Tech News

RACE Model: Building Cyber Resiliency and Mitigating Network Risks by Going Back to Basics

Published

2 years ago

February 11, 2025

By H.E. Dr. Mohamad Al Kuwaiti, Head of Cybersecurity, UAE Government, and Dr. Aloysius Cheang, Chief Security Officer, Huawei Middle East & Central Asia

Jim Rohn once famously said, “Without a sense of urgency, desire loses its value.” Resilience is key to surviving in today’s world full of emerging technologies and hot-button buzzwords. It is a race towards all that is good, towards cyber survivability, a race of the utmost urgency and importance. As such, cybersecurity and, in particular, cyber resiliency is more than just having an incident response plan or a computer security policy. It is about ensuring that your entire security posture can withstand a wide range of threats, which includes hybrid, blended attack vectors that can transcend time and space through the interplay of physical, cyber, and virtual planes that take apart traditional brick-and-mortar aspects of any organizations and cross-borders jurisdiction.

Hence, we need to design a more holistic security framework by integrating cyber and physical security measures, hardening critical systems, and creating cross-functional teams and multi-disciplinary teams that will involve team members not only from our own organization but also from other stakeholders in our ecosystem that can address risks from multiple angles. Indeed, designing an auto-adaptable, self-evolving security framework that will evolve alongside the volatile and rapidly evolving threat landscape will be crucial to maintaining cyber resiliency and, therefore, safeguarding the business in the new intelligent era. But, without a doubt, there’s an urgent need to prioritize building cyber resiliency above all other matters.

Leonardo Da Vinci said, “I have been impressed with the urgency of doing. Knowing is not enough. We must apply. Being willing is not enough. We must do.” To build resilience, having a lofty mission statement with an ambitious plan is definitely not enough; the efforts must be grounded in the practicality of getting our hands dirty and being able to paddle in and out of the mudflats regardless of how much the mud will engulf you.

Figure 1 shows our proposed RACE model as a simple four-part process to look at how organizations can build cyber-resiliency with a feasible and actionable plan to achieve our objective of securing any organization by going back to basics. By going back to basics and doing them well, it will at least address 90% of the problems that most organizations are facing today. The solution needs not to be complex nor flamboyant; it just needs to be practical, and if one can cut through the levels of complexity and zero in on the crux of the problem and put in place basic security controls that are effective and efficient, it will lay the groundwork for success.

Borrowing the analogy of racing, would you be driving a race car that has a manual gearbox for full control and is tuned for the race track, or would you just take any car straight from the garage untuned for the conditions of the race track and relying on the car’s automatic gearbox to take care of the driving? Thus, it is clear that returning to basics and tuning your security measures for accuracy and precision is a much better bet than pouring huge investments into advanced systems and mechanics, building layers and layers of security indiscriminately.

Being accurate and precise will enable us to build quantifiability into our cybersecurity program. Accuracy and precision are both ways to measure results. Accuracy measures how close results are to the true or known value, while precision, on the other hand, measures how close results are to one another or, in other words, how well our defenses are designed and executed. This is our motivation behind the development of the RACE model. The subsequent paragraph will describe each key component of the model in greater detail.

Figure 1: The RACE model, a simple 4-part plan for building cyber resilience

Firstly, resiliency in modern cybersecurity speaks to the capability to provide value for the customer. In simplistic terms, it is to provide robustness and survivability of the organization’s cyber footprint in the face of adversaries and threats, meet compliance needs for business governance while excelling and providing a competitive advantage, using whatever security capabilities are based on established best practices, processes, and frameworks that achieve repeatable results. Figure 2 below summarizes what it takes to build cyber resilience and the value it brings to the table, taking into consideration the interplay between being compliance and building capabilities to support the resiliency of the entire information infrastructure that supports the business of an organization.

