Back to all finance news

UAE enacts new law to reinforce CBUAE’s financial oversight

The decree law aims to strengthen the CBUAE’s independence, enhance the stability of the UAE’s financial sector, and align regulation with global standards

Gulf Business
Gulf Business

13 October, 2025

UAE enacts new law to reinforce CBUAE’s financial oversight
Image: WAM

TT

16

The UAE’s President Sheikh Mohamed bin Zayed Al Nahyan has issued Federal Decree Law No (6) of 2025, concerning the Central Bank of the UAE (CBUAE) and regulation of financial and insurance institutions.

The decree law aims to strengthen the CBUAE’s independence, enhance the stability and competitiveness of the UAE’s financial sector, and align regulation with global standards.

It mandates maintaining currency stability, safeguarding the financial system, and prudent management of foreign reserves.

Under the law, the central bank’s principal functions include implementing monetary policy, supervising licensed financial entities in line with international norms, issuing regulations, and overseeing financial market infrastructure.

It is also assigned the role of “resolution authority” to intervene when financial institutions face distress, including appointing management, restructuring, or liquidation.

View post on X

New law gives CBUAE more authority and bolsters consumer protection

To bolster consumer protection, the law consolidates complaints processes for banks and insurers under the independent body Sanadak. It creates specialised judicial committees whose rulings are final and enforceable for disputes up to Dhs100,000.

It also mandates that credit facilities must align with customers’ income to discourage irresponsible lending practices.

Early intervention powers allow regulators to require recovery plans, impose higher capital or liquidity requirements, alter business strategies, or take direct control of failing entities.

The law raises administrative fine limits — penalties can reach up to 10 times the value of the violation or unjust enrichment, automatically debited from accounts held with the CBUAE or licensed institutions.

Reconciliation with violators prior to final judicial decision is permitted, and fine decisions may be published to enhance transparency.

SentinelOne’s Meriam ElOuazzani on how AI is reshaping cybersecurity in the region

SentinelOne’s Meriam ElOuazzani explains how AI is reshaping cybersecurity in the Middle East, helping enterprises move from reactive defence to proactive resilience

Neesha Salian
Neesha Salian

13 October, 2025

SentinelOne’s Meriam ElOuazzani on how AI is reshaping cybersecurity in the region
Image: Supplied

TT

16

As cyberattacks grow more sophisticated and the region’s digital ambitions accelerate, AI is emerging as the backbone of modern cybersecurity. Meriam ElOuazzani, senior regional director for the Middle East, Turkey, and Africa at SentinelOne, discusses how AI-driven automation, zero-trust frameworks, and proactive defense strategies are transforming how regional enterprises safeguard their data and operations.

How is AI changing the way enterprises defend against cyber threats in the Middle East?

AI is transforming cybersecurity in the Middle East by enabling enterprises to move from reactive defense to proactive autonomous protection. Traditional tools often struggle with the sheer scale and sophistication of modern threats, but AI-native solutions provide real-time visibility, rapid detection, and automated response at machine speed. In a region that experiences rapid digital transformation across government, finance, energy, and critical infrastructure, AI addresses the shortage of skilled professionals by augmenting human expertise with intelligent automation.

Machine learning models continuously adapt to new attack techniques, reducing dwell time and minimising impact. Beyond threat detection, AI empowers proactive threat hunting, risk prioritisation, and compliance monitoring, aligning with regional regulations.

For Middle Eastern enterprises pursuing ambitious national digital agendas, AI is not just a technology upgrade but a foundation of cyber resilience, enabling organisations to innovate confidently while staying ahead of an increasingly complex threat landscape.

What cybersecurity trends should businesses in the region be most concerned about?

Firstly, organisations must be prepared for the rise of advanced ransomware and double-extortion attacks targeting critical infrastructure, financial services, and government sectors. These often exploit supply chain vulnerabilities. Second, the surge in cloud adoption and hybrid work models has expanded the attack surface, with misconfigurations and identity-based threats becoming prime entry points. The integration of AI and automation by attackers is creating more evasive and scalable cyber campaigns, challenging traditional defenses.

Additionally, the GCC’s regulatory changes demand stronger data protection and compliance, making governance a strategic priority. Insider threats and phishing continue to persist as employees remain a critical weak link.

