Gulf Kingdoms Cite Information Sharing and Private Sector Support in Cyber Defense
In a world increasingly besieged by cyber threats, the United Arab Emirates (UAE) stands resilient amidst a barrage of cyberattacks emanating primarily from Iran. This situation was highlighted during the recent GISEC Global cybersecurity conference held in Dubai, where government officials elaborated on the strategic internal and external partnerships that have fortified the country’s cyber defenses.
Emirati representatives discussed the ongoing cyber threats targeting their federation, which encompasses seven desert kingdoms. They emphasized their alignment with the United States, having decided to sever financial and commercial ties with Iran, their former second-largest trading partner. This decision is aimed at participating in America’s Operation Economic Outcast, an initiative that seeks to significantly diminish Iran’s economic influence. The backdrop to these developments is a volatile period marked by coordinated airstrikes against Iran, which have drawn the UAE deeper into the regional conflict.
Since the onset of the conflict in late February, the UAE has faced a concerted effort of cyber warfare aimed at infiltrating its critical infrastructure. Mohammed Al Kuwaiti, the head of cybersecurity for the UAE government and the chairman of the UAE Cyber Security Council, addressed the conference attendees, underscoring the persistent cyber threats facing the nation. He lauded the role of private sector partnerships in enhancing the UAE’s cyber resilience, acknowledging that these companies were instrumental in information sharing which has proven vital in countering numerous cyberattacks.
Although Al Kuwaiti refrained from naming specific corporate partners, insiders indicated that major hyperscale infrastructure providers, particularly Microsoft, have been crucial allies in defending against cyber operations. The significance of these private sector collaborations was echoed by Lt. Col. Saeed AlShebli, deputy director of the digital security department at the UAE Ministry of Interior. He asserted that partnerships with corporations in the information technology and cybersecurity sectors are as consequential as alliances between nations. He referred to these firms as “strategic allies,” emphasizing their capability to bolster the nation’s defenses during crises.
Ayman Hammoudeh, field Chief Information Security Officer for Cohesity, remarked that the UAE’s cybersecurity framework benefits from a well-established organization. The UAE Cyber Security Council has evolved into both a regulatory body and an enforcer of security measures across both public and private sectors. Hammoudeh pointed out that this council maintains a centralized repository of crucial cybersecurity data, allowing it to disseminate critical threat intelligence to commercial partners.
Al Kuwaiti shared insights into the sectors under siege from Iranian cyberattacks, identifying public utilities—such as energy, water, and electricity—alongside government functions and the financial sector. The attacks have involved sophisticated techniques, including supply-chain hacks and destructive malware known as "wiper" compromises. Al Kuwaiti specifically implicated the Iranian Revolutionary Guard Corps (IRGC) as a key orchestrator of these assaults.
During the conference, AlShebli articulated a critical point: the essence of strategic cyber power lies not only in offensive capabilities but also in the ability to withstand and defend against attacks. The emphasis on sustaining operations amidst cyber onslaughts is paramount for maintaining national security on a global scale. He remarked that sovereignty in cyber capability cannot merely be achieved through physical infrastructure but must encompass the development of local expertise to safeguard data traversing the global network.
The UAE’s continued resilience against Iranian cyber attacks over the past seven months illustrates its capacity to maintain critical services despite persistent threats. AlShebli was quick to point out that the UAE’s reliance on international collaboration and private sector support is indispensable. He noted that the nation cannot operate its services independently of international partners, especially as connectivity with neighboring countries remains crucial.
Amidst these tribulations, Emirati officials seemingly shifted from a previously evasive communication strategy regarding the ongoing war. For weeks, discussions about the conflict have been masked with euphemisms and ambiguous language. Even as the UAE faced significant cyber threats, officials have often referred to it as "current conditions" or "geopolitical tensions," downplaying the intense cyber warfare the nation has endured, which included thousands of missile and drone attacks.
In conclusion, Al Kuwaiti asserted that the Emirati approach to cyber defense draws inspiration from U.S. models, establishing sector-based Information Sharing and Analysis Centers (ISACs). He highlighted the importance of collective understanding and solidarity in the fight against sophisticated cyber threats, exemplifying the UAE’s commitment to securing its digital landscape amidst a challenging geopolitical environment. The nation’s focus on fostering partnerships—both domestically and internationally—has emerged as a cornerstone for its ongoing cybersecurity strategy in the face of unprecedented challenges.