01-03 day two may 2018
T E C HN O LO G Y M E D I A PA R T N E R
2018
伀倀吀䤀䴀䤀娀䤀一䜀
䌀夀䈀䔀刀 匀䔀䌀唀刀䤀吀夀
䔀㨀 椀渀昀漀䀀瘀愀氀甀攀洀攀渀琀漀爀⸀挀漀洀 圀㨀 眀眀眀⸀瘀愀氀甀攀洀攀渀琀漀爀⸀挀漀洀 唀䄀䔀㨀 ⬀㤀㜀 㐀 ㈀㔀㤀 㘀㤀㠀㌀ Ⰰ⬀㤀㜀 㔀 ㌀ 㔀 㤀㈀㌀ 唀匀䄀㨀 ⬀ 㐀 㤀 ㈀ 㤀 簀 唀䬀㨀 ⬀㐀㐀 ㈀ 㜀 ㌀㠀㌀㌀ 䌀愀渀愀搀愀㨀 ⬀ 㐀㘀 㤀 ㌀㜀㌀㜀 簀 䤀渀搀椀愀㨀 ⬀㤀 㐀㠀㜀 ㈀㤀㜀 㜀
䴀漀爀攀 琀栀愀渀 ㈀ 攀渀琀攀爀瀀爀椀猀攀 戀甀猀椀渀攀猀猀攀猀 眀漀爀氀搀 眀椀搀攀 琀爀甀猀琀 嘀愀氀甀攀䴀攀渀琀漀爀 琀漀 瀀爀漀琀攀挀琀 琀栀攀椀爀 搀愀琀愀⸀
03
BROUGHT BY TECHNOLOGY MEDIA PARTNER
HIGHLIGHTS
X LABS
15.30 TO 16.00 PM Modern Model For Cyber Adversarial Behavior, Ashfak Pathan, Cyber Security Consultant, Spire Solutions
Lt General Dhahi Khalfan Tamim Inaugurates Future Technology Week
L
ieutenant General Dhahi Khalfan Tamim, Deputy Chairman of Police and Public Security in Dubai, inaugurated GISEC 2018 - the region’s information security conference and exhibition – which runs concurrently with the Internet of Things Expo (IoTX) under the umbrella of Future Technology Week. Future Technology Week took to the air, the airwaves and online as the three-day GISEC and IoTX
event, which hosts regional and global experts, including 120 leading cybersecurity and future tech exhibitors from more than 80 countries, opened with an appearance from a real-life Tony Stark and the unveiling of the first-ever city-themed song composed by an Artificial Intelligence (AI). Dubai Police also marked Day One with the launch of a new platform for reporting cybercrime. Lieutenant General Tamim toured the exhibitions halls as GISEC
and IoTX 2018 showcased the latest products and services to meet growing demand for critical online security and blockchain solutions. The opening delegation stopped at various stands including Dubai Electronic Security Center, Spire Solutions, HP, IBM, Etisalat Digital, Recorded Future, Cisco and Carbon Black to hear about the new technologies on display that will set the agenda for the region’s information security future.