To address these evolving threats, businesses should adopt zero-trust, AI-powered defence, and proactive resilience strategies that ensure continuity while safeguarding national digital transformation agendas.

With governments introducing stricter data localisation and compliance requirements, how can organisations ensure they remain secure and compliant without adding complexity or slowing business operations?

Organisations can implement this by adopting security frameworks that embed compliance into daily operations rather than treating it as an add-on. Leveraging AI-native platforms with built-in policy enforcement ensures data is monitored, protected, and stored according to local regulations, without manual overhead.

Zero trust principles, such as verifying every user, device, and workload, help reduce risk while maintaining flexibility across hybrid environments.

Cloud-native security solutions with regional data centres also enable compliance without disrupting business agility. To avoid complexity, automation plays a crucial role, streamlining reporting, audits, and threat detection.

By integrating compliance into security architecture, enterprises can remain resilient, meet regulatory obligations, and continue driving digital transformation without sacrificing speed or innovation.

What strategies should companies adopt to strengthen their overall cloud and application security as digital transformation accelerates?

As digital transformation accelerates, companies must adopt a holistic and layered approach to this. The first step is embedding security into the software development lifecycle through DevSecOps practices. This ensures vulnerabilities are identified and remediated early.

Zero-trust architectures should be implemented across cloud and application environments. Identity security is essential and includes multi-factor authentication, least privilege access, and continuous monitoring to help prevent credential-based breaches.

Cloud-native security tools, including workload protection and posture management, provide visibility and control across dynamic, multi-cloud environments. To reduce regulatory risk, organisations need to encrypt data in transit and at rest, along with automated compliance checks.

Continuous threat hunting powered by AI and automation helps enterprises detect and respond at machine speed. Ultimately, integrating security as a business enabler rather than a barrier ensures that organisations can innovate securely while safeguarding sensitive data, applications, and customer trust.

National Bank of Fujairah’s Rehan Ali on how banks can empower SMEs

Rehan Ali, head of Business Banking at NBF, discusses what it will take to finance and sustain SME growth

Neesha Salian
Neesha Salian

13 October, 2025

National Bank of Fujairah’s Rehan Ali on how banks can empower SMEs
Image: Supplied

TT

16

As the UAE targets one million SMEs and ten unicorns by 2031, the spotlight is on how financial institutions can fuel this next wave of growth. In this conversation, Rehan Ali, head of Business Banking at NBF, discusses the evolving role of banks in supporting entrepreneurs—why digital tools alone aren’t enough, how relationship banking still anchors trust and judgment, and what’s needed to bridge ambition with sustainable finance in an increasingly competitive SME landscape.

What outcomes is the UAE targeting for entrepreneurship by 2031, and why do they matter?

The UAE has set clear objectives for the next decade: one million SMEs in operation, 10 unicorns, and a top three global ranking for entrepreneurship. These targets are central to the country’s strategy for economic diversification and global competitiveness. They signal a deliberate shift toward a more innovation-led economy and set expectations for policy, finance, and private sector collaboration. For financial institutions, these goals highlight the need for capital to flow to productive segments, for support to be timely and adaptive, and for solutions to address the realities of operating and scaling in a competitive regional hub.

How significant are SMEs today, and where are the pressure points that slow growth?

According to the UAE Ministry of Economy, SMEs account for about 63.5 per cent of the UAE’s non-oil GDP, underscoring their role in job creation, innovation, and resilience. However, constraints remain. Access to appropriately structured finance can be uneven, sector guidance is not always readily available, and market entry can be complex, particularly for first-time exporters or firms in regulated industries. These challenges intensify at key moments, such as expansion or compliance change, when cash flow, risk, and governance must be managed in tighter alignment.

What has digital transformation solved for SMEs, and where are the limits?

Digital onboarding, fintech integrations, and data-driven credit scoring have reduced friction and widened access to basic services. These innovations have improved operational efficiency across the banking system. However, technology does not fully capture the nuances of sector cycles, management quality, or evolving regulatory exposure. As firms scale or pivot, they need judgment that is grounded in real context. The frontier is not more technology for its own sake, but better integration of digital tools with informed decision-making.

