Connect with us

Tech Interviews

Check and Mate

Published

on

In a digitized work and data environment, endpoint protection has gained enormous significance. Michael Veit, Technology Evangelist, Sophos, tells The Integrator what enterprises can do to fortify defense of this important checkpoint and how GDPR will impact data integrity

Q1. With rising virus, malware, and ransomware attacks, how can enterprises ensure security of their physical and virtual (cloud) data centers?

A1. Modern threats require modern ways of protection. In addition to the traditional anti-virus, firewall, IPS and email/web security, which cannot stop highly customized and targeted attacks any more reliably, new “next-gen” technologies have to be implemented. These next-gen technologies include exploit prevention, machine learning, and behaviour monitoring.

Q2. There are various stacks that data travels through. How can enterprises ensure security for each stack?

A2. It is necessary to put as many layers of protection between the attacker and the workstation or server. On the gateway level the traditional AV, web security, web application firewall and IPS protection must be supplemented by sandboxing solutions (e.g. Sophos Sandstorm) with behaviour monitoring and machine learning. On the endpoint and server machines (either physical or virtual) the full set of features like machine learning, exploit prevention, and behaviour detection must be added to the traditional endpoint security. Sophos offers these next-gen endpoint protection functions in Sophos Intercept X (for workstations) and Intercept X for Servers.

Q3. When an incident is detected, how do enterprises respond without compromising on server performance?

A3. It is imperative not to lose time when an incident is detected. If human interaction is necessary i.e. an administrator needs to be alarmed and needs to take manual action, a lot of damage can be caused until counter measures are taken. Modern security systems communicate with each other. They act as a system and react automatically when an incident is detected. For example, if an endpoint or server detects malicious behaviour like ransomware or data theft, this is communicated to the firewall which automatically isolates this device from the internet and the internal network. The Sophos Synchronized Security concept lets all Sophos security solutions – on the endpoint and the gateway – to talk to each other, in order to identify hacker attacks and respond automatically. These next-gen features, while dramatically increasing the protection level, do not decrease server performance. On the contrary, machine learning, for example, is much faster the traditional AV scan and anti-exploit; and behaviour monitoring costs virtually no performance at all.

Q5. What endpoint security measures can enterprises take to minimise security threats?

A5. All workstations and servers need to get next-gen endpoint protection mechanisms in addition to the existing endpoint security. The next-gen protection mechanisms include machine learning/deep learning, exploit prevention, ransomware protection, behaviour monitoring, and anti-hacker technologies. In addition, Endpoint Detection and Response (EDR) capabilities need to be added, which collects and correlates security events from multiple sources like endpoints, servers, and firewalls. This allows modern threats and hacker activity to be detected, stopped, and analysed. Sophos Intercept X on workstations and servers provides these next-gen protection mechanisms as well as root cause analysis to find out what happened during an incident, which processes, files and systems were affected – and how to prevent this in the future.

Q6. What impact will GDPR have on cyber security and data privacy/integrity?

A6. GDPR will have two effects:

First, cybercriminals will double their efforts to get hold of confidential information, especially personally identifiable information. They will use this stolen data to extort high ransoms from companies who failed to protect their data – by threatening to publish this fact to the public and to the regulatory authority. So, this will boost cybercrime industry and we will see even more sophisticated threats. Second, due to the threat of high fines when failing to comply with the GDPR, many organizations will implement modern IT security technologies. Ironically, it will be the same risk manager who, in the past, advised not to implement data protection and IT security technologies because the fines threatening at that time were lower than the investment in IT security, will now urge to implement these technologies to avoid the much higher fines due to the GDPR. So, due to GDPR we will see an increase in attacks as wells as how organizations will be better protected against these attacks.

Q4. Increased digitization is making virtual environments prone to cyber security breaches. What proactive steps can enterprises take to safeguard their data?

A4. First of all, the layered approach with modern technologies described above has to be implemented. It is important to apply full security to virtual servers with full next-gen protection directly running on the server. The simple AV file scanning (on the server or on a security VM) does not provide the same level of protection. With regards to the network, digital transformation has made it even more important to heavily increase network segmentation, which means that workstations, servers, and IoT devices have to be confined to small network areas and all traffic between those areas needs to be limited to business needs.

