Tech News
RACE Model: Building Cyber Resiliency and Mitigating Network Risks by Going Back to Basics
By H.E. Dr. Mohamad Al Kuwaiti, Head of Cybersecurity, UAE Government, and Dr. Aloysius Cheang, Chief Security Officer, Huawei Middle East & Central Asia

Jim Rohn once famously said, “Without a sense of urgency, desire loses its value.” Resilience is key to surviving in today’s world full of emerging technologies and hot-button buzzwords. It is a race towards all that is good, towards cyber survivability, a race of the utmost urgency and importance. As such, cybersecurity and, in particular, cyber resiliency is more than just having an incident response plan or a computer security policy. It is about ensuring that your entire security posture can withstand a wide range of threats, which includes hybrid, blended attack vectors that can transcend time and space through the interplay of physical, cyber, and virtual planes that take apart traditional brick-and-mortar aspects of any organizations and cross-borders jurisdiction.
Hence, we need to design a more holistic security framework by integrating cyber and physical security measures, hardening critical systems, and creating cross-functional teams and multi-disciplinary teams that will involve team members not only from our own organization but also from other stakeholders in our ecosystem that can address risks from multiple angles. Indeed, designing an auto-adaptable, self-evolving security framework that will evolve alongside the volatile and rapidly evolving threat landscape will be crucial to maintaining cyber resiliency and, therefore, safeguarding the business in the new intelligent era. But, without a doubt, there’s an urgent need to prioritize building cyber resiliency above all other matters.
Leonardo Da Vinci said, “I have been impressed with the urgency of doing. Knowing is not enough. We must apply. Being willing is not enough. We must do.” To build resilience, having a lofty mission statement with an ambitious plan is definitely not enough; the efforts must be grounded in the practicality of getting our hands dirty and being able to paddle in and out of the mudflats regardless of how much the mud will engulf you.
Figure 1 shows our proposed RACE model as a simple four-part process to look at how organizations can build cyber-resiliency with a feasible and actionable plan to achieve our objective of securing any organization by going back to basics. By going back to basics and doing them well, it will at least address 90% of the problems that most organizations are facing today. The solution needs not to be complex nor flamboyant; it just needs to be practical, and if one can cut through the levels of complexity and zero in on the crux of the problem and put in place basic security controls that are effective and efficient, it will lay the groundwork for success.
Borrowing the analogy of racing, would you be driving a race car that has a manual gearbox for full control and is tuned for the race track, or would you just take any car straight from the garage untuned for the conditions of the race track and relying on the car’s automatic gearbox to take care of the driving? Thus, it is clear that returning to basics and tuning your security measures for accuracy and precision is a much better bet than pouring huge investments into advanced systems and mechanics, building layers and layers of security indiscriminately.
Being accurate and precise will enable us to build quantifiability into our cybersecurity program. Accuracy and precision are both ways to measure results. Accuracy measures how close results are to the true or known value, while precision, on the other hand, measures how close results are to one another or, in other words, how well our defenses are designed and executed. This is our motivation behind the development of the RACE model. The subsequent paragraph will describe each key component of the model in greater detail.

Figure 1: The RACE model, a simple 4-part plan for building cyber resilience
Firstly, resiliency in modern cybersecurity speaks to the capability to provide value for the customer. In simplistic terms, it is to provide robustness and survivability of the organization’s cyber footprint in the face of adversaries and threats, meet compliance needs for business governance while excelling and providing a competitive advantage, using whatever security capabilities are based on established best practices, processes, and frameworks that achieve repeatable results. Figure 2 below summarizes what it takes to build cyber resilience and the value it brings to the table, taking into consideration the interplay between being compliance and building capabilities to support the resiliency of the entire information infrastructure that supports the business of an organization.

Figure 2: Building trust, enhancing cyber resilience, and mitigating risks in action
Next, awareness refers not only to imbuing a culture of cybersecurity among all the staff in an organization to the extent that basic cyber hygiene can be practiced but also to targeting the team focusing on delivery and maintaining ICT and security services within the organization so that they pay attention to cementing their core competencies and fundamentals. Hereby, it is recommended that harnessing risks and hedging your bet against the barrage of threats based on a risk-based approach is the best way, given that resources on hand are always scarce, limited, and, to some extent, expensive. Given that is the case, we have identified five basic core fundamentals that every cybersecurity team in any organization needs to build up on their basics (and manage them well) based on common cybersecurity issues faced, as depicted in Figure 3. While it may seem simple, the devil is always in the details to ensure a job is done well.

