Connect with us

Tech Features

Provisioning and Deprovisioning – A Guide to Stronger Identity and Access Management

Published

on

Access Management

By: Christopher Hills, Chief Security Strategist, BeyondTrust

Across the Middle East, CIOs and CISOs huddle together to determine ways of making their organizations more secure so that digitalization can align with the vision of business leaders. No enterprise can afford to shut itself off from the digital economy. Whether it operates locally, regionally or globally, a business must build trust. And to do that, it must master the art of identity management. Therefore, it must understand the importance of provisioning and deprovisioning.

Provisioning is the name we give to the granting of privileges. This is a more granular process than onboarding, in which a new user account is created. Each user may have privileges granted at any time. And we should remember that not all users are humans — employees, contractors, customers, and so on. Privileges may be assigned to service accounts, machinery, and other resources. The purpose of provisioning is to maintain access while accounting for security and compliance standards.

To meet modern security standards, however, deprovisioning is just as important. Again, this does not just occur during offboarding. Privileges can be revoked all the time. Not because of a loss of trust in the person or asset that held them, but because it is best practice. Effective provisioning and deprovisioning is the foundation of a robust identity-centric security solution.

Covering the bases

Both are important. Overprovisioning can lead to a junior employee or overlooked service having unnecessary privileges, and under-deprovisioning can lead to a range of invisible issues such as unmonitored or orphaned accounts, or stale privileges. Special care must also be taken when adding or removing accounts to user groups — which carry with them a predetermined set of privileges —because these actions amount to provisioning and deprovisioning.

Any active account is a potential entry point, so it should come as no surprise that security best practice lies in minimizing the number of accounts and the access privileges they hold. If an account is no longer needed — an employee has resigned, a project has come to an end, or a range of other scenarios — then it should be disabled, deleted, or its rights downsized. Threat actors rely on organizations not following this simple practice.

Tools and tricks

Robust IAM will also include just-in-time (JIT) provisioning, which goes hand in hand with PoLP. When deprovisioning occurs, the timely revocation of access also occurs. Regularly reviewing and adjusting access rights is best practice because it prevents unnecessary permissions being exploited by malicious parties inside or outside the organization. All unused accounts should be placed in a disabled state and removed from all relevant security groups until such time as they can be reviewed and, if appropriate, deleted.

Identity and access management cannot be effective without the right tools to simplify provisioning and deprovisioning. This is because looking after the end-to-end lifecycle of identities, privileges, and entitlements is a complex task that has grown even more complex since the region’s mass migration to hybrid and multi-cloud environments. Identity management tools can streamline the creation, maintenance, and deletion of human and non-human accounts. Governance management tools enforce policies that limit access based on the assigned privileges. Lifecycle management tools are useful for ensuring (from onboarding to offboarding) that privileges always fit the role of an account owner. Privileged access management (PAM) enforces PoLP and provides a useful integration hub for other tools so that IT and security teams have single-pane control over everything that may impact identity security.

In a modern setting, provisioning and deprovisioning tools must offer automation and user behavior analytics, which means they must incorporate some flavor of AI or machine learning. To be consistent with the implementation of PoLP and other governance policies, variants of AI are necessary to minimize human error. Granting and revoking access rights in a company of even moderate size is a constant process that responds to changes in personnel and circumstances. While some of these situations may be subject to planning, others, such as real-time behavioral anomalies, are not. Threats can arise at a moment’s notice and only AI offers a practical option for timely response.

Be strong

Having established provisioning and deprovisioning as the keys to strong IAM, enterprises will find they can implement more effective lifecycle management of identities, privileges, and entitlements. As with any new measure, ongoing reviews will uncover any additional requirements, and adjustments can be made to cover new regulations, new assets, or new business models. As the identity landscape fluctuates, so should provisioning and deprovisioning strategies.

Define roles clearly. If an account owner does not need access to a resource, do not grant it (PoLP); and if they do, wherever possible, grant access only for as long as it is required (JIT). Disable and delete accounts where appropriate and monitor access across the entire ecosystem as often as is practical — quarterly or annually.

Following the guidance laid out here will strengthen your identity security posture. The modern threat actor is always on the lookout for gaps in your defenses. Unfortunately, these often take the shape of overprovisioned identities or abandoned accounts that have not been adequately addressed. The good news is that by applying the steps above, you can shore up defenses and protect the enterprise from the worst of the threats beyond its walls.  

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech Features

How hiring game is changing with fractional CMOs & CFOs becoming the new reality

Published

on


By Jürgen Salenbacher, Creative Leadership & Personal Brand Strategist, Founder of CPB-Lab. 

