Connect with us

Tech Features

The Infrastructure Is Automated. Why Are the Processes Around It Still Manual?

Published

on

Article by Prasanna Rajendran, Vice President – EMEA, Kissflow

Across the Middle East, governments and enterprises are investing heavily in cloud infrastructure to support national digitization agendas, from Vision 2030 in Saudi Arabia to the UAE’s push toward AI-driven government services. Gartner forecasts that IT spending across the Middle East and North Africa will reach $169 billion in 2026, an 8.9 percent increase over 2025, with software spending alone growing 13.9 percent.

Infrastructure as code (IaC) is the practice of defining and provisioning computing infrastructure, including servers, networks, databases, and load balancers, using machine-readable configuration files rather than manual processes or interactive consoles. Rather than logging into a console to click through setup wizards, teams describe their entire infrastructure in version-controlled code that can be reviewed, tested, and deployed like any other software artifact.

For CIOs and IT leaders, this matters because IaC has become the operational standard for any organization running workloads at scale. Grand View Research valued the global IaC market at $1.2 billion in 2025 and projects it to reach $6.1 billion by 2033, a compound annual growth rate of 22.3 percent. That trajectory reflects a clear shift: enterprises are moving from manual, ticket-driven infrastructure management to automated, code-driven provisioning.

What is infrastructure as code?

At its core, IaC means defining resources such as virtual machines, storage volumes, network configurations, security policies, and access controls in declarative or imperative code files. Those files become the authoritative record of what your infrastructure looks like at any moment.

IaC generally follows one of two approaches, depending on whether teams want to define an outcome or prescribe the route to it. Declarative IaC describes the desired end state: you specify what you want, such as three servers, a load balancer, and a database cluster, and the tool works out how to get there. Terraform, AWS CloudFormation, and Azure Bicep all use this method. Imperative IaC instead specifies the exact steps to reach an outcome. You write procedural instructions: create this server, then attach this disk, then configure this network. Ansible and Chef follow that model more closely.

The declarative approach dominates enterprise adoption today because it is easier to maintain and less error-prone. You describe the outcome rather than the procedure, which keeps the code readable even as infrastructure complexity grows.

What separates IaC from traditional infrastructure management is version control. Every change is tracked in Git, reviewed through pull requests, and deployed through automated pipelines. This is the mechanism Gartner points to when it describes IaC as the route to cloud governance and self-service at scale.

Why infrastructure as code matters for enterprise IT

Manual infrastructure management does not scale. When an operations team provisions servers through tickets and console clicks, every environment differs slightly, every deployment carries risk, and every audit turns painful. IaC removes these problems systematically.

Consistency and reproducibility

IaC guarantees that the development, staging, and production environments are consistent. Configuration drift, the slow divergence of environments over time, disappears because every deployment is generated from the same code. When an incident occurs, you can rebuild an environment from scratch in minutes.

Speed and agility

Organizations using IaC provision entire environments in minutes rather than weeks. When business conditions change, whether through a product launch, a capacity spike, or a compliance deadline, IaC lets you respond at the speed of code.

Security and compliance

With IaC, security policies are embedded directly in infrastructure templates. Guardrails apply automatically. Compliance checks run in the CI/CD pipeline before any change reaches production. Security stops being a gate at the end of the process and becomes part of how infrastructure gets built.

Cost efficiency

IaC gives you precise control over resource provisioning. Idle capacity gets identified and decommissioned through code rather than through quarterly manual audits. Cost discipline has grown into a standing function for this reason: 59 percent of the 759 organizations Flexera surveyed for its 2025 State of the Cloud Report now run a dedicated FinOps team, up from 51 percent the year before.

