Headline
Emirates CISOs Flag Rampant Cybersecurity Gaps
UAE security leaders warn that people, tech, and process gaps are exposing their organizations to cybercrime.
Source: Chroma Craft Media Group via Alamy Stock Photo
A vast majority of security chiefs in the United Arab Emirates believe their organization must improve how their teams, processes, and tech function in order to mitigate future cyberattacks.
Research by Trellix recently found that 96% of CISOs — who have experienced security incidents — feel improvements are needed, while 52% of respondents say their organization doesn’t possess the technical knowledge to handle complex security incidents.
Reliance on Manual Processes
Forty-eight percent of security leaders believe that their organization is too reliant on manual processes, which hampers the mean time to detect and repair cyber incidents.
In addition to this, 44% blame the failure to fight cybercrime on poorly documented and implemented processes, with another 44% warning that disconnected security controls caused a lack of context.
Jake Moore, global cybersecurity adviser at ESET, says continual investment in protection is crucial for companies as cyber threats are increasingly sophisticated and common.
“Furthermore, now with the introduction of AI threats we are seeing cyberattacks become even more relentless and powerful,” he says. “Companies need to bear in mind that the cost of recovery from an attack usually outweighs the cost of preventive security measures.”
Mind the Gaps
While gaps in technical resources make it difficult for organizations to spot and respond to cybersecurity incidents, stretched or ill-equipped security teams also make this difficult. More than half of respondents (52%) cited gaps in their security capabilities as contributors to a security incidents experienced by their organization.
Meanwhile, 44% admitted that they hadn’t properly configured their IT stacks or enabled their detection policies. A further 40% said their IT and security tools don’t offer “adequate visibility” of incidents.
Moore says: “Neglecting cybersecurity in terms of the people and process can leave a business dangerously exposed to preventable or mitigable attacks with potentially severe consequences.”
About the Author(s)
Technology Journalist
Nicholas Fearn is a freelance tech journalist from the Welsh valleys. He’s written for major outlets like Forbes, Financial Times, The Guardian, The Independent, The Telegraph, HuffPost and Business Insider, as well as tech publications like Gizmodo, TechRadar, Laptop Mag, Computer Weekly, ITPro and many more. When Nicholas isn’t geeking over the latest gadgets and tech trends, he’s probably listening to Mariah Carey on repeat.