developing reliable and effective AI systems. Organizations looking to overcome data immaturity often start by building a data strategy, implementing data governance policies, investing in data infrastructure, and enhancing data literacy across teams.

The impact on AI adoption In short, data immaturity is a drag on AI adoption. Adoption is already slowing because organizations have, for the most part, already picked the low-hanging generative AI fruit (chatbots, assistants, co-pilots) and are running into data immaturity issues as they try to move toward the more valuable use cases such as workflow automation. Organizations that fail to prioritize data maturity will struggle to unlock these more advanced AI capabilities.

Data immaturity leads to a lack of trust in analysis and predictability of execution. That puts a damper on any plans to leverage AI in a more autonomous manner—whether for business or operational process automation. A 2023 study by MIT Sloan Management Review highlights that organizations with mature data management practices are 60% more likely to succeed in workflow automation than those with immature data practices. Data immaturity limits the predictive accuracy and reliability of AI, which are crucial for autonomous functions where decisions are made without human intervention.

38

CXO DX / MAY 2025

Lori MacVittie Distinguished Engineer, F5

Overcoming data immaturity Addressing data immaturity is crucial for enabling advanced AI capabilities.

Key steps include: 1. Develop a clear data strategy Align data collection, management, and quality standards with organizational goals to ensure data supports AI projects effectively.

2. Implement robust data governance Establish policies for data ownership, compliance, security, and privacy to improve data quality and build trust in AI insights.

3. Invest in scalable data infrastructure Adopt modern infrastructure, such as cloud storage and data pipelines, to support efficient processing and scalable AI training.

4. Enhance data quality standards Set standards for data accuracy, consistency, and completeness, with regular monitoring and cleaning.

5. Promote data literacy and collaboration Foster a culture of data literacy and teamwork between data and business units to improve data accessibility and impact.

By overcoming data immaturity, organizations can transition from basic AI applications to more transformative, value-driven use cases, ultimately positioning themselves for long-term success in an AI-driven future.

MAY 2025 / CXO DX

39 39

» TECHSHOW

DELL POWEREDGE R470

Dell Technologies introduced advancements across its industry-leading server, storage and data protection portfolios designed to help organizations achieve data center modernization. Dell PowerEdge R470, R570, R670 and R770 servers with Intel Xeon 6 Processors with P-cores are single and double-socket servers in 1U and 2U form factors that easily handle demanding traditional and emerging workloads like HPC, virtualization, analytics and AI inferencing The Dell PowerEdge R470 is a 1U, one-socket rack server engineered for high-performance computing with optimal power efficiency and balanced performance, driving cost savings and boosting data center productivity. Its advanced design maximizes rack utilization by offering more cores in a single socket enabling better performance in a smaller footprint while minimizing energy consumption. This makes it ideal for workloads like cloud scale web and app microservices, data services, virtualization, and scale-out database. The 1U, one-socket PowerEdge R470 is tailored to help you reach your budgetary requirements with optimized power and balanced performance in your data center.

Highlights: • Purpose-built to scale infrastructure to adapt seamlessly to technological changes, integrating new capabilities that support long-term growth and innovation.

• Powered by Intel Xeon 6 processors designed to meet diverse performance and efficiency requirements and offered with advanced GPU support.

• Enhanced I/O flexibility with optional front I/O configuration for seamless cold aisle serviceability.

• Energy-efficient designs with Smart Power and Cooling deliver cost savings and peak performance.

• Configurable to suit diverse needs with industry standard open designs (DC-MHS) compliance.

ASUS ExpertBook P1 The compact and elegant ASUS ExpertBook P1 weighs a mere 1.4kg1 with a breathtaking new design, and features exceptional efficiency to supercharge your productivity. It’s engineered to deliver superb performance powered by an up to AMD Ryzen 7 processor and packs up to 1TB capacity with dual SSDs. ASUS ExpertBook P1 is also engineered to protect your privacy and business data via a built-in fingerprint sensor and integrated TPM 2.0 chip2 — your reliable, trusted traveling companion, ready to complete every task on time.