Why does relationship banking still matter in a digital-first era?

Relationship banking introduces context to data. Continuous engagement allows bankers to understand a client’s operating cadence, supply chain, seasonality, and risk appetite. That insight improves credit decisions and makes solutions more aligned with long-term goals. It also enables proactive support when conditions change. The result is a shift from transactional product delivery to collaborative problem solving, where financing, treasury, and risk management work in concert with the client’s strategy.

What operating model shifts inside banks best support this agenda?

The most effective models combine scalable digital journeys with access to sector-literate experts when complexity rises. Dedicated SME units, clear escalation paths to specialists, and data environments that surface the right signals at the right time all matter.

Omnichannel access remains relevant because businesses operate both online and on the ground. A branch or cash deposit machine is not a substitute for digital, and digital is not a substitute for trusted advice, as the two must reinforce each other.

How should access to finance evolve to meet ambition without compromising prudence?

Risk sharing and breadth of instruments are key. Guarantee schemes with development banks can unlock lending for viable firms that lack collateral depth. Tailored working capital, corporate cards with disciplined controls, and onboarding that is rigorous yet efficient help align capital with productive use. The goal is not simply faster credit. It is better-matched credit that anticipates cash needs, acknowledges sector seasonality, and supports responsible scaling.

How are banks supporting SMEs beyond finance?

A growing number of platforms now integrate advisory and operational tools, linking financial services with basic legal, HR, and compliance resources.

Some banks sponsor innovation challenges and mentorship networks that facilitate knowledge exchange among founders. These efforts aim to reduce the non-financial frictions that often slow growth, especially for first-time entrepreneurs or firms entering new markets.

What factors will determine whether the UAE reaches its 2031 goals?

Progress will hinge on pairing digital scale with human insight. Technology can broaden access and lower costs, but trusted relationships help businesses navigate uncertainty, adjust to regulation, and invest with confidence.

Success will require products designed around real operating needs, continuity in advisory relationships, and collaborative support structures that enable SMEs to grow responsibly and contribute to the country’s next phase of economic transformation.

GITEX GLOBAL 2025: OPSWAT to showcase real-world cyber defence at event, says Rami Nehme

Rami Nehme, regional director at OPSWAT, discusses how the company will showcase hands-on protection for critical infrastructure across IT, OT, and cross-domain environments at the Gitex Global

Neesha Salian
Neesha Salian

11 October, 2025

GITEX GLOBAL 2025: OPSWAT to showcase real-world cyber defence at event, says Rami Nehme
Image: Supplied

TT

16

At GITEX Global 2025, OPSWAT is moving cyber defence from theory to the front lines. Rami Nehme, regional director at OPSWAT, discusses how the company will showcase hands-on protection for critical infrastructure across IT, OT, and cross-domain environments, unveiling the OP/X Mini Lab and its elite red team, Unit 515, to demonstrate what resilience looks like in practice. Nehme shared what the company will be showcasing at the event this year. Here are excerpts from the conversation.

What are you showcasing at GITEX GLOBAL this year?

This year, our focus at GITEX is on bringing cyber defence out of theory and into practice. We’re demonstrating how OPSWAT protects critical infrastructure across three domains — IT, OT, and Cross-Domain protection — through live, hands-on experiences that show the realities of defending against advanced threats. Our team will also showcase how we mimic attacker techniques to harden defences and strengthen resilience, making cyber protection more than just a concept.

With Cybersecurity Awareness Month as the backdrop, we’re using the event to highlight the importance of zero-trust file security, while also celebrating the partnerships that make this possible. We’re honouring our top-performing channel partners at GITEX with special awards, recognising their outstanding contribution to advancing cybersecurity excellence.

What emerging technologies are you focusing on this year?

At the heart of our presence this year is the debut of the OP/X Mini Lab, a compact yet powerful environment that replicates real-world facilities, including a simulated nuclear power plant. It will allow visitors to experience our technology in action across environments, and to see how OPSWAT solutions play out in high-stakes scenarios.

Complimenting this strategy is the regional launch of Unit 515, our elite red team. This group of cybersecurity specialists uses the same tactics as sophisticated adversaries to uncover vulnerabilities across IT and OT environments.