Consider a family-owned retail group in Dubai, third generation, four hundred staff, twenty-two stores. Its marketing director resigns. The instinct built over fifty years is to replace her: post the role, run a six-month search, pay a full package. Instead the board hires a chief marketing officer for nine days a month, who also works with a logistics scale-up in Riyadh and a hospitality brand in Doha. Twenty years ago that would have signalled a business in trouble. Today it signals a business paying attention.

Fractional leadership, meaning chief marketing, financial and technology officers holding part-time mandates across several companies at once, has moved from the start-up margins into the mainstream of the Gulf economy. Interim and fractional C-suite engagements have risen sharply worldwide since 2021. The UAE now counts more than 1.4 million registered companies, a quarter of a million added last year alone, and nine in ten GCC organisations reported a skills gap in 2025. The model is what happens when demand for judgement outruns the supply of executives who have done the job before.

Artificial intelligence is the accelerant. There is an old cartoon about the company of the future: a man, a machine and a dog, where the man feeds the dog and the dog makes sure the man doesn’t touch the machine. That is not what has happened. AI has not deleted the marketing department. It has collapsed the execution layer between a decision and its consequence.

Take that retail group. A full-year media plan across six markets in Arabic and English used to occupy four people for three weeks. A competent strategist now produces a defensible first version in an afternoon, with scenario models at three budget levels attached. The scarce thing is no longer the work. It is knowing that the real question was never the media plan, but whether the group should be defending its hypermarket position at all. That judgement takes twenty years to acquire and about four hours a week to apply. A region that appointed the world’s first minister of state for artificial intelligence in 2017 is feeling this shift faster than most boards have adjusted for.

The case in favour is strong. Cost is the obvious argument: senior expertise without the salary, bonus, visa and gratuity of a full package. Speed is the better one. A mid-market logistics company facing a funding round and a tax filing in the same quarter does not need a permanent CFO. It needs someone who has closed eleven rounds, embedded within three weeks for ninety days, who leaves behind a data room and a finance manager able to maintain it. Breadth matters too, since an executive advising four companies across three sectors carries pattern recognition no single-employer colleague can match. And the mandate is honest. Reid Hoffman described careers as a series of tours of duty, time-bound alliances built on ethics rather than the fiction of permanence. Both sides know the brief, and both know when it ends.

The case against deserves equal weight, and it matters more here than in most markets. Attention is divided by design. When a distribution partner walks away on a Tuesday, or a product recall lands, the fractional leader is on a call with another client. Accountability blurs, since an executive with three other mandates absorbs only a fraction of the consequence when a strategy fails. And knowledge leaves on the last day. The most common failure is not a bad strategy but an excellent one: a brilliant repositioning handed to three people who were never taught to run it, quietly abandoned by the following spring.

Then there is the deeper problem. Culture is the bridge between strategy and implementation, and culture is biological, growing at the pace of a tree rather than a quarter. Entropy is real: an ordered system left without energy drifts towards disorder. Trust cannot be installed part-time and left to hold while the installer is elsewhere. The word “company” comes from the Latin companio, one who eats bread with you. The majlis makes the same point without the etymology. In a family business here, an executive who appears for nine days and never sits at the table will find his recommendations politely received and quietly ignored, whatever his record elsewhere.

So the model works only under conditions. The first is that the fractional leader arrives to facilitate rather than instruct. Consulting is not the way forward, facilitating collective learning is. A CFO who instructs leaves a slide deck and a hole. One who facilitates spends the ninety days turning the finance manager into someone who no longer needs him. Instead of authority, inspiration. Instead of hierarchy, collaboration. Instead of delegation, participation.

The second condition is character, in four parts. Substance: genuine expertise, not a LinkedIn headline. Style: clarity in how a leader communicates and shows up. Conviction: a world view worth being held to. Grace: the elegance to enter someone else’s culture as a guest rather than an occupier.

The reality of tomorrow is not fewer leaders. It is leaders held differently, by invitation rather than org chart, by contribution rather than title. The movement runs from dependency, through independency, into an age of interdependency, and the fractional C-suite is an early expression of it.

Organisations want to work with the machines, not for them. The ones that remember the difference will attract the people worth having.

Continue Reading

Tech Features

Learning at the Speed of Change: Why Now Is the Moment for Continuous Capability

Published

on

By Afroz Nawaf, Founder of point a.cademy, Middlesex University Dubai

The typical career no longer follows a straight line. Alongside the traditional ‘study, then work’ pathway, something more fluid has emerged: learning, work, learning again. New skills and adapted roles. Back to learning.

By 2030, 39 per cent of workers’ core skills will change. It tells us something that the industry already feels: the pace of work has outrun the pace of learning. Students, skilled practitioners and hiring managers are asking one fundamental question: how do you move at the speed of change?