Figure 3: Managing five common risks (end-to-end) comprehensively as a basis for building cyber resilience
One man, organization, or country cannot resolve cybersecurity issues alone. It takes an entire village to address cybersecurity issues as they affect everyone if anything goes awry. Cybersecurity is a team sport, and all the stakeholders within the ecosystem must contribute towards addressing the elephant in the room, as shown in Figure 4. We always find strength in numbers because “united we stand, divided we fall.” We see the Blackhat community is doing that exactly, and that is why they are always a step ahead of the good guys every time, thereby summarizing the urgency to Collaborate as a key differentiating measure.

Figure 4: Cybersecurity is a team sport. So, who is on the team?
Last but not least, we need to bring everything together to build or Engineer the process, putting the cogwheels into their rightful places to drive the engine forward. We have identified five key fundamental security measures that, if done diligently, will be key to building an end-to-end resilient system and reducing network risks.
As shown in Figure 3, the five key fundamental security measures are 1) software integrity protection, 2) security configuration, 3) digital certification management, 4) vulnerability remediation, and 5) product lifecycle management. Take “Security configuration” as an example. To engineer and address the risk brought about by system misconfiguration, we need to break it down into its elements or identify its Work Breakdown Structure or WBS, which is a key step for planning project tasks and allocating resources.

Figure 5: Security Configuration Example: Optimize the Security Configuration Baseline based on Service Scenarios
Figure 5 summarizes typical work done to break down “security configuration” into its WBS. While this figure does not depict the complete picture, it does show a deep dive into each piece of work. One should keep working on breaking it down until the project scope and all the tasks required to complete the project can be visualized in one snapshot.
In conclusion, we have distilled the entire RACE model in detail in this paper. Achieving RACE is key to building resiliency for any organization. The important thing to note is to keep it simple and go back to basics. Build an auto-evolving, adaptable security framework based on the strategy that is designed to shape-shift alongside emerging blended, hybrid threats by leveraging on actionable intelligence, building resilience, and fostering collaboration so that individuals, organizations, and nations. Establishing public-private partnerships (PPP) with governmental entities and authorities enables public sector players, such as the UAE Cyber Security Council, to act as the fulcrum for coordinating and pooling resources and intelligence. This will enable our modern society to defend against today’s threat and safeguard one’s digital journey by addressing the challenges of tomorrow’s Age of Intelligence.
Tech News
NETSCOUT STRENGTHENS OPERATIONAL RESILIENCE OF CRITICAL INFRASTRUCTURE AGAINST AI-DRIVEN, INTERNET-SCALE DDoS ATTACKS

NETSCOUT® (NASDAQ: NTCT), a leading provider of observability, AIOps, cybersecurity, and DDoS attack protection solutions, today announced continued investments in infrastructure and technology to double its Arbor® Cloud DDoS attack mitigation capacity to 33 Tbps, which is aimed at keeping critical digital services available during DDoS attacks, protecting revenue-generating digital operations, supporting always-on AI-driven businesses, and maintaining customer trust.
This capacity enhancement, coupled with NETSCOUT’s recent acquisition of DDoS network and infrastructure, reinforces the company’s commitment to delivering industry-leading cloud-based DDoS defense at global scale. By fully owning and securing end-to-end control over the platform, NETSCOUT has a clear path to scale innovative, resilient services for customers worldwide. Unlike cloud mitigation services that merely add bandwidth, Arbor Cloud combines global mitigation capacity with global threat intelligence, drawing on NETSCOUT’s unparalleled visibility into real-world internet attack activity. Spanning 16 global scrubbing centers, this significant increase in capacity equips customers with the ability to defend against the growing scale, frequency, and sophistication of DDoS attacks by consistently balancing mitigation capacity across all attack vectors in their environments.
According to Markets and Markets, the DDoS protection market size is expected to continue to grow, driven by increasingly sophisticated attacks and accelerated cloud adoption. Today, multi-vector attacks are the norm. Bad actors are launching more simultaneous attacks as well as quick hit and run attacks, forcing shorter response times from defenders. In addition, mega-botnets like Aisuru and Kimwolf have raised the ceiling on attack sizes with a few attacks approaching or exceeding 30 Tbps. Enterprises and service providers have a compelling need right now to improve the protection levels of their critical digital infrastructure.
“With the increased use of AI, threat actors are targeting organizations whose defenses are vulnerable to the new, more complex DDoS attacks designed to take down critical infrastructure,” stated Carlos Morales, SVP and general manager, Arbor Cloud, NETSCOUT. “As enterprises increasingly rely on AI-powered applications and cloud-native services, while at the same time, attack size and complexity continue to rise, implementing automated and proactive defenses for uninterrupted availability has become a business risk imperative. Arbor Cloud plays a key role in achieving that objective.”
Increasing Arbor Cloud capacity provides significant advantages, including:
- Greater intelligent mitigation capacity – absorbs and blocks larger volumetric and more sophisticated attacks without losing effectiveness.
- Multiple threat mitigation – handles multiple concurrent targets (e.g., from carpet bombing attacks) or multiple attack vectors simultaneously.
- Consistent operational performance – protects critical infrastructure, ensuring capacity does not become a constraint as attack size and frequency increase.
- Faster stabilization post spikes – acts as a shield wall preventing attacks from reaching customer infrastructure and creating collateral damage that lasts well beyond when the actual attack subsides.
- Operational confidence – provides added assurance for mission-critical sectors, like financial services, hospitals, retail, and the public sector, which require that protection remains available when legitimate traffic surges and cyberattacks occur simultaneously.
Arbor Cloud plays a critical role as part of NETSCOUT’s multi-layered, adaptive DDoS protection, combining on-premises DDoS defense with cloud-based traffic scrubbing services that are tightly integrated via automated cloud signaling. This hybrid design stops attacks as close to the source as possible while seamlessly absorbing loud volumetric attacks in the cloud. Offering comprehensive global protection, Arbor Cloud is supported by a 24×7 Security Operations Center staffed by NETSCOUT’s DDoS protection experts. The capacity expansion is expected to be fully completed by the end of August 2026.
This investment reinforces NETSCOUT’s long-standing leadership in DDoS protection by combining one of the world’s largest dedicated DDoS mitigation networks with decades of cyber defense expertise, industry-leading threat intelligence, and global Internet visibility. As digital infrastructures continue to evolve rapidly, and AI accelerates both innovation and cyber threats, NETSCOUT remains committed to providing organizations with the scale, intelligence, and operational resilience required to confidently protect what matters most.
Tech News
Dynatrace Brings Autonomous Operations to Enterprise AI, Moving from Insight to Action