Whatever you need to do, ASUS ExpertBook P1 is primed and ready, featuring all the multitasking power of an up to AMD Ryzen 7 processor combined with 64GB DDR53 and up to 1TB dual SSDs capacity for intensive task completion and improved data reliability.

Copilot in Windows5 with commercial data protection enhances productivity with seamless AI support. ASUS ExpertBook P1 further improves remote work with AI-powered noise cancellation for clear calls and Webcam Watermark displaying your business card details during conference calls. Additionally, Screen Watermark feature ensures data security during screen sharing.

To provide exceptional remote-working and video-conferencing experiences, ASUS ExpertBook P1 features AI-powered noise-cancelation technology that cancels out unwanted background noise and pick up the user’s voice for optimum conference-call quality.

40

CXO DX / MAY 2025

» TECHSHOW

THINKPAD X9 15 AURA EDITION Crafted with precision, the all-new 15.3ʺ ThinkPad X9 Aura Edition laptop boasts a revolutionary design that blends aesthetics and functionality. An ultrathin aluminum frame exudes a premium sophistication, yet it also delivers the durability you expect from ThinkPad. As a Copilot+ PC with Intel processors providing a neural processing unit (NPU) of up to 48 trillion operations per second (TOPS), AI performance keeps you productive all day.

Lenovo Aura Edition laptops, imagined with Intel, feature nextgen AI experiences. Smart Modes adapt to your style and elevate your everyday workflow by improving security, keeping you focused on tasks, enhancing your online meetings, extending battery life, and monitoring your posture while minimizing eyestrain. Smart Share connects your phone to your laptop with a tap, so you can easily share and edit photos. And Smart Care offers virtual support wherever you need it 24/7.

The ThinkPad X9 15 Aura Edition laptop boasts a comprehensive suite of I/O ports, designed to meet the needs of business professionals on the go. Whether you’re transferring files, connecting to peripherals, or plugging in old-school headphones, enjoy seamless connections and superfast transfers with dual Thunderbolt™ 4, HDMI ports, and more.

Highlights: • The X9 Aura Edition merges durability with cutting-edge technology, delivering an ultra-portable, AI-powered laptop tailored for modern business needs.

• The X9 Aura Edition boasts a sleek, silver aluminum chassis.

The design includes a large haptic touchpad and a revamped keyboard layout, enhancing user interaction.

• The Aura Edition introduces AI-driven "Smart Modes" that adapt the laptop's behavior based on user activity • The device is remarkably slim and lightweight, measuring just 17.18mm thin and weighing less than 1.27 kg

Highlights: • ASUS ExpertBook P1 boasts a sophisticated, architecture-inspired design with a new chassis. It features an elegant misty grey color finish with lightweight starting at 1.4kg1.

• ASUS ExpertBook P1 also features an enhanced cooling system that ensures consistent, optimal performance whether the lid is open or closed, guaranteeing peak efficiency even during extended use.

• The I/O ports are strategically placed to ensure an uncluttered workspace, allowing free movement of the mouse without interference from cords.

• The robust security features, including NIST SP 800-155 compliance, a discrete TPM 2.0 chip2, a physical webcam shield, and a fingerprint sensor, provide comprehensive protection for your sensitive information.

MAY 2025 / CXO DX

41

» TRENDS & STATS

INFORMATION SECURITY IN MENA TO GROW 14% IN 2025, SAYS GARTNER Spending on security services is projected to grow 16.6% in 2025, representing the highest growth among all segments Information security spending by Middle East and North Africa (MENA) enterprises is projected to total $3.3 billion in 2025, an increase of 14% from 2024, according to the latest forecast from Gartner, Inc. Security software will remain the largest spending category in MENA, forecast to reach nearly $1.5 billion in 2025.