Key infrastructure as code tools for the enterprise

Several tools now anchor enterprise IaC strategy, each suited to a different environment. Terraform and its open-source fork, OpenTofu, remain the dominant choice for cross-cloud work, offering declarative provisioning across multiple clouds using HCL. Organizations standardized on a single cloud often turn to native alternatives instead: AWS CloudFormation for AWS-centric environments, using JSON or YAML, and Azure Bicep for Azure-native deployments. Ansible takes an imperative, YAML-based approach and excels at configuration management and application deployment rather than pure provisioning. Pulumi appeals to developer-led teams by letting them define declarative infrastructure in familiar languages such as Python, TypeScript, or Go.

Common challenges when adopting infrastructure as code

Adopting IaC is not without friction. The most immediate obstacle is usually a skills gap, because IaC asks infrastructure teams to work the way developers do, with version control, code reviews, and CI/CD pipelines. That shift is cultural as much as it is technical, and it requires deliberate investment in training.

State management adds complexity of its own. Declarative tools maintain state files that track current infrastructure, and multi-team environments need remote state backends, locking, and workspace isolation from day one to avoid conflicts.

Legacy system integration is another common obstacle, since not everything can be expressed in code immediately. Most organizations start with new cloud workloads and progressively extend IaC to existing systems through API wrappers.

Governance and drift detection require ongoing discipline. IaC only delivers its full value once it becomes the sole path for infrastructure changes, which makes continuous drift detection and sustained cultural enforcement critical rather than optional.

Where workflow automation fits in an IaC-driven enterprise

Infrastructure as code solves the provisioning problem. Enterprise IT complexity does not stop there. The layer above IaC, covering the processes, approvals, and operational logic that run on top of provisioned infrastructure, is where most organizations still depend on fragmented tools, manual handoffs, and spreadsheet-based tracking. That gap is especially visible across the Middle East, where cloud adoption and ambitious national targets often outpace the operational processes needed to govern them.

Regulatory pressure widens the gap further. Gartner forecasts worldwide sovereign cloud IaaS spending at $80 billion in 2026, a 35.6 percent rise over 2025, with governments as the main buyers. Provisioning infrastructure inside a national boundary is one requirement. Proving that every approval, exception, and access grant on that infrastructure followed a governed path is another, and code alone does not answer it.

This is where workflow automation platforms operate as a digital backbone for enterprise operations. IaC automates the infrastructure layer. A no-code or low-code workflow platform automates the process layer: IT service requests, change management approvals, vendor onboarding, compliance workflows, and the hundreds of cross-functional processes that connect people, systems, and decisions across the enterprise.

For IT leaders across the region pursuing IaC adoption, particularly those operating under strict data residency and regulatory requirements, this kind of platform complements the strategy by giving business teams a way to build and manage operational workflows without adding to the IT backlog. IaC handles your infrastructure. Workflow automation handles everything that runs on it.

See how Kissflow governs the change approvals, access requests, and compliance workflows that sit on top of your cloud infrastructure in a 30-minute demo.

Continue Reading

Tech Features

TrendAI™Expands Vision One with New Security Capabilities for AI Agents and Application Development

Published

on

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro  Incorporated (TYO: 4704; TSE: 4704), has announced new capabilities for TrendAI Vision One™. These include the private preview of Autonomous Vulnerability Discovery and expanded support for Claude’s Compliance API, which now covers Claude Code and Cowork sessions. Together, these services help enterprises identify exploitable vulnerabilities in source code before attackers do, investigate how AI agents operate, and maintain oversight as AI adoption scales.

The need for this oversight is growing rapidly across the region. According to research conducted by The Harris Poll for Dataiku, 62% of UAE chief information officers believe their organisation have more than 50 AI agents running in production, yet only 18% have a fully unified view of agents across platforms, data environments, and business applications. At the same time, AI is accelerating both how quickly code is written and how quickly attackers can identify flaws. Security teams therefore need to keep pace with AI adoption without losing visibility into what is happening across their environments.