Three groups are already showing us what it can look like.

 Young people finishing secondary school can test their interests before committing to a pathway, building real work alongside practitioners and making far more informed decisions about what and where they want to study.

For students already at university, capability can be built in parallel with their degree: an engineering student learns to use AI for rapid prototyping, a business student applies AI to research and forecasting, a design student adds content creation or UX certification, while a film student develops AI-enabled workflows alongside their craft.

Mid-career professionals learn in compressed bursts. Someone pivoting industries takes a short course while maintaining their job. Micro-credential enrolments are up nearly 50 per cent year-on-year in 2026. People want capability built in layers, at their own pace, while maintaining work and life.

All three groups point to the same reframe. It’s not just about moving at the speed of change but doing so without abandoning depth. The answer emerging in the market is a fundamental shift in how learning is structured, shaped around people’s time, resources and ambitions.

When point a.cademy opened in early 2026, as an enterprise within Middlesex University Dubai, the market responded decisively. Our capability-building academy offers short, intensive courses in Film, Content, Design and AI, taught over one to five days, at industry standard. Within the first month, 500+ learners signed up, with multiple pathways booking out completely. 240 courses have been completed, with 37.5% of eligible learners continuing into further courses. This continuation rate matters. Learners aren’t stopping after one certificate, they are stacking capability and moving to the next course.

What we validated from these first cohorts is that different people move through compressed learning at fundamentally different rhythms. Some absorb rapidly through immersion, then need time to process. Others build gradually, testing each step. Some need tangible output, a project or a prototype, before concepts land, while others need conceptual grounding before they can engage. In a compressed learning environment, personalisation becomes particularly important, giving us the room to build on the different ways people engage with and apply knowledge. This is why we design courses around eight distinct learning personas, from the tentative newbie who needs confidence-building and the hands-on maker who learns through doing, to the serial pivoter, the purpose-seeker, the sponge who learns through rapid immersion, the chaos creative, the conceptual thinker, and late bloomer who takes their time. Each reflects a different way of engaging with learning.

When a three-day intensive respects the person, their rhythm, motivation and way of thinking, moving at speed does not mean losing the individual; it means creating learning experiences that respond to how different people engage, process and apply knowledge. Research supports this. In a review of personalised adaptive learning research, 59 per cent of studies reported improved performance.

The proof is in the applied work. More than 100 Middlesex University Dubai staff completed certifications through point a.cademy. These are not certificates simply hanging on walls; one staff member redesigned key internal processes using the Design for Storytelling frameworks they learned, creating more compelling messaging for prospective students. Another improved digital services with AI tools. A third redesigned administrative processes, cutting student ID card processing time by 74%. This is what moving at the speed of change looks like in practice: learn, apply, deliver, iterate. Not learn and apply later.

The human element matters more, not less, as AI reshapes every role. The people who move at market pace are not those who simply use AI. They bring human judgement, creativity, ethical thinking and specialist knowledge to it. That capability requires continuous, applied learning in parallel with work.

Education institutions that recognise this are expanding their role into lifelong learning ecosystems, creating end-to-end learning loops that allow people to enter, return and continue building capability at different stages of their lives. Short courses, studios and industry experiences can sit alongside rigorous degree education, extending a university’s reach beyond traditional cohorts and creating a broader community of lifelong learners. Institutions such as Middlesex University Dubai are already exploring this model, connecting academic foundations with applied, continuous learning experiences that allow their communities to keep evolving long after a single programme ends.

The market is moving. The question is no longer whether learning will change. It has. The real question is how education systems will evolve to meet it: how do learners move at the speed of change without losing the individual in the rush?

Continue Reading

Tech Features

Building the AI-Ready Data Center in the Middle East

Published

on

Why Advanced Network Infrastructure Is the Backbone of the Digital Economy


Roque Lozano, Senior Vice President of Network Infrastructure, Middle East and Africa, Nokia

Artificial intelligence (AI) is reshaping the digital economy at an unprecedented pace. Across industries, organizations are embracing AI to unlock new efficiencies, accelerate innovation, and create more personalized experiences. Yet behind every AI application, cloud platform, and digital service lies a critical foundation that often receives far less attention than the technologies it enables: the network infrastructure that connects the modern data center.

