As the UAE continues its push to become a global hub for advanced manufacturing and sustainable industrial development, global players like Thales Group are playing an increasingly central role in shaping the region’s industrial future. At the recent edition of ‘Make it in the Emirates’, Roque Carmona, group chief procurement officer at Thales, spoke with Gulf Business about the company’s evolving supply chain strategy, the growing significance of local partnerships, and how regional ecosystems are key to long-term resilience.

Carmona, who leads Thales’ procurement globally, is a vocal advocate for treating suppliers not as vendors but as strategic partners. His emphasises the importance of innovation, trust, and regional capability-building.

With Thales now working with 20 local suppliers through its Go to UAE initiative — up from nine in 2024 — the company’s investment in the Emirates continues to deepen. Carmona’s remarks also reflect broader trends shaping global procurement: regionalisation, automation, and the intensifying battle for talent.

Here are excerpts from the chat.

Tell us about your role and how it connects with what you’re doing here in the UAE?

I’m the group chief procurement officer for Thales, a position I’ve held for seven years now. Procurement today is much more than buying something and walking away. It’s about building resilient and efficient supply chains to ensure that we have the equipment, parts, and services we need to serve our customers.

At Thales, we take a regional approach, creating local ecosystems not just globally, but in Europe, India, the Americas, and increasingly here in the Emirates. The UAE is an important region for us now as it grows its aerospace and defence sectors.

With all the geopolitical tensions and post-pandemic disruptions, how has your procurement strategy adapted to stay resilient?

This is our core job: navigating complexity. One key strategy we use is multi-sourcing, which means having two sources of supply in two different regions. That way, if a crisis hits — whether it’s pandemic, conflict, or anything else — we’re not stuck.

It’s about securing supply without compromising on time, quality, or cost. You call it backup; we call it second source.

Technology, especially AI, is changing business across sectors. How is it influencing procurement and supply chain operations at Thales?

AI and advanced technology are impacting our world in two major ways. First, by helping us capture innovation from our suppliers — some studies suggest that up to 66 per cent of innovation comes from suppliers, and I believe that.

Second, through resource sourcing: finding the right technologies and capabilities in fields like cybersecurity, software development, optronics, and laser systems. It’s about identifying the right partners and making sure the know-how is in place, globally and locally.

Last year at Make it in the Emirates, you onboarded nine UAE suppliers under the ‘Go to UAE’ initiative. Where does that stand now?

We’ve expanded from nine to 20 suppliers now. The initial group has been through a stringent qualification process, proving their ability to meet aerospace and defence standards — what we call special processes at Thales. These partners are now ready not only to serve us locally but also to expand globally. It’s a sign of the UAE’s industrial potential.

What do you look for when evaluating suppliers, especially in this region?

We look at the following factors:

Industrial maturity — not just having the right machines, but the right mindset, systems, and integrity.

Quality DNA — suppliers must deliver on time and to specification, every time.

Competitiveness — we want partners who understand the market and continuously improve.

And increasingly, we look at cybersecurity, safety standards, and ethical practices. Trust is non-negotiable in our line of work.

What has stood out about the UAE’s industrial and procurement ecosystem at this year’s forum?

The vision and support from leadership here is remarkable. The environment is business-friendly and agile.

Geographically, the UAE is also well-placed — close to rare earths and with the ability to attract global talent. We’re here not just to build in the Emirates, but to build for the region, and possibly support neighboring countries too.

What more can the region do to attract partners like Thales?

Keep investing in talent development — not just engineers, but also skilled technicians and industrial workers.

Continue to fund supplier capacity and innovation, and most importantly, maintain the UAE’s agile procurement model. That flexibility is what makes working here so appealing.

Looking ahead, what trends do you see shaping global supply chains?

Three stand out:

Talent wars — every sector is competing for the right people.

Regionalisation — not the end of globalisation, but a move toward regional sovereignty in supply chains.

Automation and AI — they’re already influencing how we work and what we deliver, especially in aerospace and defense.

Finally, from a leadership standpoint, what values do you bring to your team and this mission?

Be present. Know what’s happening on the ground. And most of all — be agile. The world is too uncertain to stick to a single strategy. A leader today must stay flexible and open-minded. Even if you’re heading in one direction, be ready to shift if needed.

The UAE workforce is showing strong signs of cybersecurity readiness, outpacing their EMEA peers in areas such as threat awareness and trust in their organisations’ ability to recover from attacks. That’s according to new research from Cohesity, a global leader in AI-powered data security and resilience.

The survey, conducted in partnership with OnePoll, captured responses from 500 full-time UAE employees, revealing that 86 percent believe they can identify a cyber threat, and nearly 90 percent trust their employer’s cyber resilience.

