Connect with us

Tech News

RACE Model: Building Cyber Resiliency and Mitigating Network Risks by Going Back to Basics

Published

11 months ago

on

HUAWEI CYBERSECURITY

By H.E. Dr. Mohamad Al Kuwaiti, Head of Cybersecurity, UAE Government, and Dr. Aloysius Cheang, Chief Security Officer, Huawei Middle East & Central Asia

Jim Rohn once famously said, “Without a sense of urgency, desire loses its value.” Resilience is key to surviving in today’s world full of emerging technologies and hot-button buzzwords. It is a race towards all that is good, towards cyber survivability, a race of the utmost urgency and importance. As such, cybersecurity and, in particular, cyber resiliency is more than just having an incident response plan or a computer security policy. It is about ensuring that your entire security posture can withstand a wide range of threats, which includes hybrid, blended attack vectors that can transcend time and space through the interplay of physical, cyber, and virtual planes that take apart traditional brick-and-mortar aspects of any organizations and cross-borders jurisdiction.

Hence, we need to design a more holistic security framework by integrating cyber and physical security measures, hardening critical systems, and creating cross-functional teams and multi-disciplinary teams that will involve team members not only from our own organization but also from other stakeholders in our ecosystem that can address risks from multiple angles. Indeed, designing an auto-adaptable, self-evolving security framework that will evolve alongside the volatile and rapidly evolving threat landscape will be crucial to maintaining cyber resiliency and, therefore, safeguarding the business in the new intelligent era. But, without a doubt, there’s an urgent need to prioritize building cyber resiliency above all other matters.

Leonardo Da Vinci said, “I have been impressed with the urgency of doing. Knowing is not enough. We must apply. Being willing is not enough. We must do.”  To build resilience, having a lofty mission statement with an ambitious plan is definitely not enough; the efforts must be grounded in the practicality of getting our hands dirty and being able to paddle in and out of the mudflats regardless of how much the mud will engulf you.

Figure 1 shows our proposed RACE model as a simple four-part process to look at how organizations can build cyber-resiliency with a feasible and actionable plan to achieve our objective of securing any organization by going back to basics. By going back to basics and doing them well, it will at least address 90% of the problems that most organizations are facing today. The solution needs not to be complex nor flamboyant; it just needs to be practical, and if one can cut through the levels of complexity and zero in on the crux of the problem and put in place basic security controls that are effective and efficient, it will lay the groundwork for success.

Borrowing the analogy of racing, would you be driving a race car that has a manual gearbox for full control and is tuned for the race track, or would you just take any car straight from the garage untuned for the conditions of the race track and relying on the car’s automatic gearbox to take care of the driving? Thus, it is clear that returning to basics and tuning your security measures for accuracy and precision is a much better bet than pouring huge investments into advanced systems and mechanics, building layers and layers of security indiscriminately.

Being accurate and precise will enable us to build quantifiability into our cybersecurity program. Accuracy and precision are both ways to measure results. Accuracy measures how close results are to the true or known value, while precision, on the other hand, measures how close results are to one another or, in other words, how well our defenses are designed and executed. This is our motivation behind the development of the RACE model. The subsequent paragraph will describe each key component of the model in greater detail.

Figure 1: The RACE model, a simple 4-part plan for building cyber resilience

Firstly, resiliency in modern cybersecurity speaks to the capability to provide value for the customer. In simplistic terms, it is to provide robustness and survivability of the organization’s cyber footprint in the face of adversaries and threats, meet compliance needs for business governance while excelling and providing a competitive advantage, using whatever security capabilities are based on established best practices, processes, and frameworks that achieve repeatable results. Figure 2 below summarizes what it takes to build cyber resilience and the value it brings to the table, taking into consideration the interplay between being compliance and building capabilities to support the resiliency of the entire information infrastructure that supports the business of an organization.

Figure 2: Building trust, enhancing cyber resilience, and mitigating risks in action

Next, awareness refers not only to imbuing a culture of cybersecurity among all the staff in an organization to the extent that basic cyber hygiene can be practiced but also to targeting the team focusing on delivery and maintaining ICT and security services within the organization so that they pay attention to cementing their core competencies and fundamentals. Hereby, it is recommended that harnessing risks and hedging your bet against the barrage of threats based on a risk-based approach is the best way, given that resources on hand are always scarce, limited, and, to some extent, expensive. Given that is the case, we have identified five basic core fundamentals that every cybersecurity team in any organization needs to build up on their basics (and manage them well) based on common cybersecurity issues faced, as depicted in Figure 3. While it may seem simple, the devil is always in the details to ensure a job is done well.

Figure 3: Managing five common risks (end-to-end) comprehensively as a basis for building cyber resilience

One man, organization, or country cannot resolve cybersecurity issues alone. It takes an entire village to address cybersecurity issues as they affect everyone if anything goes awry. Cybersecurity is a team sport, and all the stakeholders within the ecosystem must contribute towards addressing the elephant in the room, as shown in Figure 4. We always find strength in numbers because “united we stand, divided we fall.” We see the Blackhat community is doing that exactly, and that is why they are always a step ahead of the good guys every time, thereby summarizing the urgency to Collaborate as a key differentiating measure.