As digital transformation accelerates, data centers have become some of the most strategic assets in today’s economy. They support everything from enterprise applications and cloud services to digital government platforms and AI workloads. Their growing importance is reflected in the scale of investment flowing into the sector. The Middle East hyperscale data center market is expected to grow from USD 4.61 billion in 2025 to USD 16.38 billion by 2031, expanding at a CAGR of 23.53 percent. At the same time, investment in data center infrastructure is expected to reach unprecedented levels. McKinsey estimates that meeting future compute demand could require as much as $6.7 trillion in global data center investment by 2030. These figures highlight not only the growing demand for digital services, but also the increasing importance of the infrastructure that supports them.

However, the AI era is creating challenges that extend well beyond adding more computing power. The performance of modern data centers is increasingly determined by the efficiency of the networks operating within them. Importantly, such efficiency encompasses more than high-volume throughput and continuous uptime. It incorporates stringent requirements around data privacy and integrity, alongside strict performance metrics like deterministic latency and rapid service provisioning.

Unlike traditional applications, AI and high-performance computing workloads generate enormous volumes of east-west traffic as data moves continuously between servers, storage systems, GPUs, and CPUs. Training large AI models requires thousands of processors to communicate simultaneously, making low latency and high-capacity connectivity essential to maintaining performance. As AI models become larger and more sophisticated, the demand for 400 Gigabit Ethernet (GE) and 800GE optical networking architectures is growing rapidly to support the scale and speed these environments require.

This shift is changing the way data center infrastructure is designed. AI-ready environments require networks capable of scaling seamlessly across thousands of servers while maintaining deterministic latency, intelligent traffic engineering, and ultra-high throughput. In effect, the network is becoming just as critical as the computing resources themselves.

Meeting these requirements demands innovation across IP routing, data center switching, and optical transport technologies. Advances in routing silicon and switching platforms are helping operators build networks that can support increasingly complex workloads while maintaining efficiency and reliability. Technologies such as Nokia’s FP5 network processor silicon deliver the high-capacity performance required for modern digital infrastructure while improving energy efficiency compared with previous generations. Similarly, the Nokia 7250 Interconnect Router portfolio is designed to support hyperscale environments through high-density Ethernet connectivity and open networking architectures that enable efficient scaling as demand grows.

Across the Middle East, operators are already evolving their networks to prepare for the next wave of AI-driven growth. Nokia has been collaborating with leading service providers across the entire MEA market, primarily in the Gulf, but across Africa as well, on IP and optical network modernization initiatives aimed at increasing capacity, improving resilience, and supporting growing cloud and data traffic demands. Recent projects in the region, including a 1Tbps data center connectivity deployment spanning hundreds of kilometers in Saudi Arabia, AI-powered optical network automation trials in the UAE, and enhanced cloud interconnection capabilities for hyperscale environments, illustrate how network infrastructure is being modernized to meet rising data and AI demands. These efforts reflect a broader regional focus on building digital infrastructure capable of supporting long-term economic and technological growth.

Performance, however, is only one side of the equation. Sustainability is becoming an equally important consideration as data center capacity expands.

According to the International Energy Agency’s Electricity 2026 report, electricity demand from data centers worldwide is expected to more than double by 2030, driven largely by AI workloads and accelerated computing requirements. As operators balance performance objectives with sustainability commitments, energy-efficient networking infrastructure will play a critical role in reducing operational costs and limiting environmental impact.

This is where advances in networking technology can make a meaningful difference. Modern silicon innovations and optical transport platforms are enabling operators to deliver significantly higher capacity while consuming less power, helping support both traffic growth and sustainability goals. As data volumes continue to rise, achieving greater efficiency across the network will become increasingly important.

The stakes are particularly high in the GCC, where governments are investing heavily in digital infrastructure to support AI, cloud computing, and smart city initiatives. The UAE, Saudi Arabia, and Qatar are positioning themselves as regional hubs for hyperscale cloud providers and AI research centers, creating new opportunities for innovation and economic diversification.

Realizing these ambitions will depend on more than the construction of new data centers. It will require high-performance network infrastructure capable of connecting hyperscale facilities, edge computing sites, enterprise clouds, and national digital platforms into a seamless digital ecosystem. As these national platforms come online, sovereignty, resilience, and security become defining requirements: networks must keep sensitive data and AI inferencing in-country, withstand disruption, and meet the trust standards of mission-critical government and enterprise operations.

As the region continues its digital transformation journey, the conversation around data centers must evolve beyond computing power alone. The future of AI will depend not only on the intelligence of algorithms, but also on the networks that enable data to move securely, efficiently, and on scale. Very significantly, these networks will enable the consumption of a new generation of AI-boosted cloud services, driving the consumption needed to generate the ROI required by this promising AI supercycle. Building AI-ready data centers therefore starts with building AI-ready networks, creating the resilient digital foundations that will power the next chapter of growth across the Middle East.

Continue Reading

Trending

Copyright © 2023 | The Integrator