How Kaspersky is fortifying Saudi Arabia’s digital space

Saudi Arabia has undergone a breakneck speed transformation in its socioeconomic reform agenda since the launch of its economic makeover, known as Vision 2030, eight years ago.

The kingdom’s unprecedented transformation is being driven in part by the National Transformation Program, an initiative that is driving the imperative for industries to transform digitally. From digitising government services to saving time to promoting an inclusive private sector that prioritises your financial security, the programme is creating a diversified, innovative, and world-leading nation.

“Saudi Arabia’s approach is visionary, and we are committed to supporting the country’s digital transformation,” Mohamad Hashem, general manager of Saudi Arabia and Bahrain at Kaspersky, says, adding that the company is committed to helping both public and private organisations protect their assets as the kingdom advances towards a highly digital future.

Saudi Arabia’s burgeoning tech ecosystem, fuelled by its young, tech-savvy population, widespread internet and mobile device access, e-government initiatives, robust infrastructure investments, and commitment to innovation, is solidifying the country’s position as a regional tech hub.

The government is pursuing smart city strategies through the adoption of innovative technologies such as artificial intelligence (AI) and the cloud while acknowledging that the increased digitalisation of various industries makes them more vulnerable to cyberattacks.

“Saudi Arabia faced a staggering 50 million cyberattacks last year alone, according to Kaspersky. This makes it one of the most targeted nations in the region,” Hashem shares. “The attacks varied widely in terms of sophistication and intent, with some posing a severe threat. For instance, advanced persistent threats (APTs) are highly sophisticated attacks designed to infiltrate networks and steal sensitive data over extended periods.”

The majority of APTs are state-sponsored and are aimed at spying on or disrupting critical sectors such as government services, telecoms, healthcare, and aviation. Given the ongoing geopolitical tensions in the Middle East, APT attacks have become more common.

Hashem highlights that Kaspersky is actively tracking 20 APT groups operating in the region, highlighting the increasing risk to Saudi Arabia’s infrastructure.

The cybersecurity firm published a report in October that revealed that the Middle East is facing a multifaceted cyber threat landscape with a range of malicious activities, from ransomware attacks and hacktivism to data theft and breaches.

The report identified 19 ransomware groups active in the Middle East, with Saudi Arabia and the UAE being particularly hard hit. Similarly, 10 million stolen user account records were discovered in Egypt, Saudi Arabia, and the UAE.

“Kaspersky offers a comprehensive Threat Intelligence Portal to counter these threats. The portal monitors the dark web to protect clients’ digital assets, ensuring the confidentiality of their private data and enabling organisations in Saudi Arabia to defend against sophisticated attacks,” adds Hashem.

As the digital economy expands globally, so too does the prevalence of digital crimes, and Saudi Arabia is not immune to this trend. Cybercriminals are evolving their techniques at an alarming rate, and the stakes are only getting higher.

Safeguarding Saudi’s digital future

Kaspersky is leveraging its deep threat intelligence capabilities and local market knowledge to drive growth across the Middle East, Africa and Turkiye (META) region.

Earlier in 2024, global cybersecurity and digital privacy firm Kaspersky made history by establishing its first Middle East headquarters in Saudi Arabia. The significant milestone marked a culmination of 17 years of substantial growth, driven by regional economic development, government partnerships, and strategic investments in research and development (R&D).

“Saudi Arabia is a strategic market for Kaspersky, and our growth reflects its significance. We have experienced substantial growth in the region, expanding by 70 per cent in 2023 and 22 per cent in the first half of this year,” says Hashem.

“With a 17-year presence and our regional headquarters in Riyadh, we are committed to providing comprehensive support to organisations and driving strategic development.”

The regional HQ builds on Kaspersky’s extensive global network, which includes 34 offices in over 30 countries and operations spanning 200 countries and territories. Since entering the Middle East market in 2008, the company has significantly bolstered its presence, including opening a new office in Riyadh in 2022 and the launch of its first Transparency Center in 2023.

“Our Kaspersky Academy plays a vital role in educating university students and IT graduates, helping to build a tech-ready generation of Saudi nationals,” Hashem explains while noting that the establishment of the Transparency Centre is setting a benchmark for openness and integrity, furthering trust with the company’s customers in Saudi Arabia and broader Middle East region.