But the study also sheds light on lingering behavioural gaps, with some employees admitting they might delay reporting due to fear of blame or confusion about protocols. Cohesity leaders say this is the next frontier—empowering teams to not just recognise risks but confidently act on them without hesitation. With the UAE’s national cybersecurity ambitions accelerating, businesses now need to focus on turning awareness into action.

Gulf Business sat down with Johnny Karam, MD and VP, International Emerging Markets, and Mark Molyneux, EMEA CTO at Cohesity, to unpack the findings and discuss what real cyber resilience looks like for organisations in the UAE and across the region.

Your latest research shows that while 86 per cent of UAE employees believe they can identify a cyber threat, deeper knowledge still seems lacking. What does this confidence gap reveal about current training methods, and how should organisations close it?

Johnny Karam: The fact that 86 percent of UAE employees feel confident in identifying cyber threats is a strong reflection of the country’s focus on digital awareness. This high level of awareness reflects the UAE Cybersecurity Council’s long-term investment in public education, including programs for students, women in tech, and the broader community, part of a strategy stretching from 2020 to 2030.

However, our study shows that this confidence does not always translate into deeper understanding or preparedness. Many employees may recognise the signs of a potential attack but feel uncertain about what to do next. This gap reveals that current training approaches are still too focused on awareness rather than action.

To close this gap, organisations need to evolve their training methods. It is no longer enough to explain what phishing or ransomware is in theory. What works best is practical, scenario-based training that prepares employees to respond under pressure. When individuals know exactly what steps to take and feel confident doing so, they become active contributors to the organisation’s defence. It is about building the confidence to act, not just the ability to identify.

One of the more striking insights is that fear of blame and confusion delays incident reporting. What steps can companies take to foster a culture of psychological safety and quick escalation in cybersecurity?

Johnny Karam: This is one of the most human yet critical findings from our research. In the UAE, 46 percent of employees who hesitated to report a threat said it was because they feared blame or were unsure whether their concern would be taken seriously. That hesitation can be costly. In cybersecurity, delays can make the difference between containment and escalation. It’s like spotting a fire in your office — no one hesitates to raise the alarm. That’s the level of instinctive response we need when it comes to cybersecurity threats.

Organisations need to address this by creating a culture of psychological safety, where reporting is always encouraged and never penalised, and this is where leadership plays a vital role in reinforcing that message. Employees must feel supported, and clear reporting channels should be made visible and simple to follow. Even if an alert turns out to be a false alarm, flagging it is always the right move.

Encouraging early reporting and removing the stigma around it helps create a stronger, faster-responding organisation. It’s also about cultural maturity. Just as the UAE focused early on education, the next phase is building psychological safety into company cultures, where “see it, say it, sort it” becomes second nature.

Ransomware continues to evolve, yet your data shows that nearly one in four employees does not fully understand it. How can organisations move from theoretical awareness to scenario-based, hands-on preparedness?

Mark Molyneux: Ransomware is no longer a rare or abstract threat. It is one of the most pressing challenges facing organisations today. The fact that 86% of employees in the UAE understand what ransomware is and how it spreads shows that awareness is extremely is extremely high, which is largely due to the UAE Cyber Security Council’s approach to increasing security awareness across the Emirates.

But to reach the step of cyber-resilience, we need to move beyond surface-level awareness. Scenario-based training, such as simulated attacks and role-playing exercises, is far more effective in preparing employees to respond confidently and quickly.

In addition, organisations can benefit from expert-led incident simulations or even partnerships with external response teams, like our Cohesity Cyber Event Response Team (CERT), to build muscle memory in high-pressure scenarios.

When people are familiar with the pressure of a real-time incident, they are more likely to take the right action. Awareness is important, but preparedness is what ultimately determines whether an organisation can contain an incident or fall victim to it.

What are some examples of human-centric cybersecurity training that have worked particularly well in the UAE or broader Middle East region?

Johnny Karam: In this region, the most effective training approaches are those that account for cultural context and local realities. We have seen companies run phishing simulations, real-time cyber escape rooms, and role-specific drills that make the training highly engaging and memorable. These methods encourage active participation and help employees internalise what to do in the face of a threat.

The strongest results come when training is localised, conducted in Arabic where relevant, aligned with regional threat trends, and inclusive of leadership participation.

When executives lead by example, it reinforces the idea that cybersecurity is everyone’s responsibility. We are seeing a clear shift across sectors like banking and healthcare, where security awareness is being embedded not just as a requirement, but as a core part of organisational culture.

Cybercriminals are constantly evolving — how does Cohesity stay ahead of the curve?