Figure 2: Building trust, enhancing cyber resilience, and mitigating risks in action

Next, awareness refers not only to imbuing a culture of cybersecurity among all the staff in an organization to the extent that basic cyber hygiene can be practiced but also to targeting the team focusing on delivery and maintaining ICT and security services within the organization so that they pay attention to cementing their core competencies and fundamentals. Hereby, it is recommended that harnessing risks and hedging your bet against the barrage of threats based on a risk-based approach is the best way, given that resources on hand are always scarce, limited, and, to some extent, expensive. Given that is the case, we have identified five basic core fundamentals that every cybersecurity team in any organization needs to build up on their basics (and manage them well) based on common cybersecurity issues faced, as depicted in Figure 3. While it may seem simple, the devil is always in the details to ensure a job is done well.

Figure 3: Managing five common risks (end-to-end) comprehensively as a basis for building cyber resilience

One man, organization, or country cannot resolve cybersecurity issues alone. It takes an entire village to address cybersecurity issues as they affect everyone if anything goes awry. Cybersecurity is a team sport, and all the stakeholders within the ecosystem must contribute towards addressing the elephant in the room, as shown in Figure 4. We always find strength in numbers because “united we stand, divided we fall.” We see the Blackhat community is doing that exactly, and that is why they are always a step ahead of the good guys every time, thereby summarizing the urgency to Collaborate as a key differentiating measure.

Figure 4: Cybersecurity is a team sport. So, who is on the team?

Last but not least, we need to bring everything together to build or Engineer the process, putting the cogwheels into their rightful places to drive the engine forward. We have identified five key fundamental security measures that, if done diligently, will be key to building an end-to-end resilient system and reducing network risks.

As shown in Figure 3, the five key fundamental security measures are 1) software integrity protection, 2) security configuration, 3) digital certification management, 4) vulnerability remediation, and 5) product lifecycle management. Take “Security configuration” as an example. To engineer and address the risk brought about by system misconfiguration, we need to break it down into its elements or identify its Work Breakdown Structure or WBS, which is a key step for planning project tasks and allocating resources.

Figure 5: Security Configuration Example: Optimize the Security Configuration Baseline based on Service Scenarios

Figure 5 summarizes typical work done to break down “security configuration” into its WBS. While this figure does not depict the complete picture, it does show a deep dive into each piece of work. One should keep working on breaking it down until the project scope and all the tasks required to complete the project can be visualized in one snapshot.

In conclusion, we have distilled the entire RACE model in detail in this paper. Achieving RACE is key to building resiliency for any organization. The important thing to note is to keep it simple and go back to basics. Build an auto-evolving, adaptable security framework based on the strategy that is designed to shape-shift alongside emerging blended, hybrid threats by leveraging on actionable intelligence, building resilience, and fostering collaboration so that individuals, organizations, and nations. Establishing public-private partnerships (PPP) with governmental entities and authorities enables public sector players, such as the UAE Cyber Security Council, to act as the fulcrum for coordinating and pooling resources and intelligence. This will enable our modern society to defend against today’s threat and safeguard one’s digital journey by addressing the challenges of tomorrow’s Age of Intelligence.

Tech News

Anomali to Address the Next Phase of AI-Led Cyber Defense at GISEC 2026

Published

4 days ago

September 4, 2026

Integrator Web-Editor

Anomali, the leading global Managed Intelligence and Agentic SOC platform, announced its participation at GISEC Global 2026, taking place through 16-18 September at Dubai Exhibition Centre (DEC), Expo City.

The company’s discussions at GISEC will center on Autonomous SOC with Governed AI, Agentic AI, Actionable Threat Intelligence and Unified Security Data Lake capabilities that are changing the manner in which security teams investigate threats, manage workflows and make decisions.

Samer Jadallah, Vice President, Middle East & Africa at Anomali, will represent the company at GISEC and will focus on the growing impact of AI on both attackers and defenders, emerging shifts in the threat landscape, including the need to counter CEO impersonation attacks as well as key challenges facing modern security teams. He will also highlight AI’s role is helping organizations respond more effectively to evolving threats, Anomali’s commitment to the region and ongoing product innovation and plans to expand adoption of the Anomali platform across global enterprises and government organizations.