VISIT US
STAND NUMBER M5
KEY SPEAKERS OF THE DAY DILEEP SOMANI, CIO, OTE GROUP
DR MOHAMED BENAICHOUCHE, CIO, ARABSAT
GIRARD RACHID MOUSSA, LEAD CYBER SECURITY FOR MEA, MICROSOFT
MR GEORGE EAPEN, CISO (MENAT) GENERAL ELECTRIC
04
Cyber Resilience for Email How has the year begun for Mimecast? Please brief us on the recent research findings. It is the beginning of our fiscal year. Email is the most important threat to our customers. 92% of the threats that come to organizations is through email. In the recent reports, we witnessed 22% increase in targeted threats, the targets being CIOs, CEOs, etc. Last year we witnessed 10 of the core destruction incidents. These incidents typically take 3 days to recover from the attack and is a reputation as well as financial loss. The report also stated that 19% of the organizations said that they have lost customers. Email security are not taken JEFF OGDEN, MD - MIDDLE EAST. MIMECAST very seriously by a few organizations? What advise helping customers, cyber resilient on premise and cyber would you give to those resilient on the cloud as well. organizations? Email is the most critical application that businesses have. In 2018, what would be the combined efforts So, organizations have to invest more time and money in of Mimecast and your channel partners in securing email infrastructure. 34% of the customers in the addressing these threats? Middle East have migrated to Office 365 and the cloud. We are doing something called ESRA which is effectively The third factor is to recover from the incidents. We are Email Security Assessment Risk - an inspection of email focusing this year on cyber resilience. With this we are
security systems to uncover the number, type and severity of threats getting into organizations. It is a very simple process. Today, we are identifying 50% more threats than the incumbent suppliers today. We can educate customers in how weak they are in this area. We also help customers to look at 3 areas – Security from defense point of view, cyber redundancy and educating the users as we go through the process.
Converged Endpoint Protection While the term ‘prediction’ and ‘security’ may often seem as paradoxes, Carbon Black is revisiting the paradox with its latest offering around the Cb Predictive Security Cloud. We had an opportunity to sit down with Rick McElroy, Security Strategist from Carbon Black on the first day of GISEC 2018 and get to know more insights into this. “Think of the Predictive Security Cloud as one sensor that directly reports to the cloud and possess the ability to predict the next attack and meticulously cast you out of it. We are ushering the ultimate power of cloud with this security solution,” said Rick. At GISEC 2018, Carbon Black will showcase the Cb Predictive Security Cloud, a converged endpoint protection platform that delivers next-generation security and IT operations services through the cloud and ensures products and services are delivered in an effective and timely manner. “The mindset of the attackers have changed. They are planting things like memory injection and launching power shells in organizations. Being able to have an end-to-end visibility into the cyber chain and be able to disrupt it as fast as possible is very important for the organizations today.” The Predictive Security is all about collecting the right set of data from the endpoint, fusing that with threat intel and using other source of information like patch level on a system or vulnerabilities that affect the system. Carbon Black Security Do: Get Visibility into the entire cyber chain Security DON’T: Stop clicking on ‘all’ things and stop trusting ‘all’ people
RICK MCELROY, SECURITY STRATEGIST FROM CARBON BLACK
Intergrated cloud suite for email
SECURITY
ARCHIVING
CONTINUITY
www.mimecast.com
06
du Joins Hands with NXN
du is collaborating with NXN to bring smart energy management solutions to buildings and facilities across the UAE. The partnership will help achieve optimal energy efficiency metrics that adhere to environmental legislation, as well as delivering extensive facility intelligence through a universal dashboard that seamlessly manages and monitors energy con-
sumption in buildings. du’s partnership with NXN provides advanced facility intelligence functionality that can be overseen on a single platform to help users monitor, validate, predict, and control all energy-related expenses while informing users’ decisions regarding energy use and allocation. Their
collaborative solutions will offer realtime management and monitoring of energy assets from an Integrated Operations Centre (IOC) using connectivity and end-to-end solutions by du to operate on a NXN powered platform. “By joining hands with a reliable partner such as NXN, we are combining unique tools and expertise at our disposal, to offer cloud based energy management solutions by offering Energy Management as a Service from our world class data centre in the UAE,” said Jihad Tayara, VP – ICT Commercial, du. “We are delighted to partner with a forward thinking company such as du and leverage each other’s synergies to offer data-driven energy management solutions to enable businesses across UAE to optimise energy consumption, reduce costs and increase sustainability of assets. Our Smart Energy portfolio offers a range of turnkey and customisable solutions across all sectors that will help customers achieve their energy management goals,” said Labib Matta, Chief Business officer, NXN.