Kaspersky’s Middle East HQ will provide comprehensive support for the operational activities of its group companies and ensure sustainable business development in Saudi Arabia and the broader region. The office will focus on strategic growth, threat research and analysis, and the delivery of region-tailored services such as Managed Detection and Response (MDR).

“To address the regional shortage of cybersecurity professionals, especially in Saudi Arabia, we’re investing in education and talent development,” Hashem shares while noting that research by Kaspersky indicates that more than 40 per cent of regional firms lack cybersecurity expertise, “a critical gap we aim to bridge”.

“Services such as Kaspersky MDR, which allow companies to outsource their cybersecurity needs to Kaspersky’s experts, are key to closing this gap.”

With several ongoing and planned initiatives to ensure future readiness with a digital-first approach, Saudi Arabia’s adoption of innovative technologies such as 5G, the Internet of Things (IoT), and artificial intelligence (AI) as part of its economic makeover will potentially increase cybercriminal interest in targeted attacks and cyber threats.

Furthermore, the cybersecurity giant launched its Industrial Control Systems (ICS) Security Assessment service in September, setting a new standard for safeguarding the kingdom’s critical industrial infrastructure, including construction and energy.

The ICS Security Assessment service provides a comprehensive evaluation of industrial control systems. It examines vulnerabilities at all levels, including physical and network security, as well as specific weaknesses in ICS components such as SCADA systems.

Despite Saudi Arabia’s ranking as one of the least exposed countries in the region during Q2 2024, Kaspersky identified construction, oil and gas, and financial services as highly vulnerable sectors due to insecure employee behaviour.

“To address these vulnerabilities, we’re collaborating closely with the Saudi government and local businesses. Our ICS Security Assessment service contributes to Vision 2030 by fostering local cybersecurity talent,” says Hashem.

Kaspersky has been expanding its footprint in Saudi Arabia through strategic partnerships and initiatives aimed at reinforcing the country’s cybersecurity capabilities and offering state-of-the-art protection against evolving cyber threats.

“Robust protection for industrial networks and automation systems requires specialised solutions such as Kaspersky Industrial CyberSecurity. The platform supports IT-OT convergence and offers the scalability needed to adapt to an organisation’s evolving requirements,” notes Hashem.

The cybersecurity firm teamed up with the Saudi Esports Federation in October 2023, a partnership that facilitated the creation of a platform for Kaspersky to contribute towards the goals of the National Gaming and Esports Strategy. The esports and gaming sector is expected to contribute as much as $13.3bn (SAR50bn) to Saudi Arabia’s annual GDP and generate nearly 39,000 jobs by the end of the decade.

Kaspersky also partnered with Al-Falak Electronic Equipment & Supplies to distribute its full range of consumer products. The product lineup includes security solutions such as Kaspersky Standard, Plus, and Premium, alongside specialised tools such as Kaspersky Safe Kids and Password Manager.

The shift towards a digital-first approach in Saudi Arabia has significantly increased. businesses’ vulnerability to cyber attacks; a confident Hashem believes that Kaspersky will play an increasingly vital role in safeguarding the kingdom’s digital future.

Fortifying cyberspace

Kaspersky is leveraging its extensive threat intelligence and regional expertise to grow its market share in Saudi Arabia and the broader GCC market. The firm has developed several tailored cybersecurity solutions to address the region’s unique digital challenges and regulatory frameworks.

Kaspersky’s cybersecurity solutions and initiatives support national security strategies, enhance cyber resilience, and provide advanced tools for businesses and individuals. It introduced its MDR service in Saudi Arabia in November 2023, leveraging the public cloud infrastructure provided by Saudi Cloud Computing Company (SCCC) Alibaba Cloud.

The partnership with SCCC’s strategic move ensures compliance with Saudi Arabia’s data sovereignty and privacy regulations, a critical element of the country’s National Cybersecurity Strategy. By hosting the service locally, Kaspersky aligns with national efforts to enhance cybersecurity while addressing growing concerns around data control and regulatory adherence.