A key focus at this year’s event will be the changing nature of cyberattacks. As threat actors promptly adopt AI to scale campaigns and further accelerate attacks, security operations centers (SOC) are under growing pressure to process rising volumes of alerts with limited resources. To help with this, Anomali will demonstrate how AI can support analysts in multiple ways like surfacing higher- value insights, reducing manual effort and enabling quicker, informed responses.

Visitors can find Anomali at Booth E156 and Booth A80.

Event: GISEC Global 2026
Booths: E156 and A80
Location: Dubai Exhibition Centre (DEC), Expo City
Dates: 16 th to 18 September 2026
Time: 9:00 am to 5:00 pm GST

Tech News

HONOR BRINGS ITS ALPHA PLAN TO LIFE AT LEAP 2026 WITH THE WORLD’S FIRST ROBOT PHONE AND RENEWED “DARE TO BE” BRAND DIRECTION

Published

5 days ago

September 3, 2026

Integrator Web-Editor

HONOR, a global leading AI device ecosystem company, concluded its participation at LEAP 2026, bringing its “ALPHA PLAN: From Vision to Reality” to life through the world’s first Robot Phone, advancements in robotics, cinematic imaging and connected AI experiences. The participation also marked HONOR’s renewed “Dare to Be” brand direction reflecting its continued transformation from a company predominantly known for smartphones into a broader global AI device ecosystem company.

Commenting on the participation, Lei Kunming, CMO HONOR Middle East & Africa said, “LEAP 2026 showed how HONOR’s ALPHA PLAN is moving from vision to reality. From the world’s first Robot Phone and Robotics to our connected ecosystem, we demonstrated how AI can work more naturally around people.” He added “Our ‘Dare to Be’ direction gives that transformation a stronger identity, with Saudi Arabia remaining central to our growth in AI and digital innovation.”

Bringing the HONOR Booth Experience to Life

Visitors explored HONOR’s expanding ecosystem through interactive experiences spanning sports, gaming, smart office, learning and everyday scenarios.

The booth demonstrated how smartphones, PCs, tablets, wearables and other smart devices can work together to deliver more seamlessly, across work, entertainment, sports and health, reflecting the ALPHA PLAN’s ambition to create a more intelligent, connected and human-centric ecosystem around the user.

Introducing the World’s First Robot Phone

At the centre of HONOR’s showcase was the world’s first Robot Phone, a defining proof point of the ALPHA PLAN and a new category combining AI, robotics and cinematic imaging.

Its integrated robotic gimbal can move, track subjects and respond to its surroundings, enabling more intuitive and proactive content creation. LEAP also marked the Robot Phone’s reveal for the Middle East and Africa, making the region the first overseas market to experience the new category.

HONOR also highlighted its collaboration with ARRI, bringing more than 100 years of professional cinema and image science expertise together with HONOR’s AI and robotics capabilities to make cinematic content creation more accessible to everyday users.

Advancing a Future Built on Human and AI Collaboration

Beyond the Robot Phone, HONOR showcased its ambitions in robotics through HONOR Robotics D1, reinforcing its vision of a future shaped not by humans competing against AI, but by humans working with AI to achieve more. The company also explored the future of AI devices and robotics through its LEAP keynote and panel discussions.

Entering a New “Dare to Be” Era

Reflecting this evolution, HONOR’s renewed“Dare to Be” direction reflects its evolution beyond individual devices towards an open AI ecosystem connecting technologies, industries and lifestyles. Supported by innovations including Agentic OS and AiMAGE, HONOR’s journey progresses from an intelligent phone to an intelligent ecosystem and, ultimately, an intelligent world.

Driving Growth Across MEA

HONOR entered LEAP with strong regional momentum. In H1 2026, the company grew by 35% while the Middle East smartphone market declined by 13%, making HONOR the only leading smartphone brand in the region to grow and the second-largest smartphone brand in the Middle East. This followed 73% year-on-year growth in Q1 2026.

Within this regional growth, Saudi Arabia remains a particularly important market for HONOR, supporting the company’s broader ambitions across AI devices and its connected ecosystem.