By challenging our technologies from within, Unit 515 makes them stronger for our customers, who benefit from solutions built to withstand the same pressures they face in the wild. Together, the Mini Lab and Unit 515 showcase how OPSWAT bridges innovation with resilience in ways that organisations can engage with, assess, and trust.

What are the top trends shaping your industry in 2025?

Two big shifts are reshaping the cybersecurity landscape this year. The first is the growing urgency of protecting critical infrastructure and OT networks, especially air-gapped environments, where compromise can have national or even global consequences. To address this, organisations are looking for layered defences that combine multi-AV scanning with advanced technologies like Deep Content Disarm & Reconstruction (CDR), delivering a truly zero-trust approach to evolving threats.

The second trend is the rising focus on regulatory compliance and data protection across IT and hybrid environments. With AI now embedded into core platforms, there’s a new opportunity to detect threats faster, anticipate risks earlier, and reduce exposure to zero-day attacks.

For OPSWAT, these trends confirm the need for cyber defence strategies that are both proactive and resilient, giving organisations the confidence to stay ahead of adversaries.

How is the Middle East positioned compared to other global tech markets?

The region is quickly becoming one of the most dynamic cybersecurity markets in the world. Governments across the region are investing heavily in digital transformation, but with that progress comes a wider attack surface and heightened risk. What sets the Middle East apart is its urgency and agility: enterprises here are not just following global best practices, but in many cases redefining them.

What are your plans for the next five years?

Our ambition is simple but bold: to be the most trusted partner in securing the world’s critical infrastructure. We have a clear strategy and over the coming quarters, we’ll continue to strengthen our regional footprint through new alliances and deeper collaboration with local partners, ensuring our solutions are tailored to the Middle East’s unique needs.

On the innovation side, we’ll keep bringing new use cases to market (visualised by the OP/X Mini Lab) to help customers experience and validate our technologies in action. Just as importantly, we’ll continue to invest in people, from training programmes through the OPSWAT Academy to community initiatives that raise cyber awareness and skills across the region. For our customers, this means more value, more visibility, and ultimately, more resilience against the threats that matter most.

Insights: Tokenisation misconceptions versus reality

Tokenisation gives you access to quality investments that were previously out of reach, with complete transparency about exactly what you own — down to a specific unit in a property

Scott Thiel
Scott Thiel

10 October, 2025

Insights: Tokenisation misconceptions versus reality
Image: Supplied

TT

16

For too long, tokenisation has been misunderstood. Many still connect it with volatile crypto coins or dismiss it as hype. In my view, this confusion is one of the greatest barriers to adoption. Tokenisation is not a meme coin or a digital lottery ticket; it is the next generation of financial products, rooted in the same principles as shares, bonds, and funds- but enhanced by the efficiency and transparency of blockchain.

Tokenisation ≠ crypto

The first distinction I make is simple: crypto and tokenisation use similar technology but serve very different purposes. Cryptocurrencies are often driven by sentiment and speculation, while tokenised real-world assets (RWAs) represent ownership in tangible investments with measurable yields. A house in Dubai is not going to lose 90 per cent of its value in an hour, yet that kind of volatility has been common in crypto markets. Tokenisation supercharges real world economics with blockchain efficiency and liquidity.

Order, not the Wild West

Some still label this industry the Wild West. But, in my experience, the UAE has brought order to the frontier. Having worked in Hong Kong and London, I find VARA’s framework the most comprehensive I’ve seen globally, and it gives both issuers and investors certainty. Regulation is not the enemy of innovation; it is the enabler. It sets the rules, enforces rigour, and protects investors. For me, that certainty is what separates tokenisation in Dubai from the hype-driven and unregulated projects we’ve seen elsewhere.

To investors who are cautious about entering this space, I’d say this: the real question isn’t whether there’s risk, it’s whether you’re willing to miss the opportunity to invest in assets you actually believe in. Tokenisation gives you access to quality investments that were previously out of reach, with complete transparency about exactly what you own — down to a specific unit in a property. This isn’t about taking blind risks; it’s about accessing the investments you’ve always wanted, with more clarity than most traditional investment vehicles provide.

