Why cybersecurity has become a boardroom priority across the Middle East

As organizations across the META region accelerate digital transformation and adopt artificial intelligence, cybersecurity is becoming a core business priority rather than a function confined to IT departments. Cyber threats, meanwhile, continue to grow in scale and sophistication. Kaspersky has warned that attackers are increasingly turning to AI to generate phishing campaigns, develop malware and accelerate cyberattacks more broadly.

New research presented by the company at its Cyber Security Weekend for the Middle East points to a gap between enthusiasm and unease. While 68% of organizations said they would recommend AI-enabled solutions, 82% expressed concern about the security risks that come with the technology.

Governments and organizations across the region are responding with greater investment in cybersecurity, placing sharper emphasis on cyber resilience, data sovereignty and collaboration as they prepare for a security environment that is growing more complex by the day.

In an exclusive interview, Toufic Derbass, Managing Director for META at Kaspersky, discusses the forces reshaping cybersecurity priorities across the region. He points to rising investment as organizations accelerate digital transformation and adopt cloud services, AI and connected technologies, developments that are inevitably expanding their attack surface.

CYBERSECURITY MATURITY

“Cybersecurity is no longer viewed solely as an IT function, as organization leaders have accepted its key role as a business enabler that supports innovation.”

At the same time, Derbass says demand is growing for solutions that address data sovereignty requirements.

“Governments and enterprises increasingly want greater control over where sensitive information is stored and processed.”

In response, Derbass says Kaspersky offers on-premises solutions that enable customers to deploy security technologies within their own infrastructure while maintaining full control over their data.

“This flexibility allows organizations to meet regulatory requirements while still being fully protected.”

Cybersecurity maturity, he adds, influences not only investment decisions but also Kaspersky’s approach to market expansion and customer engagement. Derbass notes that cybersecurity maturity varies not only between countries but also among organizations within the same industry.

“Every conversation starts with understanding what matters most to the customer. What are their critical assets? What risks are they facing? Where are the biggest gaps?”

From there, he says, Kaspersky works with customers to develop a holistic cybersecurity strategy covering endpoints, networks, cloud environments, operational technology and other critical systems.

“The same principle applies across the region. Every market is on its own digital transformation journey, and our role is to meet customers where they are while helping them build long-term cyber resilience.”

THE RISE OF AI

As AI becomes increasingly embedded in cybersecurity platforms, Derbass discusses how Kaspersky is integrating the technology into its products while maintaining transparency and customer trust.

“AI has been part of Kaspersky’s technologies for more than 20 years, long before it became a mainstream topic, as we have over 100 AI-related patents that power our services,” he says.

“Today, it helps us analyze enormous volumes of data, including up to 500,000 new malicious files every day, allowing us to detect threats faster and more accurately.”

He says the company views AI as a tool that enhances the capabilities of cybersecurity professionals rather than replacing them.

“Transparency and trust remain essential, so our approach combines AI-driven automation with human expertise.”

Beyond strengthening threat detection, he says AI also presents significant commercial opportunities for cybersecurity providers, particularly in Security Operations Centers (SOCs), where security teams are often overwhelmed by the volume of alerts.

“AI can automate repetitive tasks, prioritize incidents, correlate information from multiple security tools and provide analysts with the context they need to respond much faster,” he says.

He explains that this enables cybersecurity professionals to focus on complex investigations and strategic decisions that require human expertise.

“As cyber skills shortages continue across many markets, AI is becoming a valuable force multiplier for security teams.”

A SHARED RESPONSIBILITY

Governments across the META region are placing increasing emphasis on cyber resilience, and Derbass says private cybersecurity companies have a critical role to play in supporting national security objectives.

“Cybersecurity is a shared responsibility between the governmental and private sectors, with the best results coming when both work together.”

He says governments set the strategic direction through policy and regulation, while private cybersecurity companies provide the expertise, threat intelligence and technologies needed to help organizations defend against both existing and emerging threats.

“We’re also seeing growing interest in data sovereignty, particularly among governments and critical sectors,” he adds. “Organizations want greater control over how and where their sensitive information is processed.”

Derbass says Kaspersky’s on-premises security solutions enable customers to retain control over their data while benefiting from advanced cybersecurity capabilities that support both security and regulatory requirements.

FUTURE OUTLOOK

As the cybersecurity landscape continues to evolve, Derbass says Kaspersky continues to see strong momentum across the META region, reporting double-digit business growth last year and a 21% increase in B2B sales during the first half of this year. He attributes the performance to rising demand for cybersecurity as digital transformation accelerates across the region.

“Our strategy is centered on supporting countries and organizations as they modernize their digital infrastructure depending on their needs and priorities,” he states. “Markets such as Saudi Arabia, the UAE and Egypt are making significant investments in digitalization and cybersecurity as part of broader national transformation programs.”

He adds that Türkiye remains a technologically mature market with sophisticated cybersecurity requirements, while many African economies are rapidly digitizing, creating new opportunities to strengthen cyber resilience from the outset.

Looking ahead, Derbass says the greatest opportunities for collaboration lie in developing cybersecurity talent and strengthening knowledge sharing between industry, policymakers and academia.

“The biggest opportunity is around developing cyber talent and sharing knowledge. We need skilled people who can manage increasingly sophisticated cyber risks. That’s why collaboration between governments, industry and academia is so important.”

He notes that Kaspersky supports these efforts through initiatives such as the Kaspersky Academy and partnerships with universities and educational institutions across the region to help develop the next generation of cybersecurity professionals.

“When policymakers, educators, and the private sector work towards the same goal, they can build a stronger cybersecurity ecosystem that benefits society as a whole.”