The new capabilities extend TrendAI Vision One™ across both software development and AI agent activity. TrendAI Vision One™ Autonomous Vulnerability Discovery is powered by AESIR, TrendAI’s agentic exploit-remediation engine, which identifies and validates vulnerabilities, including zero-days. It also verifies fixes in customer source code. The engine uses purpose-built, multi-model AI architecture that relies primarily on Anthropic models and has outperformed single-model and agentic system scores on the CyberGym Leaderboard. Every finding is validated by experts from the TrendAI™ Zero-Day Initiative™ (ZDI), the world’s largest vendor-agnostic bug bounty programme. The Autonomous Vulnerability Discovery is deployed and operated on Amazon Bedrock from Amazon Web Services (AWS), enabling the full workflow to run within the customer’s AWS environment

In parallel, the expanded Claude Compliance API integration brings Claude Code and Cowork session records from Claude Enterprise into TrendAI Vision One™.  These records include prompts, responses, and tool calls, each tied to a verified user. It enables security teams to investigate AI activity in context, correlate it with endpoint, identity, cloud and network signals, and build custom detections for relevant agent behaviour.

Commenting on the announcement, Salah Suleiman, Managing Director, South Gulf, TrendAI™, said, “AI is changing both how software is built and how work gets done across the enterprise. Code is being written faster than ever, while AI agents are increasingly able to access systems, call tools and act on behalf of users. As organisations across the UAE and the wider region scale AI at pace, their security teams need to identify vulnerabilities early while maintaining clear visibility into what AI systems are doing and whether their actions align with organisational policies. With these additions to TrendAI Vision One™, we are helping organisations move faster with AI while maintaining the context, oversight and control needed to do so securely.”

TrendAI Vision One™ also continues to ingest activity logs from Claude Enterprise, covering user logins, administrative actions and configuration changes, as well as from Claude Platform, covering administrative, system and resource events. Autonomous Vulnerability Discovery is now available in private preview to select enterprise customers running on AWS, while Claude’s Compliance API integration in TrendAI Vision One™ is available to TrendAI Vision One™ customers using Claude Enterprise.

Continue Reading

Spotlight

Beyond the camera: Why video surveillance is becoming a business intelligence tool

Published

on


Dr Ryad Soobhany, Deputy Academic Head of School of Mathematical & Computer Sciences, Heriot-Watt University Dubai 

Dr Ryad Soobhany

Camera systems, such as CCTV, are mainly used for video surveillance within organisations. Passive video surveillance has been part of the security ecosystem for years, providing organisations with the ability to monitor different areas simultaneously, while recorded footage can be inspected after an event occurs.

The evolution of computer chips and increased processing power has led to improved image quality, including better performance in low-light conditions, particularly at night. The advent of edge computing, with processing performed on edge devices within a network, has made object and scene recognition more readily accessible. This evolution has led to more active video surveillance through video analytics, where events can be identified and addressed in real time. Examples include number plate recognition systems and facial recognition for access control.

With the combination of AI and video data, computer vision can be integrated with business analytics to transform video surveillance from a security infrastructure into a business intelligence tool. Video surveillance is moving from passively recording events to sensing what is happening in the environment. This helps to answer questions such as which areas are congested, how customers are moving, how long they dwell in particular areas, and whether unusual events are occurring. Businesses can use this data to optimise their operations, such as improving the customer checkout process, monitoring asset or staff movement, and managing crowds or traffic flows. Organisations can also incorporate contextual business information to enhance the analytics by combining behavioural data with CRM or IoT data, providing additional context and insights for decision-making and improving the customer or visitor experience.