 

 

Tech Interviews

Digital Sovereignty in Practice: What It Means for Enterprises Today

Published

on

3D illustration of a complex digital circuit board with interconnected microchips, processors, and data pathways, representing advanced IT infrastructure and smart technology solutions by Hedges Information Technology

In our conversation with Ismail Ibrahim, General Manager, CEMEA at SUSE, we seek to understand the concept better along with his understanding of the industry and how enterprises in the UAE and Saudi Arabia can retain control in a rapidly evolving technology landscape.



What does “digital sovereignty” actually mean for an enterprise today, not in theory, but in day-to-day operations?

From an enterprise perspective, digital sovereignty becomes real the moment it changes what you do on a Monday morning. In practice, it means three things become operational requirements, not policy statements.

First, control over data. Not just where data is stored, but where it is processed, who can access it, and how you prove that in an audit. For many organizations in the UAE and Saudi Arabia, that is increasingly tied to sector rules, procurement requirements, and customer expectations.

You need the ability to keep sensitive workloads within national borders when required, but also to enable controlled data flows when innovation demands it. The important point is that sovereignty is not “ringfencing everything”. It is being deliberate about which data, which workloads and which dependencies must remain under your control.

Second, control over operations. Day-to-day, that looks like resilience and predictability: how quickly you can patch, how confidently you can recover, how consistently you can enforce policy across clusters, clouds and edge sites. This is where many enterprises discover that sovereignty is inseparable from operational excellence. If you cannot reliably manage your environments, you do not really control them.

Third, control over technology choices. This is where open source becomes practical, not ideological. When you build on open, enterprise-supported platforms, you are reducing dependency on opaque codebases and constraining the risk of being forced into a single vendor’s roadmap. Sovereignty is “choice by design”, because choice is what allows you to meet local requirements today and change course tomorrow.

That is why at SUSE we often frame sovereignty around pillars like control, choice and resilience, with autonomy as the long-term outcome. For enterprises, those pillars translate into everyday decisions: architecture, procurement, governance, patching, incident response and lifecycle management.

In the next three years, which will hurt enterprises more: security breaches, or being locked into the wrong technology stack?

    It is not an either-or, because the two risks are increasingly connected.

    A security breach is immediate and visible. It impacts customers, regulators, operations and reputation. But lock-in to the wrong stack can quietly increase breach risk over time, because it limits your ability to respond. If your architecture makes it hard to patch quickly, to segment workloads properly, to implement new controls, or to move sensitive workloads to a compliant environment, you have turned security into a dependency problem.

    Over the next three years, I would say the most damaging scenario for many enterprises is not “breach versus lock-in”, but breach plus lock-in, where an organisation is under pressure and finds it cannot adapt fast enough.

    This is exactly why sovereignty has moved into the C-suite and boardroom. Leaders are recognizing that digital sovereignty sits alongside cybersecurity and operational resilience as a strategic requirement. You need a risk-based approach to your data, workloads and support model, and you need the flexibility to change course.

    Practically, in the UAE and Saudi Arabia, many CIOs are already building mixed environments across on-prem, sovereign cloud, hyperscalers and edge. The goal is not to avoid the cloud. The goal is to avoid a situation where strategic choices are dictated by a single vendor’s constraints. Open, enterprise-grade platforms help you keep the option to move, modernize or localize when needed, without rewriting everything from scratch.

    As AI becomes embedded into infrastructure itself, do you believe enterprises are prepared to trust machines with operational decisions, or are we moving faster than governance allows?

    In many cases, we are moving faster than governance, but that does not mean enterprises should slow down. It means they should modernize governance at the same pace as adoption.

    The key is to separate hype from reality. “Trusting machines” does not mean handing over full autonomy overnight. For most enterprises, AI enters operations in stages.

    Stage one is assistive intelligence, where AI helps surface insights, detect anomalies, recommend actions and reduce manual effort. This is where many organizations see quick operational value, especially in areas like observability, incident triage, capacity planning and security monitoring.

    Stage two is bounded autonomy, where AI can execute actions within defined guardrails, such as automated scaling, routing, remediation playbooks, or policy-driven security responses. The governance requirement here is clear accountability: what is automated, under what conditions, with what approvals, and what audit trail.

      Stage three is agentic operations, where more complex systems handle multi-step tasks across environments. This is the phase where governance must be mature, because the risk is not simply “wrong output”, it is unintended consequences across interconnected systems.