Kaspersky runs specialised training and internship programmes across the GCC, including Saudi Arabia, to develop local cybersecurity talent. The cybersecurity behemoth launched its Cyber Generation program in 2023 to enhance Saudi Arabia’s cybersecurity capabilities.

The educational initiative provides training and internships for young professionals, regardless of their IT or cybersecurity experience. By fostering cybersecurity awareness and skills, the programme seeks to equip individuals with the knowledge needed to combat emerging cyber threats.

“Education is fundamental, and the Kaspersky Academy helps to tackle the shortage of cybersecurity professionals directly,” says Hashem. “The academy has already trained over 500 students and is ever-expanding to offer further training programs, including internships, to help fortify national capabilities within the sector.”

Furthermore, Kaspersky’s tailored solutions align with the GCC region’s diverse regulatory landscape, such as Bahrain’s Data Protection Law and the UAE’s cybersecurity initiatives. The company’s cyber immunity approach is reshaping the future of cybersecurity and is gaining significant momentum as more organisations in the region are recognising the need for inherently secure technologies.

Kaspersky’s Threat Intelligence portfolio provides a comprehensive view of the organisation’s security posture. It includes Threat Analysis, Threat Lookup, Threat Data Feeds, Threat Intelligence Reporting, Digital Footprint Intelligence, and Threat Infrastructure Tracking.

Rethinking cybersecurity

The rapid advancement of AI has revolutionised the cybersecurity landscape. As traditional threat-focused approaches become insufficient to counter the sophisticated and ever-changing nature of modern cyber risks, a paradigm shift is urgently needed.

“As cloud-based services and data localisation gain traction in Saudi Arabia, Kaspersky leverages AI and machine learning to stay ahead of evolving cyber threats. Our nearly two decades of experience using AI to analyse vast datasets and detect malware have enabled us to identify and counter new attacks accurately,” says Hashem.

However, he acknowledges that the growing adoption of AI by cyber criminals, as seen in deepfakes and AI-generated phishing, necessitates even more robust protection.

Data privacy also remains a major concern, especially in Saudi Arabia’s cloud and localised environments. A recent study by Kaspersky revealed that 95 per cent of C-suite executives acknowledge the use of generative AI tools within their organisations, with over half expressing concerns about potential data leaks.

To allay those fears, Hashem says Kaspersky is combining AI-driven threat detection with security measures to ensure that organisations in Saudi Arabia are well-prepared to defend against both traditional and emerging AI-powered cyber threats.

The cybersecurity firm’s endpoint security solutions offer comprehensive protection for devices such as computers, laptops, and mobile phones – helping prevent malware infections, data breaches, and unauthorised access.

Similarly, Kaspersky’s network security solutions safeguard organisations’ networks from cyberattacks, including intrusion attempts, denial-of-service (DoS) attacks, and data exfiltration. As cloud adoption continues to grow in Saudi Arabia, Kaspersky’s cloud security solutions protect data and applications hosted in the cloud. The solutions help prevent data breaches, unauthorised access, and compliance violations.

Given the vast array of cybersecurity solutions in the market, Hashem advises organisations in the Middle East to adopt a holistic approach to cybersecurity. He explains that this includes ensuring the security of every component of an organisation’s IT infrastructure and optimising its investments.

“Kaspersky assists organisations by identifying their most critical needs and developing a customised strategy to protect all potential entry points,” says a confident Hashem.

Giving an analogue of a house, Hashem explains that just as intruders can enter through windows, doors, or gates, cyber threats can exploit various vulnerabilities in an organisation’s digital infrastructure.

“A holistic approach ensures that all entry points are protected. Kaspersky offers a comprehensive portfolio of solutions to safeguard every aspect of an organisation’s digital environment, tailored to meet corporates’ specific needs, including EDR Foundations, EDR Optimum, and XDR Expert,” he adds.

Detecting and responding to sophisticated cyber-attacks requires specific expertise, and a lack of resources can lead to delayed responses. Going forward, Hashem emphasises that protecting data, ensuring operational continuity, and maintaining customer and stakeholder trust are fundamental to Saudi businesses’ long-term success in the digital era.

Read: The changing face of cybersecurity industry in the Middle East