Video surveillance can be used to optimise operations, improve customer experiences, and support strategic decision-making across industries. Video itself does not create business intelligence; rather, its value increases when visual information is combined with other operational and contextual data, while computer vision is used to understand and enhance business operations. The pipeline from video to business intelligence can be represented as obtaining data from video sources such as fixed cameras, IoT-enabled cameras, or robots. Computer vision is then applied to the video to detect or track people, objects of interest, or activities. Behavioural data are taken into account, such as customer dwell time in particular product areas, occupancy of rooms or halls, movement of people across a building, and anomalies in behaviour. At this stage, operational data are also considered. The final stage is the business intelligence stage, where trends are identified and insights are inferred. At this stage, data visualisation plays an important role, with dashboards and data storytelling displaying correlations, predictions, and infographics that provide more than simple visual summaries of surveillance data. The camera becomes an operational sensor for the organisation. The important transformation occurs when visual data are combined with business data, such as sales, operational, and IoT data, to convert visual observations into business knowledge that informs operational, tactical, and strategic decision-making within an organisation.

The levels of business intelligence can be viewed as three analytical capabilities: descriptive intelligence, diagnostic intelligence, and combined predictive and prescriptive intelligence. Descriptive intelligence usually addresses what is happening. Visual analytics can identify footfall, occupancy, queue length, waiting time, dwell time, traffic flow, movement patterns, and detected events. Visualisation dashboards can present these indicators in real time or over historical periods, allowing managers to understand the current state of an operation. For example, a museum dashboard can show heat maps of visitor numbers, dwell time, and movement across different exhibition areas, while analysing visitor behaviour and providing insights into the optimal placement of exhibitions. An airport dashboard could display passenger volumes and queue lengths across terminals.

Continue Reading

Tech Features

The Financial Sector Facing Its Black Swan: How AI Agents Are Redefining the Industry

Published

on

By Julio de Salvo, Chief Solution Officer for MENA & APAC at Globant

For decades, the financial industry has managed to replace banknotes and coins with “invisible” assets through different technological implementations. However, innovation in the sector has generally moved at a slow pace when dealing with something as sensitive as people’s finances. In 2026, the black swan is beginning to emerge: the first steps of AI agents that will redefine the industry (as they will many others). The financial black swan is not a crisis: it is a huge change. Across the Middle East and Africa, where a convergence of government-backed modernization agendas, digitally native consumers, and institutional ambition is accelerating the timeline for transformation.

The first step has been the use of Gen AI without the customer perceiving it. Coding, fraud prevention, phishing detection, and credit assessment are some of its tasks. But it is now beginning to become a tool for managing users’ finances. In the MENA region, this shift is already visible at the institutional level. Across the 25 MEA banks benchmarked by the Evident AI Index (June 2026), the established leaders are no longer running pilots, they are directing investment toward high-friction processes where AI can materially reshape productivity, scalability, and competitiveness. UAE-based banks and fintechs are already validating agent-initiated transaction pipelines in production environments. These are some of the examples, but there are more.

In July 2026, the revealing Mills Review, published by the FCA (Financial Conduct Authority), the UK’s official financial regulator, pointed out that AI agents will become the new financial interface. Essentially, an AI assistant will manage budgets, answer queries, generate reports on demand, and move money between accounts. How much was spent on a vacation in total, how a stock portfolio performed over the past month, or canceling an annual subscription will be as easy as making a query to ChatGPT today. For MENA consumers, who have in many cases leapfrogged legacy banking behaviors entirely, this vision is the baseline expectation.

The Mills Review also argues that Open Banking will evolve toward a model in which AI agents will have access to a broader range of financial products to enable intelligent decisions across different areas, and highlighted that this will lead to an evolution in regulation. In the GCC, this evolution is being actively shaped by regulators and governments alike, with initiatives such as Dubai’s target of 90%+ digital transactions by 2026 signaling not just ambition, but structural commitment to a cashless, AI-enabled financial ecosystem.

The agentic AI opportunity in the region is real, but it remains underexploited. According to EY-Parthenon’s 2025 Generative AI in Banking Survey, 99% of respondents are familiar with agentic AI,  yet only 31% have pursued implementation, with a further 46% expressing interest. Awareness, in other words, has raced ahead of execution. This gap between recognition and production-grade deployment is precisely where the competitive battle will be won or lost.

