Artificial intelligence is becoming a powerful defensive capability in the Middle East, yet it simultaneously introduces a new attack surface for organisations. BDO UAE Director Madan Mohan, who has over 19 years of experience across banking, insurance, and manufacturing, argues that the technology is reshaping enterprise strategy by shifting cybersecurity from a technical compliance issue to a central business risk.
Madan Mohan observes that the role of cybersecurity has evolved significantly over the past two decades. Early on, organisations treated security as an IT responsibility focused on perimeter protection and regulatory adherence. Today, cyber risk is recognised as an enterprise-wide issue that directly impacts revenue, reputation, and operational resilience.
CISOs and risk professionals now participate in board-level discussions and digital transformation initiatives. Modern governance frameworks help organisations balance innovation with security by embedding risk management into business decision-making processes. The increasing sophistication of threats and stricter regulations have pushed the focus from reactive security to proactive risk management and continuous monitoring.
Effective governance enables organisations to pursue growth while maintaining trust in an interconnected digital economy. Cybersecurity has moved beyond being viewed as a cost centre to becoming a strategic function that supports competitive advantage and sustainable business success.
Related: Digitalisation and Urbanisation to Drive Philippine Retail Growth
Gaps in current governance
Despite the shift in perception, Madan Mohan notes that many organisations still struggle with implementation. A common gap is the lack of board-level visibility and ownership of cyber risk, as many continue to treat security as an IT issue rather than an enterprise-wide responsibility.
Other frequent problems include unclear roles and responsibilities, weak third-party risk management, and outdated policies. Organisations often struggle with continuous monitoring and measuring the effectiveness of security controls. This results in compliance-driven programmes that may not build true resilience against modern threats.
Mature organisations demonstrate a strong security governance framework with active executive oversight. Key indicators include a risk-based security programme, continuous monitoring, timely detection of incidents, and effective vulnerability management. Robust third-party risk management and full employee awareness programmes also reflect a proactive cybersecurity environment.
The dual nature of AI in security
Artificial intelligence is transforming security operations by improving the speed, accuracy, and scale of threat detection. Organisations are using AI tools to analyse vast amounts of security data, identify anomalies, and automate incident response. This reduces the workload on security teams while enhancing threat intelligence and fraud detection.
Related: Digital Dollar Systems Gain Global Traction
However, the technology is also creating new categories of risk. Threat actors are leveraging AI to develop more sophisticated phishing attacks and automate malware creation. Deepfake-enabled fraud and targeted social engineering campaigns have become more prevalent as the technology becomes more accessible.
The growing adoption of AI introduces challenges related to data privacy, model security, and algorithmic bias. Organisations must address risks such as unauthorised AI usage and data leakage through AI platforms. To manage these challenges, cybersecurity programmes must evolve to include AI governance, model risk management, and secure development practices.
Ultimately, AI will function as both a defensive capability and a new attack surface. Organisations that establish strong AI governance frameworks will be better positioned to harness the benefits of the technology while minimising emerging risks.
