Regional Updates

From an IT perspective, most companies are operating in a hybrid environment, email access on mobile devices, occasional remote working, and cloud based systems are now standard. However, policies and protections haven’t always kept pace with this change. It’s still common to see gaps around multi-factor authentication, unmanaged devices, and inconsistent access controls. Staff may be working primarily from the office, but they are still accessing systems from multiple locations and devices throughout the day. These are not complex issues to fix, but they do require regular attention and a realistic view of how people are working.

Alongside this, we are continuing to see a steady increase in cyber-related incidents, both locally and across the wider region. The UAE is now one of the most targeted countries in the Middle East, accounting for roughly 12% of all regional cyberattacks and ranking among the top countries globally for organisations impacted by cyber activity. More broadly, over half of cyber incidents in the region are now financially motivated, primarily ransomware, fraud, and extortion-based attacks.

In practical terms, this is manifesting as phishing emails, invoice fraud, and attempts to compromise accounts. These attacks are rarely highly technical they rely on timing, familiarity, and small lapses in process. Increasingly, they are also more convincing. Recent reports highlight that AI-generated phishing emails are now standard, with significantly higher success rates due to better wording and personalisation. At the same time, authorities in the region have warned of thousands of fraudulent websites targeting users during periods of uncertainty, designed to capture sensitive data or financial information.

The impact of these incidents is not just financial. They can disrupt operations, damage relationships, and take time to fully resolve. In most cases, the underlying issue is not a lack of technology, but a lack of consistent controls and misconfigured policies. Simple steps such as enforcing multi-factor authentication across all systems, conditional access, verifying any payment or banking changes verbally, and maintaining basic user awareness can significantly reduce risk. These are well-known measures, but they are often not applied consistently.

At the same time, office infrastructure is once again being taken for granted. During the period of remote working, the focus moved heavily towards cloud platforms and remote access. Now that teams are back in the office, the reliability of local networks, Wi-Fi coverage, and internal systems has become critical again. We are seeing cases where ageing hardware, poor network design, or a lack of monitoring leads to avoidable performance issues and downtime.

In practical terms, this might manifest as slow systems, intermittent connectivity, or recurring support issues that affect productivity. These are not usually caused by a single failure, but by infrastructure that hasn’t been reviewed or updated to reflect current usage. A straightforward review of network performance, hardware lifecycle, and overall setup can often identify and resolve these issues before they become disruptive.

Physical security is also back in the picture. Shared workspaces, unlocked machines, and open network access points can introduce unnecessary risk if not managed properly. It’s common to see devices left unattended, users sharing workstations, or guests being given access to internal networks. These are simple, everyday behaviours, but they create opportunities for both accidental and deliberate misuse. Basic controls such as enforcing automatic screen locks, separating guest and internal Wi-Fi, and applying clear access policies are often overlooked but make a significant difference. Like many areas of IT, this is less about complex solutions and more about consistent application of simple practices.

Overall, what stands out is that most businesses aren’t struggling with complex IT challenges. More often, issues arise from the basics not being consistently in place. The companies that operate most smoothly are those that keep things simple and well maintained: secure access to systems, reliable infrastructure, and clear, practical controls on how technology is used.

In a more settled environment, it’s easy to assume everything is working as it should. In reality, small gaps tend to accumulate over time, whether that’s an unprotected account, an ageing piece of hardware, or a process no longer followed. Left unchecked, these small issues can lead to larger disruptions.

Taking the time to review and maintain these fundamentals doesn’t require significant investment or major change. It’s about staying on top of the basics, understanding how the business actually operates, and ensuring the right controls are consistently applied. That, more than anything, is what keeps systems running smoothly and reduces the likelihood of avoidable problems.

For more infomation, contact Robert Kew at [email protected].