      For the UAE and Saudi Arabia, readiness often depends on whether organisations have already done the foundations: standardised platforms, consistent policy enforcement, clean identity and access controls, and modern lifecycle management. If the foundation is fragmented, AI simply accelerates fragmentation.

      This is why we are seeing strong interest in approaches that support governance by design, including the ability to run AI solutions in more controlled environments. In many regulated sectors, that includes air-gapped or restricted environments, where organizations want to adopt AI while keeping strict control of data movement and operational boundaries.

      My view is that enterprises can absolutely trust AI in operations, but only when they treat trust as an engineering outcome: transparent systems, auditable controls, clear guardrails, and the ability to override. Governance is not a blocker. Governance is what makes adoption sustainable.

      By 2030, will enterprises still control their infrastructure choices, or will hyperscalers and AI vendors effectively decide that for them?

      Enterprises will control their choices if they design for control now. If they do not, the market will make the decision for them.

      By 2030, the default buying motion will push organizations toward managed services, vertically integrated AI stacks, and increasingly opinionated platforms. That can deliver speed, but it can also compress choice, especially if your applications, data pipelines, security controls and operational tooling are tightly coupled to one vendor.

      So the question is really about architecture and leverage. Enterprises that prioritise portability, standardization and open platforms will keep leverage. They can choose the right environment for each workload, based on performance, compliance, cost, and risk. Enterprises that ignore portability will find that “choice” exists on paper, but not in practice.

      This is where digital sovereignty is often misunderstood. Sovereignty does not mean rejecting global technology. It means retaining the ability to make deliberate decisions about where workloads run and who controls the critical layers. Many leaders now talk about “glocal” strategies: using global innovation while maintaining local control and compliance where it matters.

      At SUSE, our positioning has been consistent: open source supports sovereignty because it promotes transparency, portability and freedom from lock-in. That is not a slogan, it is a practical roadmap for keeping infrastructure choices in the hands of enterprises, not vendors.

      If you had to offer one piece of advice to CIOs and policymakers in the UAE and Saudi Arabia navigating rapid digital transformation, what would it be?

        My one piece of advice is this: treat sovereignty as an enabler of innovation, not a constraint, and build it into your operating model early.

        For CIOs, that means starting with a clear map of your critical workloads and dependencies. Decide what must remain under national control, what can run on hyperscalers, what needs sovereign cloud options, and what requires special governance. Then standardize your foundations so you can enforce policy consistently. When sovereignty is engineered into the platform layer, transformation becomes faster, because you are not negotiating compliance from scratch every time you modernize an application.

        For policymakers, it means continuing to create frameworks that encourage both innovation and trust. The UAE has taken a pragmatic approach in showing that openness and sovereignty do not have to conflict. When the policy environment supports clear requirements and predictable compliance expectations, enterprises can innovate with confidence.

        And for both, there is a shared point: invest in skills and ecosystem capability. Sovereign outcomes are not delivered by policy alone, they are delivered by people, platforms, and partnerships. When you develop local talent, strengthen the partner ecosystem, and support enterprise-grade open source, you build resilience and long-term autonomy without slowing innovation.

        Continue Reading

        Tech Interviews

        SCALING PRACTICAL AI FOR RETAIL GROWTH IN THE GCC

        Published

        on

        Exclusive interview with Mark Turner, President EMEA, Rezolve Ai

        What made Shoptalk Luxe Abu Dhabi a priority platform for Rezolve Ai this year?

        For Rezolve Ai, Shoptalk Luxe Abu Dhabi brings together the right audience at the right moment. Luxury retailers in the region are no longer exploring ideas, they are making decisions and investing. It is a practical forum to exchange views with brands that are actively shaping their customer engagement and commerce strategies, and to have grounded conversations about what is working in real retail environments. Abu Dhabi also reflects how influential the region has become in global luxury thinking.

        How is AI changing the way luxury retailers think about customer engagement today?

        Luxury retailers are becoming far more intentional about how and when they engage customers. AI is helping them move away from broad personalisation toward more contextual, timely interactions that respect the brand experience. The focus is on supporting customers at key moments, whether online or in store, and ensuring engagement feels consistent and considered rather than automated or intrusive.

        What distinguishes meaningful AI adoption in retail from short-term experimentation?