Not just for techies

Another misconception is that tokenisation is only for “techies.” It shouldn’t be. On our own platform, we tested usability against a simple benchmark: could my mum use it? The answer was yes. She could log in, see a product, read about it, click to invest, and become an owner- without even realising blockchain was running in the background. Just as you don’t need to understand TCP/IP to browse the internet, you shouldn’t need to understand blockchain to invest in real assets.

Fractional ownership, reimagined

Fractionalisation itself is not new; shares and funds have been doing it for decades. What’s new is allowing retail investors to participate directly in high-quality assets once restricted to the wealthy. I’ve seen the light-bulb moment when someone realises they can own a fraction of a premium property- or even a racehorse. Suddenly, investing isn’t about exclusion; it’s about participation.

More than traditional investment vehicles

Some investors are more comfortable with what they know – traditional funds, managed portfolios, opaque structures. But here’s what tokenisation actually delivers: transparency and auditability that traditional wrappers simply cannot match. A tokenised property is still a property; the blockchain provides an immutable, verifiable record of ownership and value that you can see in real-time.

Tokenisation doesn’t create value out of thin air; it takes good assets and makes them more accessible, transparent, and liquid than ever before.

Hype or real growth?

Is this just hype? The data says otherwise. McKinsey projects tokenised markets could reach $2–4tn by 2030, up from about $24bn in 2025. The Dubai Land Department expects tokenised property could represent 7 per cent of all real-estate transactions by 2033- around $16bn. And institutions from BlackRock to Franklin Templeton are already issuing tokenised funds. These are not passing fads; they are the financial system evolving.

Control is not lost

Some asset owners fear “losing control” once their assets are tokenised. In reality, tokenisation gives them more tools: programmable ownership structures, precise visibility of who holds what, and streamlined compliance. Issuers gain flexibility, not chaos.

The liquidity question

Liquidity is the holy grail. Secondary markets for tokenised assets aren’t a distant promise, they exist today. With regulatory frameworks now in place, institutional participation growing, and retail adoption accelerating, compliant secondary trading infrastructure is operational. We’re already seeing platforms facilitate peer-to-peer token transfers, and as the ecosystem matures, liquidity will only deepen. The future of asset liquidity isn’t coming; it’s already being built.

Beyond real estate

While real estate is the most talked-about category, it’s not the only one. Sports, art, commodities- even decentralised infrastructure- are all ripe for tokenisation. In my view, infrastructure projects where communities can co-own and benefit from shared assets may surprise people the most in the years ahead.

Not every deal makes sense

Having worked with regulators across Asia, Europe, and the Middle East, I can say the UAE is still ahead of the curve. Others are catching up, but VARA’s purpose-built framework remains a global benchmark. Regulation is not about tokenising everything for the sake of it- 90 per cent of proposals I see don’t make sense. Tokenisation does not turn a bad deal into a good one; it can, however, make a good deal great.

The big myth

If I could erase one misconception, it would be that tokenisation is “just another crypto play.” It is not. Tokenisation gives investors the chance to own pieces of genuinely appreciating assets — real estate, racehorses, income-generating infrastructure — with complete transparency and at accessible entry points. This isn’t speculation; it’s strategic investment in assets with proven track records.

And if I had 30 seconds with a sceptic? I’d simply ask: if your money is sitting in the bank, losing 5 per cent of its value to inflation this year, why not put it into a regulated product tied to a real, appreciating asset? That’s the opportunity tokenisation provides.

The writer is the CEO and co-founder, Tokinvest.

Read: From bricks to blockchain: Perspectives on Dubai’s real estate revolution

Aligned Automation takes AI from the boardroom to the racetrack

The partnership represents a unique experiment in applying enterprise-grade data analytics to real-time racing performance

Rajiv Pillai
Rajiv Pillai

10 October, 2025

Aligned Automation takes AI from the boardroom to the racetrack
Image: Supplied

TT

16

In a landmark fusion of technology and talent, Aligned Automation, an AI-driven global professional technology services company, has taken its data intelligence expertise to the motorsport arena through a partnership with Diana Pundole, the first Indian woman to race a Ferrari. The collaboration was unveiled at a high-energy event at Taj Exotica, Dubai, where Pundole revealed the Ferrari 296 Challenge car, emblazoned with the Aligned Automation (AA) brand, marking the start of her Middle East race tour.