“Enhancing cyber resilience, regulatory compliance, and securing digital transformation are pivotal drivers prompting MENA chief information security officers (CISOs) to boost their security investments in 2025,” said Shailendra Upadhyay, Sr Principal at Gartner.

“As enterprises in the MENA region drive digital transformation and integrate AI, they must focus on the cybersecurity threat landscape, protect critical infrastructure, and address insider threats to fortify their systems and enhance resilience against cyber threats.”

Gartner analysts are exploring ways in which security and risk management leaders can enhance their cybersecurity strategies at the Gartner Security & Risk Management Summit, taking place here through today.

cialized skills for threat hunting and intelligence in advanced security operations is considerable,” said Upadhyay. “Managed services - a subset of security services, including managed detection and response (MDR) - offer solutions to bridge this skill gap. As a result, organizations are investing more in security services, driving growth in this segment.”

principles, leaving them vulnerable to global technology threats. Therefore, CISOs in the region should proactively prepare for complex cyberthreats by taking a collaborative approach to resilience planning.”

Security software spending is projected to account for nearly 45% of total information security spending in MENA, maintaining its position as the largest category for end-user spending in 2025, driven by an expanding threat landscape and increased adoption of cloud technologies.

Trend 1: GenAI is Driving Data Security Programs

“MENA CIOs are boosting their investments in the integrated capabilities of generative AI (GenAI) applications, cloud services, and cybersecurity software to securely accelerate innovation for competitive differentiation, thereby intensifying their focus and spending on sub-segments, such as infrastructure protection, identity access management, and cloud security,” said Upadhyay.

Gartner recommends that organizations invest in synthetic data generation tools to replace traditional anonymization, effectively mitigating privacy risks and ensuring compliance.

Top Cybersecurity Trends to Prioritize in 2025

Spending on security services is projected to grow 16.6% in 2025, representing the highest growth among all segments, driven by factors such as cost efficiency, skill shortages, and access to advanced tools and technology (see Table 1).

“As AI becomes integral to mainstream operations, organizations must acknowledge both the opportunities for enhanced resilience and the potential threats,” said Sam Olyaei, Vice President at Gartner. “Gartner predicts that by 2027, 60% of organizations will fail to embrace organizational resilience

“The challenge of sourcing staff with spe-

Spending on security services is projected to grow 16.6% in 2025, representing the highest growth among all segments 2024 Spending

Segment

2024 Growth %

2025 Spending

2024 Growth %

Network Security

484

11.9

544

12.5

Security Services

1,099

18.2

1,281

16.6

Security Software

1,310

12.2

1,463

11.7

Total

2,893

14.3

3,289

13.7

Source: Gartner (April 2025)

42

CXO DX / MAY 2025

To deliver a sustainable cybersecurity program, security leaders in MENA must prioritize two key cybersecurity trends:

The rise of GenAI is shifting focus to unstructured data security and preference for synthetic data over obfuscated data in training.

“Security leaders must leverage technologies such as data security posture management (DSPM) to catalog, monitor, and govern both structured and unstructured data,” said Olyaei. “Reallocating resources and budgets to fortify data security across all forms of unstructured data is crucial, as these elements are becoming increasingly valuable in GenAI applications.”

Trend 2: Extend the Value of Security Behavior and Culture Programs Security behavior and culture programs (SBCPs) have reached a point of inflection for most organizations.

By focusing on cultural and behavior-driven activities, organizations are embedding security into their culture, addressing cyber-risk awareness and responsibility at the human level.

This trend is gaining traction as organizations increasingly recognize that human behavior is crucial to cybersecurity, with GenAI significantly influencing this shift.

Gartner predicts that by 2026, enterprises that integrate GenAI with a platforms-based architecture in their SBCPs will experience 40% fewer employee-driven cybersecurity incidents.

MAY 2025 / CXO DX

43

44

CXO DX / MAY 2025