Strengthening HONOR’s AIoT Presence in Saudi Arabia

As part of this momentum, Saudi Arabia remains a strategic market for HONOR and an important part of the ALPHA PLAN. The Kingdom is now HONOR’s number one tablet market by share, while its AIoT business has grown by more than 500% and HONOR Earbuds Clip has surpassed 100,000 units sold locally.

Building on this strong foundation, HONOR continues to strengthen its presence through retail, after-sales, local partnerships and deeper engagement with the Kingdom’s technology ecosystem.

Tech News

greytHR expands agentic AI-powered HR execution across Middle East region with greytHR NAVOS

Published

5 days ago

September 3, 2026

Integrator Web-Editor

greytHR, a leading full-suite Human Resource Management System (HRMS) platform, launched greytHR NAVOS across the Middle East region, bringing agentic AI competencies directly into its platform. The new capability enables HR teams to find information, navigate workflows, while completing authorised HR activities through simple, natural-language commands.

The Middle East rollout comes as agentic AI begins to reshape HR functions globally. According to McKinsey’s August 2026 research on the agentic era of HR, roughly two-thirds of today’s HR activities, including recruitment, payroll, onboarding and benefits administration, could be largely automated by 2030.

Unlike conventional AI assistants that primarily focus on answering questions, greytHR NAVOS follows an execution-first approach, helping users move from finding information to initiating and completing supported HR actions. Its three core functions – Navigate, Operate, and Support – enable information and workflow discovery, authorised action execution and contextual guidance.

Girish Rowjee, Co-founder & CEO of greytHR, said: “We have evolved from a system that you work on, to a platform that works with you. As a full-suite HRMS, greytHR already connects the entire hire-to-retire lifecycle across key HR operations. With the launch of greytHR NAVOS, we are adding an agentic AI layer across this connected ecosystem, enabling users to manage everyday HR activities through conversational commands rather than searching through multiple menus or disconnected tools. Furthermore, greytHR NAVOS works within each organisation’s existing security and access controls, reducing administrative friction and accelerating everyday HR execution.”

greytHR NAVOS supports a wide range of workflows across core HR, leave and attendance, workforce management, performance management, recruitment, platform navigation and support. HR teams can use the capability to update employee information, generate and publish letters, access attendance records, manage leave and regularisations, support performance reviews, search for job openings and candidates, handle recruitment approvals and generate hiring content.

Based on early greytHR NAVOS usage in comparable markets, HR administrators have reported productivity savings of approximately five hours per week by replacing repetitive manual workflows with conversational requests. In one practical example, an attendance-muster export that previously required around five separate steps can be completed through a natural-language prompt in approximately 10 seconds. By simplifying routine processes and reducing time spent on software interfaces, greytHR NAVOS enables HR professionals to devote more time to employee engagement, workforce planning and strategic decision-making.

greytHR NAVOS operates within each organisation’s existing role-based access control (RBAC) system, ensuring that access to employee information and platform actions remains aligned with individual user roles and permissions. Moreover, sensitive or irreversible actions require explicit human confirmation before execution. The platform also maintains a traceable audit record of AI-assisted activity, including the initiating user, timestamp, prompt and action details. Meanwhile, greytHR’s established privacy, security, and governance framework extends to greytHR NAVOS, including alignment with SOC 2 Type II, ISO 27001:2022, and GDPR frameworks, supported by human oversight.

The new capability is available across all paid greytHR plans, including essential, growth, and premium, with no per-seat AI fees, usage caps or separate purchase required.

The launch showcases the evolution of HRMS platforms from traditional systems of record towards systems of action, where technology can understand user intent, identify the relevant workflow and support the execution of the next authorised step.

greytHR currently supports over 34,000 organisations and 3.5 million users across over 30 countries, providing a strong foundation for expanding its agentic AI capabilities across the Middle East region. With greytHR NAVOS, the company is helping regional businesses simplify HR administration and narrow the gap between intent and execution.