As the cybersecurity landscape grows increasingly complex, national resilience depends not only on advanced technologies but also on strategic foresight, agile partnerships, and a proactive mindset. In this exclusive Q&A, Defense Arabia sits down with Hadi Anwar, CEO of CPX, the UAE’s premier provider of end-to-end cybersecurity solutions. With over 25 years of experience in IT management, cybersecurity, and innovation, Anwar shares how his career has shaped the company’s mission—and the nation’s—toward building a secure digital future.
From the UAE’s evolving threat environment to the convergence of cyber and physical domains, Anwar offers insights into the most pressing challenges facing governments and critical infrastructure operators. He also discusses CPX’s latest innovations, strategic acquisitions, and how the company is helping clients prepare for an AI-driven future where cyber readiness is no longer optional—it’s essential.
- How did your 25‑year career in cybersecurity and IT management shape your vision for CPX today?
My career has spanned more than two decades across IT management, cybersecurity, and innovation—each role offering valuable insight into the evolving threat landscape and the strategies needed to stay ahead of it. These experiences shaped my belief that cybersecurity must go beyond technology—it must be about people, partnerships, and purpose.
At CPX, this vision translates into building a cybersecurity ecosystem that is proactive, collaborative, and deeply aligned with our clients’ strategic priorities. We’ve grown to become one of the UAE’s most trusted cybersecurity providers, serving more than 100 government and enterprise organizations with customized end-to-end solutions. This is a result of driving innovation, fostering purposeful partnerships, and remaining agile in a fast-evolving digital landscape. I’m proud of what we’ve achieved but even more excited about where we’re headed.
- Describe the most significant shift you’ve witnessed in the UAE’s cyber-physical security landscape over the past five years.
The UAE’s cyber-physical security landscape has matured rapidly, driven by national digital transformation and a growing recognition that cybersecurity is vital to economic growth and public safety. Over the past five years, the country has taken a leadership role—introducing forward-thinking policies, fostering collaboration, and investing in AI, cloud, and critical infrastructure security.
What’s changed most is the scale and complexity of threats. As organizations integrate smart technologies, risks have expanded beyond IT into operational environments. At the same time, awareness is increasing. Businesses and governments now see cybersecurity as a core enabler, not an afterthought. Misconfigurations and human error still account for a large share of incidents, which reinforces the need for holistic approaches that combine technology, governance, and education.
- Explain which emerging cyber‑attack trends worry you most, and how CPX is innovating to stay one step ahead.
The biggest concern is the rising sophistication of attacks—particularly those driven by AI. Threat actors now use generative tools to automate phishing, mimic human behavior, and evade traditional defenses. Meanwhile, supply chain vulnerabilities and misconfigurations remain persistent risks. In fact, nearly one-third of cyber incidents are tied to configuration issues.
At CPX, we’re investing in solutions that help clients move from reactive defense to proactive protection. This includes AI-powered threat detection, platform consolidation, and tools that reduce the burden on security teams. We’re also helping CISOs align cyber strategies with business goals—improving compliance, visibility, and long-term resilience. Innovation is key, but resilience is the ultimate objective.
- Illustrate how organizations—especially in critical infrastructure—can future‑proof their operations in an increasingly AI‑driven threat environment.
Regionally, we are seeing a growing pressure to innovate while defending against evolving cyber-physical threats. AI can be a powerful tool in this fight, offering faster detection and response. At the same time, it brings new risks to the table such as deepfakes, adversarial AI, and automated attacks. In the Middle East, where data breach costs are among the highest globally, the stakes are even higher.
To future-proof, organizations need layered defenses, real-time monitoring, and AI governance embedded from day one. At CPX, we help clients shift from reactive to predictive strategies, ensuring their systems remain resilient without slowing innovation. It’s about enabling growth while protecting what matters most.
- Summarize the key findings of CPX’s “State of the UAE Cybersecurity Report” and highlight the most surprising statistic.
One of the key findings is that improper usage and unlawful activity account for 19% of cyber incidents in the UAE. By integrating AI into security audits, organizations can enhance predictive risk management and improve their overall security posture.
Proactive defense mechanisms are crucial in staying ahead of emerging threats. Integrating a robust cyber threat intelligence function allows organizations to gather, analyze, and share information about potential threats. This intelligence aids in anticipating and mitigating attacks before they occur. The report also notes a 58% increase in ransomware groups operating in the UAE, underscoring the importance of threat intelligence in identifying and defending against such adversaries.
The most targeted sectors include government, finance, and energy—industries with large digital footprints and sensitive data. It’s a wake-up call: we need a paradigm shift in how we approach cybersecurity, focusing not just on tools, but on processes, people, and preparedness. The report calls for a shift in mindset, emphasizing cyber readiness, continuous audits, AI governance, and education. Organizations must adopt a more proactive and holistic approach to security.
- Forecast which cyber‑physical convergence risks will dominate boardroom discussions in the next 12–18 months.
The convergence of digital and physical systems means that a cyber incident can now have real-world consequences. This is no longer just an IT issue, boards and executives need to view cybersecurity as a business risk that impacts operations, reputation, and regulatory compliance.
In response, we can expect a major shift toward structured, regulation-driven cybersecurity approaches. AI-driven OT threat detection, the widespread adoption of Zero Trust principles, and deeper integration of compliance frameworks will define the regional OT cybersecurity landscape. Stricter regulatory frameworks and compliance mandates region-wide will push for better security practices.
Additionally, increased collaboration between government, technology providers, and critical infrastructure operators will play a pivotal role in building a resilient ecosystem. At CPX, we work directly with leadership teams to elevate cyber awareness at the top. We help organizations move from reactive to proactive, aligning their cyber strategy with long-term business goals.
- Reveal one or two of the major announcements CPX will unveil at GISEC and explain why they matter for the region.
At GISEC 2025, CPX unveiled several strategic moves reinforcing our growth and innovation agenda. We acquired spiderSilk, a UAE-born cyber-AI company specializing in exposure management and autonomous SOC agents, enhancing our ability to deliver scalable, product-led solutions and supports expansion into markets like North America and Saudi Arabia.
We also acquired TSI Tech, strengthening our physical security offerings and positioning us at the forefront of smart city and cyber-physical convergence. In parallel, we partnered with ISC2 to address the region’s cybersecurity skills gap by expanding access to certifications and training. Together, these initiatives underscored our commitment to advancing AI-powered defense, global expansion, and workforce readiness.
- Compare the UAE’s regulatory framework for cyber‑physical security with that of other leading markets—what best practices should be adopted?
The UAE has made significant progress in building a mature and integrated cyber-physical security framework. What sets the country apart is its public-private-people partnership (PPPP) approach, which actively brings together government, industry, and civil society to co-develop policies, raise awareness, and embed cybersecurity into every layer of digital transformation.
While other global markets have robust regulatory systems, the UAE stands out for its agility and cohesion across sectors. The country is able to respond rapidly to emerging threats, deploy national strategies at scale, and support innovation through flexible policy-making.
That said, no country can address today’s challenges alone. Our latest cybersecurity report outlines five best practices that can strengthen national and international approaches:
- Prioritize proactive security through early detection, continuous monitoring, and threat anticipation.
- Cultivate cyber vigilance across all levels of society, from public sector to everyday users.
- Foster collaboration and threat intelligence sharing across sectors and borders.
- Invest in talent and innovation, building a skilled, future-ready workforce.
- Establish strong AI governance to ensure ethical, secure deployment of emerging technologies.
Cybersecurity today is a shared global responsibility. The UAE’s collaborative, fast-moving model offers a strong example of how nations can align security, innovation, and resilience at scale.
Be the first to comment