 Figure 4: Cybersecurity is a team sport. So, who is on the team?

Last but not least, we need to bring everything together to build or Engineer the process, putting the cogwheels into their rightful places to drive the engine forward. We have identified five key fundamental security measures that, if done diligently, will be key to building an end-to-end resilient system and reducing network risks. 

As shown in Figure 3, the five key fundamental security measures are 1) software integrity protection, 2) security configuration, 3) digital certification management, 4) vulnerability remediation, and 5) product lifecycle management. Take “Security configuration” as an example. To engineer and address the risk brought about by system misconfiguration, we need to break it down into its elements or identify its Work Breakdown Structure or WBS, which is a key step for planning project tasks and allocating resources.

Figure 5: Security Configuration Example: Optimize the Security Configuration Baseline based on Service Scenarios

Figure 5 summarizes typical work done to break down “security configuration” into its WBS. While this figure does not depict the complete picture, it does show a deep dive into each piece of work. One should keep working on breaking it down until the project scope and all the tasks required to complete the project can be visualized in one snapshot.

In conclusion, we have distilled the entire RACE model in detail in this paper. Achieving RACE is key to building resiliency for any organization. The important thing to note is to keep it simple and go back to basics. Build an auto-evolving, adaptable security framework based on the strategy that is designed to shape-shift alongside emerging blended, hybrid threats by leveraging on actionable intelligence, building resilience, and fostering collaboration so that individuals, organizations, and nations. Establishing public-private partnerships (PPP) with governmental entities and authorities enables public sector players, such as the UAE Cyber Security Council, to act as the fulcrum for coordinating and pooling resources and intelligence. This will enable our modern society to defend against today’s threat and safeguard one’s digital journey by addressing the challenges of tomorrow’s Age of Intelligence.

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech News

IT services spend in MENA set to reach up to 28% of total IT budgets as services-led transformation accelerates

Published

2 days ago

on

December 26, 2025

By

The Middle East and North Africa (MENA) is entering a decisive, services-led growth phase in its IT sector, as enterprises and governments accelerate large-scale digital transformation initiatives. Investments in cloud computing, artificial intelligence (AI), data centres, and cybersecurity are reshaping technology priorities, with implementation, integration, and managed services gaining prominence over traditional software-led models.

Industry analysis by Grand View Research (GVR) reveals that IT services currently account for around 21–22% of total IT spending across MENA, a share expected to rise to between 26 and 28% by the end of the decade. The region’s professional IT services market, valued at USD 33.9 billion (Dh124.5 billion) in 2024, is forecast to grow to nearly USD 58.3 billion (Dh214 billion) by 2030, registering a compound annual growth rate (CAGR) of approximately 9.5%.

Sourav Bhanja, Middle East Head of GVR, said: “Many B2B IT services firms in the region continue to underinvest in digital engagement. Professional platforms such as LinkedIn remain underutilised, while company websites often lack strong case studies, sector-specific storytelling, and clear positioning.”

Government-led digitalisation programmes, sovereign cloud deployments, smart city initiatives, and national data strategies, coupled with rising enterprise adoption across sectors such as banking and financial services, healthcare, energy, logistics, and public infrastructure, are driving this shift. As hyperscalers and global technology firms expand their regional footprint, demand for localised integration, migration, and managed services continues to accelerate.

Bhanja also emphasised the importance of leadership visibility in the region’s competitive IT market: “Technical capability alone is no longer enough. Firms that combine deep technical expertise with consistent marketing, strong leadership visibility, and clear communication of value are the ones most likely to succeed in the MENA market.”

The analysis highlights that with growing competition among IT services providers, market visibility and differentiation have emerged as critical growth drivers. Integrated, always-on digital marketing strategies are increasingly vital, as many B2B IT services firms underutilise channels such as LinkedIn, websites, thought leadership content, newsletters, blogs, infographics, and short-form video to engage decision-makers.

Market data also indicates a broader shift towards digital-first engagement. Digital advertising spend in the Middle East, estimated at USD 32 billion (Dh117 billion) in 2024, is projected to rise sharply to USD 81.4 billion (Dh298.9 billion) by 2030, growing at a CAGR of 16.7%. In contrast, the regional events and conferences market is expected to expand at a more modest 7.1% CAGR, reflecting changing enterprise marketing priorities.

Grand View Research concluded that IT services firms combining technical depth with strong market communication, data-driven marketing, and visible leadership will be best positioned to capture the next phase of growth across MENA.

Continue Reading

Tech News

Loylogic Shares 2026 Vision to Advance the Global Rewards Marketplace

Published

4 days ago

on

December 24, 2025

By

Advanced AI innovation, intelligent marketplace design, and trusted global infrastructure position Loylogic for continued leadership in rewards and loyalty commerce.