Johnny Karam: Cybersecurity is an arms race, and staying ahead takes relentless innovation. At Cohesity, we invest double the R&D of our closest competitor. That allows us to anticipate threats like AI-generated phishing and craft real-time responses, from behaviour-based access controls to early threat detection. But it’s not just about tech — we work with a network of cybersecurity partners and an expert advisory board to stay on top of tomorrow’s risks, today.

How do these findings align with the UAE Cybersecurity Council’s broader goals, and how is Cohesity engaging with regulators or national stakeholders to support these priorities?

Johnny Karam: The UAE Cybersecurity Council has taken decisive steps to strengthen national cyber resilience. The emphasis on public-private collaboration and secure digital transformation aligns closely with what we are seeing in the field. Our findings reflect this momentum, for example, 67 percent of UAE employees say they would report suspicious activity directly to cybersecurity teams, which is a strong indicator of engagement and awareness.

We work closely with government entities and industry stakeholders, participating in briefings, knowledge-sharing sessions, and collaborative initiatives to build operational readiness. Our AI-powered platform is aligned with the UAE’s focus on proactive defence and digital trust. True resilience depends on both technology and people, and we are committed to supporting both dimensions.

With hybrid work environments and increasing digital transformation across sectors, how is Cohesity helping clients in the region build not just secure infrastructure but a more cyber-aware workforce?

Mark Molyneux: The shift to hybrid work has broadened the attack surface for organisations, making it even more critical to adopt an integrated approach to security. At Cohesity, we not only help our clients protect data across all environments, from on-premise systems to the cloud and edge, but we also work with them to build awareness and confidence within their teams.

Our research shows that 89 percent of UAE employees trust their organisation’s ability to recover from attacks, and 66 percent have received cybersecurity training in the past year. These are positive indicators. However, we aim to go further by supporting secure decision-making across every level of the organisation.

This includes simplifying processes, integrating automation where possible, and ensuring that employees have both the tools and the understanding needed to respond quickly.

Cyber resilience is not a department; it is a culture, and we help our clients embed it across their workforce.

Tell us about Cohesity’s offerings.

Mark Molyneux: Cohesity is a global leader in data security and resilience, trusted by more than 13,600 organisations worldwide, including over 85 of the Fortune 100.

Following our integration with Veritas’ enterprise data protection business, we now offer one of the most comprehensive platforms available, capable of protecting, managing, and recovering data whether it is stored on-premise, in the cloud, or at the edge.

What makes us different is how we combine advanced threat detection and rapid recovery with simplicity and ease of use.

Our AI-powered solutions help organisations identify threats early, isolate incidents, and recover quickly, all while reducing complexity. In today’s environment, where cyberattacks are becoming more frequent and more sophisticated, speed and reliability are essential.

But we also recognise that technology alone is not enough. That is why we work closely with our customers to build security awareness, support their teams, and align with their long-term resilience goals. Cybersecurity is ultimately about protecting people, operations, and trust, and Cohesity is here to help organisations do exactly that.

Cenomi Retail, one of Saudi Arabia’s largest retail brand partners, said on Monday that its founding shareholders have signed a share purchase agreement with UAE-based Al-Futtaim Group to acquire a 49.95 per cent stake in the company for over SAR2.5bn ($666m).

The transaction will see Al-Futtaim purchase shares priced at SAR44 each from selling shareholders Fawaz Abdulaziz Alhokair, Abdul Majeed Abdulaziz Alhokair, Salman Abdulaziz Alhokair, Saudi FAS Holding Company, and FAS Real Estate Company.

As part of the agreement, Cenomi Retail and Al-Futtaim are negotiating a shareholder loan agreement under which Al-Futtaim will provide no less than SAR1.3bn in funding upon transaction completion.

The loan aims to bolster Cenomi Retail’s balance sheet and support its next phase of growth. Entry into the loan agreement is a condition for the completion of the private transaction.

“This transaction marks a transformative milestone for Cenomi Retail and our shareholders,” said Fawaz Abdulaziz Alhokair, one of the selling shareholders. “By deleveraging our balance sheet and establishing a stronger financial foundation, we are reinforcing long-term partnerships and positioning the company for sustainable growth.”

Al-Futtaim’s investment represents one of the most significant UAE private sector transactions in the kingdom to date and is aligned with Saudi Arabia’s Vision 2030, which aims to diversify the economy and attract foreign capital.

Investment in Cenomi Retail shows confidence in Saudi’s economy, says Al-Futtaim CEO

Omar Al Futtaim, vice chairman and CEO of Al-Futtaim, said: “Our investment in Cenomi Retail reflects our strong confidence in Saudi Arabia’s economy and its long-term Vision 2030. This investment represents substantial foreign direct investment and underscores the robust economic partnership between our countries.”

Al-Futtaim, which operates across automotive, financial services, real estate, retail, and healthcare in the Middle East, Asia, and Africa, brings significant operational scale and retail expertise.