State-of-the-Art Security In conversation with Yaser Al Kurdi, Sales Engineer, epm. “Epm stands for Emirates Photo Marketing. We are based in Abu Dhabi and we have branches in Dubai and Ajman. We are in the market since 1983 and we do a business in low current solutions like access control, CCTV and time attendance. We are also strong in asset tracking system and smart solutions for real time location monitoring.” With 30+ years of experience, EPM is a leading distributor of innovative security solutions and imaging solutions from renowned brands around the world. Their diversity in product portfolio with state of the art security and surveillance solutions makes us a one-stop solution for various re-sellers and end users.
YASER AL KURDI, SALES ENGINEER, EPM.
“We have some major projects in the UAE like— we do ID card printing for all the departments of the Ministry of Interior from AUH to Fujairah. We print over 15 million cards yearly and we do huge business in access control. We have contract with Abu Dhabi Police for access control solutions for all their buildings. We also some great references like Dubai Courts, Dubai Municipality, Taxi Dubai etc.” Major partner HID, platinum partners for asset tracking and access control. Blue vison for real time location based monitoring. We also parnes with TPS which is a global brand in time attendance . gold partner with many CCTV manufacturers like Samsung.
CYBERSECURITY
BREACH ON GULF BASED COMPANIES INCREASED FROM 28% TO 41% Gulf Business Machines (GBM) revealed the findings of the 7th edition of its annual cybersecurity study at the 2018 GISEC. This year’s survey focused on cybersecurity in the business environment, and revealed how regional companies are implementing their cybersecurity strategy. The survey indicated that as many as 41% of Gulfbased enterprises admitted to being breached at least once in the last 12 months, in comparison to 28% in 2016. Interestingly, only 31% of regional organizations were concerned about detection and response to attacks. This finding underscores the necessity of a change in mindset, especially among management when it comes to budgeting for the right technologies needed to deal with a breach once discovered. Meanwhile, 62% of respondents stated that they were likely to utilize Artificial Intelligence (AI) for securing their organizations, which showed willingness in deploying new technologies. “We have seen a large number of highprofile cyber-attacks this past year and this is a trend that isn’t looking to slow down. Despite the constant stream of security updates and patches, attacks are growing increasingly common. In today’s context, it is crucial for organizations to understand that preparation against a security breach should not be purely focused on preventative tactics, but rather it is important to invest in resources that aid in detection and response. This will test the resilience of an organization’s security against breaches”, commented Hani Nofal, Vice President of Intelligent Network Solutions, Security and Mobility at GBM. “Security is a shared responsibility, not just within companies but across the region and worldwide. There is a pressing need for organizations to share their experiences, good and bad, in order to help others prepare better in this constant race”, added Nofal.
carb
Visit us at GISEC 2018 stand C14
carbon black banner.indd 1
28/03/2018 16:54
08
Thales Appoints New VP of Cybersecurity in the Middle
GARY MILLER, VP - CYBERSECURITY MIDDLE EAST, THALES
Thales appointed Gary Miller as Vice President, Cybersecurity in the Middle East. The new appointment compliments Thales’s global strategic drive to future-proof its customers and stakeholders across the world. Mr Miller, who was previously Managing Director of Thales Cyber and Consulting UK, managing 160 consultants with revenues over 20m Euro, brings with him over 15 years of expertise in cyber and technology for start ups and large international corporates. Mr Miller will lead his team to deliver products, systems and consulting services to existing and new clients across the group’s entire portfolio in the UAE and wider Middle East, while leveraging the group’s best in-class solutions and services. As the threat of cyber-attacks on businesses reaches an all-time high, with the number of incidents doubling in 2017 alone , and as businesses continue to embrace big data, cloud, mobility and the Internet of Things
(IoT), cybersecurity is a major priority for stakeholders in this region. As part of his remit, Mr Miller will lead the development of the recently launched Cybersecurity Hub in the Middle East, based in Dubai. “I’m extremely excited to be bringing Thales’s world-renowned expertise into a region that is leading the charge in digital transformation adoption. The opportunities for businesses and citizens alike are endless but with this we must always remain vigilant of the threat that this fast-paced adoption can bring. As we approach Expo 2020 and look towards achieving our Vision 2021 goals, a key objective for us will be to help the region become more mature in its cyber awareness and culture. Through our long-standing industry knowledge and locally tailored services and solutions, Thales is best placed to assist our stakeholders through this incredible transformation currently taking place across the region.”