Gabi Kool, CEO, Loylogic

As the Middle East loyalty market is projected to reach $3.27 billion in 2025, expanding 16.3% year-on-year, and digital-first, personalized, and coalition-based models reshape the industry, brands face rising expectations around relevance and engagement. Against this evolving landscape, Loylogic, a leader in global loyalty rewards management, today shared its 2026 strategic outlook, outlining how the company is evolving its global rewards marketplace to support brands navigating rapidly changing loyalty expectations.


The company enters the year with a renewed focus on continued investment in AI-powered rewards marketplace intelligence, enhanced catalogue curation, and deeper integration capabilities designed to improve reward relevance, partner value, and member experience across industries and geographies. Rather than simply expanding choice, Loylogic’s approach centres on intelligent rewards marketplace design, aligning consumer relevance, operational efficiency, and long-term value creation within a single global platform.

To support enterprise scale deployment, Loylogic continues to operate under a robust compliance and security, compliance and governance framework. The company adheres to internationally recognised standards ISO 27001, GDPR, PCI DSS, and AES-256 encryption, ensuring secure and trusted data handling across every layer of its technology while maintaining alignment with the European Accessibility Act 2025 and WCAG 2.0. All platforms remain adaptable to regional data residency and regulatory requirements.

“As loyalty programs mature, brands are looking beyond scale alone,” said Gabi Kool, CEO of Loylogic. “They want reward ecosystems that are smarter, more relevant, and commercially sound. Our focus for 2026 is about advancing how global rewards marketplaces are designed, governed, and experienced, combining intelligence, trust, and flexibility.”

Advanced AI innovation is central to Loylogic’s next phase of growth. Loylogic continues to enhance its use of advanced analytics and machine learning to support smarter reward discovery, improved marketplace performance, and deeper insights for loyalty operators, while maintaining strict standards for privacy, security, and compliance.

“Our innovation efforts are focused on making rewards marketplaces more intelligent and adaptive,” said Amit Bendre, COO of Loylogic. “This means better insight, better decision support, and better experiences, without compromising on trust, transparency, or regulatory rigor.”


Looking ahead to 2026, Loylogic plans to deepen collaboration with global partners, engage more actively with industry stakeholders, and selectively strengthen capabilities across commercial, product, and technology functions, supporting a growing pipeline of enterprise clients across financial services, travel, and consumer sectors. With a proven global infrastructure, deep marketplace expertise, and a clear strategic direction, Loylogic continues to help leading brands transform everyday engagement into meaningful, long-term loyalty.

About Loylogic

Loylogic is a leader in global rewards marketplaces for loyalty and incentives management, enabling brands to deliver scalable, flexible engagement experiences through a modern commerce platform. Its global catalog and redemption marketplace support meaningful engagement across B2C, B2E, and B2B programs worldwide. With deep expertise in sourcing, fulfilment, and patented points-plus-cash innovation, Loylogic has enabled over 200 billion points and miles transactions, delivered more than $1 billion in commerce, and shipped experiences spanning 100+ categories across 190 countries to more than 10 million loyalty members worldwide.

Continue Reading

Tech News

Webook.com Strengthens UAE Footprint, Bringing World-Class Entertainment Experiences

Published

5 days ago

on

December 23, 2025

By

Webook.com, one of the fastest-growing platforms for booking lifestyle and entertainment experiences in the Middle East, is deepening its footprint in the United Arab Emirates following strong traction across the country.

Founded with a vision to transform how people discover and book experiences, webook.com continues to elevate convenience through a unified platform that brings together entertainment, dining, and leisure in a seamless digital journey.

Within the UAE, webook.com has rapidly expanded its user base while curating a lineup of world-class experiences. From comedy nights with Bassem Youssef to electrifying Teddy Swims concerts and the magic of Disney on Ice, webook.com continues to bring some of the region’s most unforgettable events to audiences across the UAE. Beyond these major hosted events, users can also book global entertainment experiences, including MDLBEAST, Riyadh Season, AFCON and other leading events happening across MENA.

Commenting on the expansion, Nadeem Bakhsh, CEO of webook.com, said: “Webook.com was built to curate the experiences that matter most, from front-row access to world-class entertainment to discovering hidden local gems. Expanding our footprint to the UAE allows us to bring a carefully selected lineup of events and experiences to the region. Our goal is to continue providing variety, quality, and seamless access to unforgettable moments.”

As the platform widens its presence across the UAE, it continues to strengthen partnerships with top entertainment brands, cultural institutions, and iconic venues, enabling users to access an unmatched selection of events and experiences.

Webook.com’s technology has proven itself across multiple markets, handling millions of transactions during major events, tournaments, and high-demand ticket releases. With real-time queueing, robust infrastructure, and flexible integration, webook.com delivers landmark events with unmatched reliability and scale.

With momentum accelerating in the UAE, webook.com aims to transform how people discover, plan, and enjoy experiences, turning every booking into the start of a memorable story. Beyond expanding its presence, webook.com is shaping a movement centered on connection, culture, and the joy of shared moments.

Continue Reading

Trending

Copyright © 2023 | The Integrator