Its retail portfolio includes exclusive operations of Inditex brands such as Zara, Massimo Dutti, and Bershka across Asia and the Middle East, including Saudi Arabia, the UAE, Egypt, Malaysia, Thailand, and Singapore.

The partnership is expected to enhance Cenomi Retail’s operational capabilities, expand its brand portfolio, and support digital transformation initiatives.

“This announcement demonstrates that Cenomi Retail is firmly on the right strategic path,” said Salim Fakhouri, CEO of Cenomi Retail.

“Having Al-Futtaim as a strategic investor enables us to capitalize on their proven capabilities and further solidify our leadership in the retail sector,” he added.

The transaction remains subject to customary regulatory approvals, including clearance from Saudi Arabia’s General Authority for Competition, and other contractual closing conditions.

Lazard acted as the exclusive financial advisor to Cenomi Retail, while J.P. Morgan served as exclusive advisor to Al-Futtaim.

Emirates has released a second limited-edition collection under its Aircrafted by Emirates initiative, featuring handmade bags and luggage created from upcycled aircraft materials.

The 2025 collection, available now through the Emirates Official Store, follows the sell-out success of the airline’s 2023 debut line and is expected to be snapped up by collectors within days.

The new drop includes 167 bespoke pieces made from repurposed materials salvaged during Emirates’ ongoing aircraft retrofit project.

Emirates Aircrafted collection: Here’s what makes them special

Items include three trolley bag styles — the most in-demand product from the original release — two backpack designs, and two handbags, one of which features fur from the captain’s seat.

Prices range from $80-350.

The products are crafted from elements of the Emirates A380 and Boeing 777 aircraft, including aluminium headrests, leather from First and Business Class seats, and sofas from the A380 onboard lounge.

Each item is handmade by a team of 14 dedicated tailors at Emirates Engineering’s Dubai facility.

These tailors, officially known as engineering maintenance assistants, typically work on interior cabin repairs but have now been fully reassigned to support the growing Aircrafted initiative.

So far, more than 30,000 kilogrammes of material have been extracted from 63 aircraft undergoing retrofits.

Emirates says all fabric components are industrially laundered and deep-cleaned before production, with leather conditioned and sanitised.

Functional zippers and brand-new lining are added to each bag, and some pieces feature Emirates seatbelts as straps.

Supporting the Emirates Foundation

Proceeds from the collection will go to the Emirates Airline Foundation, supporting children in need.

The airline’s first Aircrafted collection raised more than $17,000 for the cause.

The initiative is part of a broader effort tied to Emirates’ retrofit programme, which began in August 2022.

The airline is investing billions to upgrade 219 aircraft, including the installation of nearly 4,000 Premium Economy seats, 728 refurbished First Class suites, and more than 5,000 upgraded Business Class seats.

boAt, India’s No 1 and World’s No 3 audio wearables brand (Source: IDC report), has debuted in the UAE, marking a milestone in its international expansion journey.

The brand will offer its portfolio of audio products and smart wearables, including TWS (true wireless stereo) earbuds, headphones, portable speakers, large audio, and smartwatches to customers in the UAE.

These products will be available through an omnichannel retail presence, across both online platforms and offline stores.

boAt launch aligns with the brand’s expansion strategy

This expansion is aligned with boAt’s strategic vision to expand in a focused manner in select countries in the Middle East, that have a large Indian diaspora or population with similar tastes and preferences as India.

The focus remains on young, digitally enabled consumers in such target international markets.

Aman Gupta, co-founder and CMO of the brand, said: “The UAE is a natural next step for boAt’s international journey. With a large Indian diaspora, strong demand for wearable tech, and a digitally connected, youth-driven population, the market mirrors many of the conditions where we’ve seen success in India. Add to that the UAE’s strategic location and pro-business environment, and it becomes an ideal springboard for our broader expansion across the GCC and MENA region.”

Signalling its intent to disrupt, boAt kicked off its UAE presence with the ‘Don’t be a Fanboy’ campaign, shot and conceptualised by Moonshot UAE.

“Our expansion into the UAE represents a defining step in boAt’s mission to expand our distribution in select countries in the Middle East,” said Sameer Mehta, co-founder and CEO of boAt. “These are dynamic markets with a large base of young, digitally enabled consumers who align with boAt’s DNA of innovation. We are excited to introduce the boAt experience to the UAE.”

Gupta adds: “We’re not trying to be another legacy electronics brand — boAt is built around community, culture, and design. We see a gap between ultra-premium global players and low-cost generic products. That’s where boAt comes in, delivering premium experiences at accessible price points. In the UAE, our edge will be creating relevance through localised storytelling, influencer partnerships, and products that speak to the lifestyles of Gen Z and millennial consumers.”