Nearly all companies in the UAE are using artificial intelligence to protect themselves from cyber attacks. A new study shows 96% of UAE firms use AI to understand threats better. But this success story has a serious problem – there are not enough skilled workers to run these systems.
The research from Cisco shows UAE organizations are ahead of the world in using AI for cybersecurity. But only 30% of these companies are truly ready to handle today’s cyber threats. This gap between having the technology and being able to use it properly creates real risks.
Over half of UAE companies – 55% – were hit by cyber attacks in the past year. The most common attacks were malware hitting 76% of firms, phishing attacks affecting 59%, and data breaches by bad actors hitting 47% of companies.
The skills shortage is severe. A huge 87% of UAE companies say they cannot find enough cybersecurity workers. More than half of these firms have more than 10 empty cybersecurity jobs they cannot fill.
AI Creates New Problems While Solving Old Ones
While companies use AI to fight cyber attacks, AI itself is creating new security risks. Nearly all UAE firms – 93% – faced AI-related security incidents last year. But only 62% of companies think their workers really understand AI security threats.
The problem gets worse with shadow AI – when employees use AI tools without permission. One-third of companies cannot detect when workers use unauthorized AI programs. This creates major privacy and security risks.
Many employees are using AI tools at work without proper oversight. About 45% use approved AI tools from other companies, but 20% have unlimited access to public AI systems. More concerning is that 54% of IT teams do not know how their staff interact with AI tools.
Complex Security Systems Slow Down Response
Most UAE companies – 81% – say their security systems are too complex. These firms use more than 10 different security tools, which makes it hard to respond quickly to threats.
The research shows 88% of organizations face bigger security risks because employees access company networks from personal devices. This problem gets worse when workers use unauthorized AI tools on these devices.
Money and Investment Gaps
Despite the risks, UAE companies are not spending enough on cybersecurity. While 98% plan to upgrade their technology in the next two years, only 9% put more than 20% of their IT budget toward security.
This underspending happens even as cyber attacks cost more in the Middle East than anywhere else. Security breaches in the region cost an average of $8.05 million per incident – nearly double the global average of $4.45 million.
Government Steps Up Response
The UAE government recognizes these challenges and is taking action. In February 2024, the country launched its National Cybersecurity Strategy with more than $2 billion in government investment over five years.
The strategy focuses on five main areas: governance, protection, innovation, building partnerships, and creating a skilled workforce. It aims to protect critical infrastructure while helping the UAE become a leader in secure digital transformation.
The UAE is also investing heavily in AI overall. The country’s AI market is expected to grow to $46.33 billion by 2030, driven by the National AI Strategy 2031.
Regional Context Shows Wider Problem
The UAE is not alone in facing these challenges. Across the Middle East, cybersecurity job demand has grown dramatically. The UAE saw a 60% surge in demand for cybersecurity positions on major job platforms.
Globally, the cybersecurity workforce shortage affects 90% of organizations. The Middle East and Africa region saw an 11.8% skills gap in 2024, according to the ISC2 Cybersecurity Workforce Study.
Looking Ahead
The research shows UAE companies must balance three priorities: investing in AI-powered security tools, simplifying their security systems, and training more cybersecurity workers.
Companies also need better awareness programs. Only 57% of UAE firms think their teams understand how criminals use AI for attacks. This knowledge gap leaves organizations open to sophisticated threats.
The UAE’s leadership in AI cybersecurity adoption shows the country’s commitment to digital security. But success will depend on solving the skills shortage and helping workers understand both the benefits and risks of AI in cybersecurity.
