WHY A PEOPLE-CENTRIC CYBER DEFENCE IS CRUCIAL

EMILE ABOU SALEH, REGIONAL DIRECTOR, MIDDLE EAST AND AFRICA, PROOFPOINT, DISCUSSES WHY UAE ENTERPRISES NEED A PEOPLE-CENTRIC APPROACH IN DEFENDING THEIR WORKFORCE AGAINST CYBER-ATTACKS.

- Emile Abou Saleh

Cybercriminals are finding new and inventive ways to attack organisations in the UAE. Be it via Business Email Compromise (BEC), credential phishing or ransomware, attackers are increasingly chasing the same target our people rather than our infrastructure.

The people within our organisations not only make up a significant attack surface, but they are also viewed as more fallible than automated tools and technologies.

This is a view shared by a majority of CSOs and CISOs of UAE organisations. In fact, over half believe that human error and a lack of security awareness are the biggest risk factor facing their organisations.

But while most CSOs and CISOs are aware of the risks and the consequences, many struggle to protect their business. Whether due to ineffective strategies, a lack of boardlevel concern or low levels of cybersecurity awareness, a change is needed – fast.

Adapting to a new approach

Defending against people-centric cyberattacks calls for a new approach. One that puts our people at its heart. To build and deploy such a strategy, we must first understand the type and frequency of attacks facing our organisations.

Over 80 percent of CSOs and CISOs in the UAE report suffering at least one cyber-attack in 2019, with over half reporting multiple incidents.