Center East urged to prioritise prevention as cyber workforce hole hits 300,000
The Center East’s cyber safety workforce scarcity is deepening at a time when organisations are accelerating cloud adoption, deploying purposes powered by synthetic intelligence (AI) and increasing digital companies. In response to Mastercard’s newest Cyber pulse report, the MENA area faces a shortfall of greater than 300,000 cyber safety professionals, whereas 43% of organisations report being understaffed.
For Danny Jenkins, former moral hacker and co-founder and chief govt of ThreatLocker, the problem is just not a lack of know-how round cyber threat, however a scarcity of capability inside already stretched safety groups. “Most organisations perceive the dangers they face, however they merely don’t have sufficient expert folks to research each alert,” he stated.
“We frequently see safety groups liable for hundreds of endpoints with solely a handful of workers. That forces them right into a reactive mode the place they’re continuously responding to incidents as an alternative of lowering threat.”
The outcome, he stated, is growing alert fatigue, whereas many safety instruments and controls stay underutilised or poorly optimised. In fast-growing digital economies such because the UAE, the problem is turning into extra acute as organisations undertake new applied sciences sooner than they’ll recruit and practice cyber professionals.
AI is creating extra work for safety groups
Whereas synthetic intelligence is ceaselessly positioned as an answer to expertise shortages, Jenkins argues that the know-how is definitely elevating demand for cyber safety experience. “AI is just not lowering the necessity for cyber safety professionals. It’s growing it,” he stated.
In response to Jenkins, AI is reducing the boundaries to entry for cyber criminals by enabling them to generate refined phishing campaigns, malicious web sites, malware and reconnaissance actions with far much less technical experience.
“Actions that when required expert attackers can now be carried out by a a lot bigger pool of risk actors,” he stated. On the similar time, organisations are creating new assault surfaces as they deploy AI fashions, brokers and AI-enabled enterprise processes.
“Each new AI software, AI integration and AI-powered enterprise course of introduces a brand new assault floor. The AI itself must be secured, and the whole setting must be secured from agentic AI misbehaving.”
“Each new AI software, AI integration and AI-powered enterprise course of introduces a brand new assault floor. The AI itself must be secured, and the whole setting must be secured from agentic AI misbehaving”
Danny Jenkins, former moral hacker and co-founder and CEO of ThreatLocker
Regardless of advances in automation, he believes human experience stays important as a result of AI nonetheless lacks the contextual understanding required for safety decision-making.
“AI nonetheless can’t decide intent,” he added. “A program backing up recordsdata to the cloud could also be a respectable enterprise software, or it might be knowledge exfiltration. The exercise seems to be comparable, however the intent behind it’s utterly totally different. Understanding that context nonetheless requires human judgement.”
As enterprises more and more put money into AI-enabled safety merchandise, Jenkins believes many organisations threat overestimating the worth of AI-powered detection instruments.
“I feel there’s a false narrative rising that you simply want AI-powered risk detection to defend towards AI-powered assaults. Detection has worth, however by the point a detection alert is generated, the assault has already begun. The purpose ought to be to stop malicious exercise from occurring within the first place, not merely detect it sooner,” Jenkins stated.
He advocates for safety architectures constructed round denial by default, least privilege entry and just-in-time permissions. “These ideas have been battle-tested for years and might considerably scale back the impression of each AI-driven assaults and conventional cyber assaults,” he stated.
Attackers are transferring sooner
Jenkins believes the most important shift safety leaders want to organize for over the following 12 months is AI-assisted vulnerability discovery and exploit improvement.
“The priority is not simply AI-generated phishing emails or malware,” he stated. “It’s how shortly AI can determine vulnerabilities and assist flip them into usable exploits.”
He added that advances in AI fashions able to figuring out weaknesses in software program are forcing defenders to behave sooner. “If AI will help attackers discover vulnerabilities sooner, defenders want expert cyber safety professionals who can discover and repair these weaknesses first,” he stated.
“Whether or not an assault is created by AI or by a human, it nonetheless has to execute code, elevate privileges, transfer laterally or entry knowledge,” he stated. “AI might change how assaults are created, nevertheless it doesn’t change the truth that organisations should cease unauthorised exercise from executing on their methods.”
Digital ambitions driving cyber hiring
The UAE’s push to develop into a world digital economic system can also be contributing to demand for safety expertise throughout a number of sectors.
“I don’t assume the most important driver is anyone sector. It’s the UAE’s ambition to develop into a world chief in digital companies,” Jenkins stated.
As organisations migrate extra infrastructure to cloud environments, demand is growing throughout authorities, monetary companies, healthcare, telecommunications, vitality and important infrastructure.
Jenkins stated many organisations are struggling to recruit cloud safety engineers, safety operations centre analysts, incident responders and operational know-how specialists. Relatively than relying solely on hiring, nonetheless, he believes organisations ought to redesign safety operations to scale back workloads.
“There merely aren’t sufficient certified cyber safety professionals out there,” he defined. “The primary transfer I’d advocate is implementing zero-trust controls based mostly on denial by default. If unapproved software program can’t execute, you’ve instantly eradicated an enormous share of potential assaults.”
His second suggestion is to implement least privilege and just-in-time entry, whereas the third is to work with skilled implementation companions to speed up deployments. “When you do these three issues, each cyber safety skilled in your workforce turns into simpler as a result of they’re spending much less time responding to preventable incidents and extra time centered on real threats.”