Digital Forensics in Focus An Emirati company owned by Mr. Al Zaffin, the former IT Director of Dubai Municipality, Digital Insights is debuting at GISEC 2018. Though just 4-month-old, the company already stands out as a competition in the market. Digital Insights offers a wide range of consulting services with focus on digital forensics and offensive assessments equipped with the necessary tools and expertise to help secure the business. Addressing themselves as the digital forensic experts, Lt Col Bryan Miranda, Director Technical says “We identify, preserve and analyse any data in any computer, device or network to help protect the businesses from inappropriate data use or data loss. We provide digital forensic investigation services to the public and private sectors in the GCC.” The company also provides a full range of Cyber Security Incident Response solutions from advice to data collection, remediation, expert services, etc. In an interesting way Bryan explains “Forensics in Arabic language means medical investigation. We are here to help the customers who have had incidents to bring back their data in the original state and to prevent such incidents from taking place again.”
LT COL BRYAN MIRANDA, DIRECTOR TECHNICAL, DIGITAL INSIGHTS
Digital Insights also performs cyber threat hunting in order to keep up with the deluge of new cyber threats and malware attacks. They also provide state of the art application security testing which is critical in protecting both the applications and the organizations.
Maintaining Complete Information Security Culture
UZAIR RAEES, PRODUCT MANAGER, BE SAFE
With a head office in the UK and operations in the Middle East for the last 10 years, BeSafe is security awareness consultant. Uzair Raees, Product Manager says –“We have a product named BeSafe. This product is for all the employees in an organization which helps them in maintaining the complete information security culture. Every organization and their IT team has invested a lot on their IT infrastructure and maintaining the best firewalls, antiviruses and active directories. They have already invested a lot in their network. But the smart hackers these days know that the easiest way to target any organization is the human link. They can get into any organization through humans by phishing emails, suspicious links, etc. So, information security is which all the employees should take responsibility of. And this could happen only through information security awareness programs. It is also a part of the compliance. Many organizations run yearly based campaigns. So, this is where we help organizations in maintaining the optimum best practices. We have many online courses. We run complete end to end solution with pre-assessment, post assessment. We design and customize videos. It is very easy for people to understand the deliverable model.”
EMEA WWW.SANS.ORG @SANSEMEA
The Largest and Most Trusted Source of Cyber Security Training, Certification, and Research in the World DIGITAL FORENSICS INCIDENT RESPONSE PEN TESTING SECURE SOFTWARE DEVELOPMENT SECURITY AWARENESS CYBER DEFENCE MANAGEMENT AUDIT INDUSTRIAL CONTROL SYSTEMS
Take SANS training at one of our upcoming events in the Gulf region. You can choose from classes in Riyadh, Dubai or Khobar REGISTER ONLINE AT: W W W. SA N S .O RG / E V E N T/ R I YA D � O CTO B E R�2 01 8 W W W. SA N S .O RG / E V E N T/G U L F� R EG I O N �2 01 8 W W W. SA N S .O RG / E V E N T/ K H O BA R�2 01 8
10
Humtap Expands into Arabic and Middle Eastern Music Generation Humtap, a music generation Artificial Intelligence (A.I.) start-up, is expanding into creating Arabic and Middle Eastern music - a pioneering achievement in the field. Speaking on side-lines of the Gulf Information Security Expo & Conference (GISEC) and the Internet of Things Expo (IoTX) - two events being held at Dubai World Trade Centre (DWTC) under the Future Technology Week banner - Tamer Rashad, Founder and CEO of Humtap, revealed the ambitious start-up is homing in on regional users at a dedicated A.I. Conference. “We created Humtap because we believe everyone is creative and enjoys connecting with others through user-generated content,” said Rashad. “All of us are blessed with an expressive voice and we want to empower our users – in any corner of the world - to express themselves and connect with others by providing a seamless, intuitive and ultimately creative experience. With the Arab world counting some of the global leaders in internet-ready mobile phone penetration per capita, Rashad believes regional users will flock the Humtap platform, which has a partnership with Universal Music Group’s (UMG) famous Abbey Road Red incubation program. “By understanding the minds of music composers and producers through A.I., we turn your expressive voice into any music. We are very excited by the opportunities that will be created when we apply our technology to compose Arabic and Middle Eastern music,” added Rashad. Humtap also recently launched the latest version of its app and is committed to adding new music styles every week; styles inspired by legendary artists from divergent genres, such as Drake, David Guetta, Travis Scott, Calvin Harris, Depeche Mode and Metallica. Industry veteran Ty Roberts, former CTO of UMG, stated: “Humtap enables a new class of composers to create music and empowers existing recording artists to better leverage their repertoire by enabling new forms of collaboration – we are bringing new models of monetization for record labels and publishers.”
