Gulf companies risk exposing sensitive information because employees are adopting AI more rapidly than their organisations can establish proper governance and controls, according to an analysis by AGBI. The publication highlighted shadow AI as a particular concern that can lead to data leaks when staff use unauthorised artificial intelligence tools for work tasks. Research released during GISEC week in Dubai reinforced the broader pattern of awareness outpacing action in emerging technology risks.
A report published by QuantumGate and the UAE Cyber Security Council found that 64 per cent of respondents in the UAE, Saudi Arabia and Qatar had budgeted for post-quantum security initiatives. The study, which surveyed 125 senior technology, cybersecurity and compliance leaders, showed that only 35 per cent had begun identifying where cryptography is used across their operations and which algorithms are vulnerable to quantum attacks. Gulf News reported that QCC organisations are aware of the quantum threat but most have not done the homework yet.
The QuantumGate and UAE Cyber Security Council assessment indicated that 42 per cent of organisations operate with a defined roadmap for moving to post-quantum cryptography while a further 42 per cent are still defining one. It added that 66 per cent of respondents claimed visibility over the cryptography deployed in their businesses. The report stressed that preparation must begin immediately because encrypted data collected today could be stored and decrypted once sufficiently powerful quantum computers become available.
A World Economic Forum review of cybersecurity outlooks noted that 91 per cent of the world’s largest organisations have modified their strategies in response to geopolitical tensions and technological advances including quantum computing. The UAE Government’s Cybersecurity Council has expanded cooperation with QuantumGate on a national platform that supports quantum-resilient cybersecurity across priority sectors. This joint work focuses on accelerating the transition to post-quantum standards before cryptographically relevant quantum computers emerge.
Dr Mohammed Al Kuwaiti, Head of Cybersecurity for the UAE Government, told officials that the national approach is to anticipate threats rather than wait for them, according to a council statement. The council’s collaboration with the Technology Innovation Institute includes programmes to identify vulnerable cryptographic assets and develop sector-specific migration guidelines. Such steps form part of a wider regional effort to strengthen resilience in critical infrastructure that a Khaleej Times briefing identified as frequent targets for cyberattacks.
GISEC Global 2026, which concludes on September 18 at Expo City Dubai, features a dedicated Quantum Security Summit hosted by the UAE Cyber Security Council and the Technology Innovation Institute. The event includes the Global Quantum Drill, described by organisers as the world’s largest quantum readiness exercise. Industry participants at the gathering emphasised that visibility, budgeting and planning must translate into operational cryptographic upgrades to close the gap between awareness and implementation.
ع