Dynatrace (NYSE: DT), the leading AI-powered observability platform, announced major advancements to Dynatrace Intelligence that help automatically resolve incidents, prevent disruptions, and accelerate operations while maintaining the human oversight and governance enterprises require.
Building on the introduction of Dynatrace Intelligence earlier this year, Dynatrace is adding new autonomous agents for incident triage and remediation, and no-code custom agent creation capabilities. The platform is also expanding its ecosystem of integrations, bringing insights directly into the tools and workflows teams already use.
AI systems typically lack the real-time context and controls to make reliable decisions, with most AI initiatives promising automation but often unable to deliver on production goals. Dynatrace addresses this by combining agentic AI with deterministic, real-time understanding of complex environments, creating AI that acts on facts, not guesses.
“Our operations teams are under constant pressure to manage increasingly complex environments while maintaining reliability and speed,” said Angel Marchena, Director of Technical Operations at Western Governors University. “Dynatrace helps us reduce manual effort by providing automation that is grounded in real-time context, which allows our teams to focus on higher-value work while improving operational outcomes.”
How Dynatrace Intelligence Works
Dynatrace Intelligence goes beyond providing answers to acting on them automatically. The release introduces:
- Autonomous SRE Agent: Triggers autonomously on newly detected problems to determine whether they are part of an existing investigation. If confirmed, the agent enriches the investigation with additional insights and updates the detected problem with a reference to the ongoing investigation.
- Cloud SRE Agent: Coordinates remediation activities and integrates with agents across AWS, Microsoft Azure, and Google Cloud environments, centralizing findings to provide a single auditable record for autonomous operations.
- Agent Builder: Enables customers to create and deploy custom AI agents without code, extending autonomous operations to workflows unique to their environments.
- Enhanced Dynatrace Assist: Newcapabilities bring natural-language investigation and agent-ready workflows to even more users.
- Expanded Integration Ecosystem: New integrations with hyperscalers like AWS, Azure and Google; enterprise platforms like ServiceNow, Atlassian, and PagerDuty; developer tools and leading AI technologies enable teams to resolve and remediate across the systems they already use.
AI That Acts on Answers, Not Guesses
Unlike approaches that rely primarily on probabilistic outputs, Dynatrace Intelligence grounds every action in deterministic, real-time system understanding. Every action is rooted in environment-specific context and designed to be transparent, auditable, and governed – giving enterprises the confidence to automate increasingly complex operational workflows.
“Most observability platforms stop at data – leaving humans to find answers, determine what to do, and execute,” said Steve Tack, Chief Product Officer at Dynatrace. “With these advancements to Dynatrace Intelligence, we’re helping organizations move from understanding problems to resolving them automatically. By grounding agentic AI in deterministic context, Dynatrace enables enterprises to automate operations with confidence while maintaining governance and control.”
“Enterprises investing in AI-driven observability have an opportunity to turn data into intelligence that translates into trusted, autonomous action,” said Stephen Elliot, Group VP, IDC. “The gap between AI-generated insight and safe, governed execution is one of the biggest concerns; customers need a deterministic, real-time context with automation and auditability to drive trusted and reliable outcomes.”
Cloud SRE Agent, Enhanced Dynatrace Assist, and the expanded integration ecosystem are available to SaaS customers on DPS today. Autonomous SRE Agent and Agent Builder are expected to be available in August.
Tech News
GCC Mega Developments Could Generate Up to a Third of Electricity Demand with On-Site Solar, BCG Finds
Large-scale urban developments across the Gulf could generate up to approximately one-third of their electricity demand while reducing costs by a similar margin, according to a new report from Boston Consulting Group (BCG) on renewable-powered cities.
The report, titled Mega-Projects Powered by Renewables: A Practical Playbook for Saudi Arabia, highlights how integrating solar energy directly into development design can unlock significant economic, environmental, and operational benefits. The findings are based on modelling of large-scale developments in high-irradiance Gulf markets and reflect conditions increasingly common across the region.