MICHAL SUCHOCKI, VICE PRESIDENT OF SALES FOR CYBERTEQ
Securing Business Through Innovation Owned by Cybercom Singapore, Cyberteq is an information and communication technology consulting company.
They secure customers from different verticals like government, BFSI, telecommunications, service providers, etc. Their
Rwandan subsidiary is the first Rwandan cyber security firm securing business and connectivity in East Africa region. Michal Suchocki, Vice President of Sales for Cyberteq says – “We cover 3 regions – Asia region from the Singapore office, Middle East region from the Dubai office and East Africa from the Rwanda office. We are in the market for more than 20 years and started operations in Dubai in 2009. Our major focus is into cybersecurity. Our Cyber Security Services has been planned to match each stage of security maturity of the organization.” Cyberteq cyber security services enable organizations to effectively protect their business. The company is participating at GISEC 2018 with a new solution. “We are here to present our new solution which is m-unit, a new approach and next generation cyber security, allowing you to move from the post to active action in cyber security. Cyber Security is not the matter of one single person but a whole organization. m-unit allows you to move through ABC of security – Assessment, Boost and Compliance,” he adds. Assessment helps customers to assess current information security measures, identify vulnerabilities and analyse risks and derive mitigation plan. Boost supports customers to apply corrective actions, define required solution and boost security awareness overall organization. Compliance Kit helps them to monitor compliance level to wide range of security standards and maintain accountability throughout their organizations.
MIDDLE EAST BUSINESSES AT INCREASED RISK OF CYBERATTACK: STUDY The results of the Middle East edition of Thales 2018 Global Encryption Trends Study was revealed. The report, based on independent research by the Ponemon Institute and sponsored by Thales, explores encryption deployment trends in the Middle East, strategy and adoption of encryption to secure data within cloud applications, as well as threats, main drivers and priorities for the industry. Only 34% of respondents in the Middle East reported that their organization has an encryption strategy applied consistently across their enterprise. This places the Middle East among the three lowest ranking countries, alongside Mexico (30%) and Russia (31%), and 9% below the global average of 43%. Nevertheless, the region is seeing growing adoption of encryption strategies, with an increase of +7% since 2016. IT operations are most influential in framing the direction of encryption strategy, at 32%. At 55% and 51% respectively, employee/ HR data and financial records are the two most commonly encrypted data types in this region. Interestingly, customer information has shown the sharpest increase over the past three years, rising from 25% two years ago to 41% this year.