        Retailers that see lasting value from AI are those that embed it into day-to-day operations rather than treating it as a standalone initiative. Meaningful adoption is driven by clear commercial goals, fast implementation, and solutions that work within existing systems and teams. Short-term experimentation tends to stall when it lacks ownership, scale, or a clear link to performance outcomes.

        Why is the Middle East, and the UAE in particular, becoming increasingly important for luxury retail innovation?

        The Middle East, and the UAE in particular, has created an environment where luxury retail innovation can move quickly. Consumers are digitally confident, infrastructure is strong, and there is a clear push at a national level to adopt advanced technologies. This combination allows retailers to implement and test new models at scale, which is why the region is increasingly influencing global luxury strategies.

        Looking ahead, where do you see AI delivering the most value for luxury brands over the next few years?

        The greatest value will come from AI that directly supports growth while reinforcing operational discipline. For luxury brands, that means more relevant engagement that improves conversion and loyalty, alongside better forecasting and inventory decisions that protect margins. The priority will be practical use of AI that enhances the customer experience without compromising brand integrity.

        Continue Reading

        Tech Interviews

        Sennheiser: Beyond Hardware, Toward Seamless Integration

        Published

        on

        Exclusive Interview with Fadi Costantine, Sales Manager – Business Communication, Middle East at Sennheiser

        A professional studio headshot of Fadi Costantine, Sales Manager for Business Communication (Middle East) at Sennheiser. He is smiling and standing with his arms crossed against a plain white background. He has short, salt-and-pepper hair, wears glasses, and is dressed in a dark navy blue suit with a white collared shirt. The Sennheiser logo is visible in the top left corner.
        Fadi Costantine, Sales Manager – Business Communication, Middle East at Sennheiser

        Sennheiser has leveraged its role in shaping professional audio to build strong hybrid communication products for use across business and education environments. We caught up with Fadi Costantine, Sales Manager – Business Communication, Middle East at Sennheiser, to discuss the brand’s presence at the show, its integrated product ecosystem, and the growing importance of software-driven audio solutions.

        What are your most innovative products currently serving the business and education sectors?

        Sennheiser operates across several business units, with Business Communication being one of our most important. This unit is entirely dedicated to the installation market, where many of our most dynamic and innovative solutions are positioned.

        Professional audio is at the core of Sennheiser’s brand identity. Through our ownership of renowned brands such as Neumann and Merging Technologies, we have established ourselves as a global leader in audio communications. We leverage this expertise to develop advanced meeting and conferencing solutions that enhance business performance.

        Crucially, our products are not designed to operate in isolation. They are engineered to work together as a unified ecosystem, enabling seamless communication across devices and platforms. This ecosystem approach allows system integrators and end users to design complete, end-to-end audio solutions tailored to a wide range of applications and project requirements.


        Which industry verticals are currently driving demand for these solutions in the region?

        While we are active across multiple verticals in the region, we have a clear strategic commitment to deliver innovative, scalable, and future‑ready audio solutions tailored specifically for the needs of higher education and the modern corporate environment.

        In corporate environments, our microphone solutions are widely deployed in meeting rooms to support modern collaboration and video conferencing scenarios. In the education sector, our technologies are extensively used in lecture halls and hybrid learning environments, including classrooms and auditoriums designed to accommodate both in-person and remote participants.

        A strong example is our ceiling microphone solutions. These are frequently used not only in traditional meeting rooms but also in lecture halls for audio capture, video conferencing, and recording. They are also ideal for voice-lift applications, enabling students to hear the lecturer clearly without the need for wearable microphones. This creates a more natural, seamless teaching experience while minimizing complexity for the user.


        Software and integration are critical in these environments. How does Sennheiser support this alongside its hardware solutions?

        Workflow optimization has always been central to our product strategy and will remain a key focus going forward.

        Introducing a new era in AV Management, at ISE 2026, Sennheiser will officially launch DeviceHub, a secure, cloud-based platform designed for IT and AV managers, as well as system integrators. DeviceHub centralizes device visibility and remote management, streamlining workflows across enterprise, education, and corporate settings.

        DeviceHub provides real-time insights, simplified setup, and unified control, supporting organizations in creating better spaces for communication, learning, and teamwork. Following a successful private beta, ISE marks the transition to public availability. Visitors can explore DeviceHub’s capabilities and speak directly with product experts about how it can transform their AV and IT operations.

        Continue Reading

        Trending

        Copyright © 2023 | The Integrator