While the underlying analysis draws on conditions observed in the Kingdom of Saudi Arabia (KSA), the implications are relevant across GCC mega-developments where high solar irradiance, large master-planned footprints, and evolving self-consumption frameworks create similar opportunities.
As GCC countries accelerate investment in new cities, mixed-use districts, and economic zones, the report identifies on-site renewables as one of the most underutilized levers in shaping cost-efficient and future-ready urban infrastructure. Analysis of large-scale developments in the region shows that up to 35% of electricity demand can be met through on-site solar, depending on design, density, and local regulatory frameworks. These findings suggest that electricity costs could be reduced by a comparable margin, particularly where developers leverage power purchase agreements or energy-as-a-service models requiring no upfront capital investment.
“The region’s mega developments represent a generational opportunity to reshape how we think about urban energy infrastructure,” said Edoardo Geraci, Managing Director & Partner, BCG. “Developers in the region who integrate renewables from the master planning stage are not only reducing their operational costs but also future-proofing their assets against evolving carbon regulations and energy price volatility. The economic case has never been stronger.”
The report reveals that individual assets can achieve meaningful levels of self-sufficiency, a single family villa can meet about 50% of its annual electricity needs, while a mid-rise building with higher load density typically achieves about 15%, depending on design and orientation. These results show that even without additional land, rooftop solar alone can deliver 35 MWh/year for single-family villas and 190 MWh/ year for mid-rise buildings, with substantial gains in both cost efficiency and emissions reductions. Early deployment is already underway across the GCC, with multi-megawatt installations in residential, commercial, and industrial assets demonstrating both technical and commercial viability.
The report challenges three common misconceptions: that solar is too space-intensive for dense urban environments, that it requires prohibitive upfront investment, and that implementation is too complex. In practice, rooftop systems, building-integrated photovoltaics, carports, and shaded structures can be incorporated without additional land, while third-party financing models can remove upfront capital requirements.
“What makes this moment particularly compelling is that the perceived barriers to adoption have largely been dismantled,” said Peter Jameson, Managing Director & Partner, BCG. “Modern solar solutions can be seamlessly integrated into rooftops, facades, and shade structures without compromising architectural vision. Financing innovations have removed upfront capital requirements entirely for many developers. The projects that act now will define the benchmark for sustainable urban development across the region.”
The report emphasizes that beyond economic advantages, renewable energy infrastructure can serve a dual purpose in Gulf developments: generating power while shaping a distinctive urban identity. Solar canopies, building-integrated photovoltaics, and interactive energy features offer developers the opportunity to transform sustainability from background infrastructure into a signature urban asset, enhancing appeal for residents, visitors, and investors. The playbook urges developers to size opportunities early, orchestrate stakeholder alignment from the outset, and embed renewable considerations into master planning to avoid costly retrofits and maximize long-term value.
-
News11 years ago
SENDQUICK (TALARIAX) INTRODUCES SQOOPE – THE BREAKTHROUGH IN MOBILE MESSAGING
-
Trending9 months agoOPPO A6 Pro 5G Review: Reliable Daily Driver
-
Tech News2 years agoDenodo Bolsters Executive Team by Hiring Christophe Culine as its Chief Revenue Officer
-
VAR1 year agoMicrosoft Launches New Surface Copilot+ PCs for Business
-
Automotive2 years agoAGMC Launches the RIDDARA RD6 High Performance Fully Electric 4×4 Pickup
-
Tech Interviews2 years ago
Navigating the Cybersecurity Landscape in Hybrid Work Environments
-
Tech News1 year agoNothing Launches flagship Nothing Phone (3) and Headphone (1) in theme with the Iconic Museum of the Future in Dubai
-
VAR2 years agoSamsung Galaxy Z Fold6 vs Google Pixel 9 Pro Fold: Clash Of The Folding Phenoms