This represents a major shift in the industry, where historically the leading banks have, for the most part, remained the same. Differentiation can now change everything, and it would not be surprising if new players manage to break into the ranks of the world’s most important financial institutions. In the Middle East, the region’s financial landscape already includes a new generation of digital-first challengers sitting alongside heritage institutions, all of which are now actively exploring or deploying agentic capabilities. The reason sounds obvious when explained: if the experience with an AI assistant can manage customers’ money better, it will prevail. This is not an exaggeration: just four years ago, nobody knew ChatGPT, and now we have become so accustomed to it that we all ask ourselves: why shouldn’t I manage my assets with a chatbot that can provide reports and recommendations? A study by JPMorgan found that half of Gen Z wanted to use them to manage their finances.

The infrastructure for agentic commerce is also being built in real time across the GCC. Mastercard has conducted regional pilots in partnership with Majid Al Futtaim, enabling consumers to search, select, and purchase VOX Cinema tickets programmatically through an integrated AI assistant. In May 2026, Visa launched its global Agentic Ready program in the UAE, with early adopters including ADCB, ADIB, Emirates NBD, Mashreq, Tabby, Wio, and Ziina already validating agent-initiated transaction pipelines in production.

We are living in a time of change. In its 2026 report on the financial sector, the World Economic Forum urged organizations to move with “urgency” and “discipline”. The greatest benefits, it stated, will go to those working on a holistic redesign of workflows and technology architecture. In the MENA region, the conditions for genuine transformation are already in place: strong institutional will, government-aligned modernization agendas, and a consumer base that has leapfrogged legacy behaviors entirely.

One of the major questions is why, if the financial sector has such a strong technological tradition, the emergence of AI Agents represents a black swan. There are several reasons. First, historically, customers used banks to execute transactions; therefore, in the executive conversations avoiding risk was prioritized over innovation. This is changing with the emergence of digital banks, which are generally more inclined toward disruption, and shifts in consumer habits. In the GCC specifically, consumers who bypassed branch banking and moved directly to mobile-first financial services are now primed to embrace AI-managed financial experiences with little friction. The challenge of the future is not to provide a tool, but to redesign experiences to address this transition comprehensively. AI has the potential to resolve the technological debt involved in migrating traditional banks, which have historically struggled the most with this transition.

The second reason is the technical debt banks have demonstrated in dealing with change. This has also occurred in other industries, but the idea of paying for a premium license for every employee and expecting immediate returns only leads to frustration. There is significant resistance when it becomes clear that certain tasks and workflows will inevitably be different from what has been established. In the Middle East, where several national banks have invested heavily in core banking modernization programs over the past decade, the foundations are more favorable than in many Western markets, but the final leap from modernized infrastructure to genuinely agentic deployment still requires focused capability and deliberate execution.

The third reason is regulation. Technology companies, banks, and authorities will need to maintain an ongoing dialogue to ensure that innovation and integrations do not affect users’ personal data or security, while ensuring that restrictions do not become a barrier to progress. One of the most valuable lessons from the banking sector’s legacy is the importance of being extremely careful when dealing with something as sensitive as people’s money.

For many years, the impact of AI was often explained as something that belonged to a distant future. In the financial sector, it is already a reality: it is part of multiple tasks and is beginning to become an asset in the customer proposition. With AI Agents, innovation can no longer, and should no longer, go unnoticed. New habits require the redesign of customer journeys, and this could represent a revolution for the sector. For Middle East banks, the opportunity is particularly compelling: a region where government will, consumer readiness, regulatory pragmatism, and institutional investment have aligned at the same moment. What is required now is the execution capability to convert that alignment into production-grade deployment. What is at stake is no small matter: the management of millions of people’s money and a battle for the competitiveness of banks on a scale rarely seen before.  For those that move with urgency and discipline, the financial black swan is a transformation to be led.

Continue Reading

Trending

Copyright © 2023 | The Integrator