11
Preventing Internal Data Breaches
ORHAN YILDIRIM, VP - SALES SUPPORT & OPERATIONS
Established in 2007, Krontech produces and integrates advanced technology software in the fields of Access Control Systems, Network Packet Brokerage, Streaming Analytics, Fast Data & Real Time Data Processing, and Nextgeneration Security and Audit. Orhan YILDIRIM, VP – Sales Support and
Operations says – “We offer solutions mainly in the cybersecurity domain. The most popular product that we are showcasing is the Single Connect which is a privileged access management tool.” Single Connect is used as an information security and governance tool to prevent internal data breaches and internal
attacks through the use of privileged accounts. It enables IT managers and network admins to efficiently secure the access, control configurations and indisputably record all activities in the data center or network infrastructure, in which any breach in privileged accounts access might have material impact on business continuity. There are many reports that state that hackers follow several steps to a successful hacking. 80% of the hackers are stealing the password of a privileged account. Krontech secures the privileged accounts with a password manager. The benefits of a password manager are - It eliminates embedded passwords that are stored in unencrypted text files, DB or in source code. Passwords generated by Single Connect ensure maximum strength. It eliminates usage of non-expire passwords. Single Connect changes the password after every usage, one-time-password. Password is not shared among employees, because nobody knows/sees the password. Password is stored securely, in a vault.
The Power of Assured Identity
RICHARD BECHALANY, REGIONAL SALES DIRECTOR, MIDDLE EAST CROSSMATCH
‘The world indentifies with us’. Crossmatch goes with this tagline that testifies its strong commitment to the industry in providing cutting edge secure identity and authentication solutions. In an exclusive conversation with Richard Bechalany, Regional Sales Director, Middle East Crossmatch, he says that they are one of the pioneering organizations in the world to provide a complete identity, secure access and biometric identity solutions that solve complex security challenges in an ever changing world. “We are well known in the world for some cutting edge projects like the US border entry authentication. Any person travelling to the US and landing in any of the airports in the US has to feed his fingerprints into our devices.” Apart from a strong global presence with offices in various locations, Crossmatch also has a very rooted base in the MEA region. The opening of the Dubai office in summer of 2017 further testifies the commitment of the company towards the region. They have a strong customer base in the region that includes some big names viz; Emirates Identity Authority, Abu Dhabi Police, Dubai Police, National Information Center of Saudi. “We also provide strong authentication solutions allowing companies to protect their applications, digital assets etc.”
Security With A Difference
IAN JONES, DIVISIONAL DIRECTOR, WESTCON SECURITY
Westcon-Comstor is set to shake the market with some big a nnouncements coming their way in 2018. At GISEC 2018, we got a chance to sit down with Ian Jones, Divisional Director, Security at Westcon ME. “It has been a great opening for us at GISEC and we could meet some meaningful customers. The security market is changing continuously and when it comes to change, we as a VAD have always been at the forefront of it,” says Ian. One of the biggest announcement is our global cloud market place rollout and addition of some major vendor to the portfolio. Apart from that the VAD has been heavily focusing on its ‘EDGE’. EDGE is Westcon-Comstor’s approach to every opportunity and their commitment to every partner. It provides a framework to help partners engage and onboard with our core services, develop their business with our portfolio of vendors, grow their business through new solutions, technologies, marketing and services, and extend their business by unlocking more profitable opportunities and expanding into new markets. Visit Westcon Security at GISEC 2018 to learn about the security portfolio comprising of vendors like Palo Alto Networks, Symantec, Arbor Networks, F5 Networks, ForeScout and SonicWall among others. You can also get a chance to win Apple iPad and other exciting prizes by sharing new leads.
GEC
SECUR TY SYMPOSIUM AND CISO AWARDS 2018
3 SEP
rd
2018
A SECURITY BLUEPRINT FOR THE DIGITAL ENTERPRISES BECAUSE SECURITY IS NEVER AN AFTER MATH!
FOR MORE VISIT: gecmediagroup.com CONTACT: anushree@gecmediagroup.com, ronak@gecmediagroup.com, divsha@gecmediagroup.com
BROUGHT BY
OFFICIAL MEDIA PARTNER
FOLLOW US: Enterprise Channels MEA - Magazine
EC_MEA
Enterprise Channels MEA
www.ec-mea.com