More than a sponsorship, the partnership represents a unique experiment in applying enterprise-grade data analytics to real-time racing performance. For Aligned Automation, it’s an extension of the same precision and decision-making it delivers to corporate clients, this time, at 300 km/h.

“This partnership embodies our core philosophy,” said Nitin Ahuja, CEO of Aligned Automation. “At Aligned Automation, we don’t just sponsor speed. We engineer it. Diana’s debut with Ferrari represents not only individual excellence but the coming together of two powerhouses to drive data-driven performance. Together, we’re pushing boundaries, on the track and in the enterprise.”

Data as the new pit crew

From the outside, it’s a sleek red Ferrari on the track. But beneath the carbon-fibre bodywork, every race is a test of data. A single race weekend can generate over a gigabyte of telemetry — from braking pressure and throttle positions to tire temperatures and G-forces. Turning that torrent of raw data into actionable insight is exactly what Aligned Automation specialises in.

“So Diana was talking about getting into the racing universe, and for us, it was a natural fit,” Ahuja explained in a conversation on the sidelines of the launch. “Racing is all about speed, making quick decisions, and being precise. Precision is key and that’s our business model. We have to precisely deliver business outcomes for our clients.”

The company’s proprietary delivery platform, AAxon, already powers projects for global high-tech firms. “We’ve infused AI into customer operations at scale, and now, we’re bringing that same intelligence to motorsport,” Ahuja revealed.

In Diana’s case, Aligned Automation will analyse her racing data across the 2025–2026 Middle East Ferrari Challenge Series, covering Abu Dhabi, Bahrain, Jeddah, Qatar, and Dubai. Its AI and machine learning models will identify patterns, optimise decision-making, and uncover split-second opportunities for improvement — from corner entry speeds to acceleration zones.

A racer’s new edge

For Pundole, the collaboration represents a new dimension in her career; one where instinct meets analytics. “Starting this season with Aligned Automation, this is the first time I’ll be working with them, and I’m looking forward to it because they are experts at deciphering and analoging data,” she said. “They will look into my data for the first time — motorsport data, which is a lot of data every split second, has so many parameters: braking points, accelerations, turning points, where the car is pointed, where the engine goes off or maximises. This is something I will need their help for.”

The collaboration, she explained, will enable her to “compare a lot of data” from each run — an essential skill for any elite racer. “As a race car driver, you can’t just keep driving because it’ll get you nowhere. You need to figure out where you can go slower, and where you can go faster. With that comparison comes learning, and with that learning comes results,” she said.

The partnership will see both sides learning from each other. “This is, I believe, the first time that they will also be working with a race car and a race car driver, and we both will learn from each other,” Pundole added.

Beyond the finish line

The collaboration goes beyond performance engineering. It signals Aligned Automation’s official entry into the Middle East, aligning with the UAE Vision 2031 and Saudi Vision 2030 agendas focused on innovation, AI adoption, and technology-driven economic diversification.

“Aligned Automation is entering an exciting new phase of growth in the UAE as we strengthen and expand our regional presence,” Ahuja said. “With our base in Dubai already established and a second now underway in Abu Dhabi, we are deepening our commitment to the market. Our recent MoU with Kamali & Kamali Holding reflects our strategic focus on positioning the UAE as a hub for developing and exporting advanced digital and IT services globally.”

The company’s goal is to develop homegrown AI capabilities that serve both regional and global clients. “We want to create a sustained economy in terms of IT services — developing here in the UAE and exporting services outside, rather than relying on other markets,” Ahuja explained. “This dual focus — building the next generation of AI talent while applying data science to real-world performance — underscores Aligned Automation’s positioning as more than a consultancy. It’s a performance engineering company in the truest sense.”

Where AI meets adrenaline

The alignment between AI and motorsport may seem unlikely, but both disciplines demand precision, resilience, and an obsession with marginal gains. Each lap of data will provide Aligned Automation and Diana with new insights: a continuous feedback loop where machine intelligence amplifies human instinct.

For Pundole, it’s a chance to elevate her racing journey. “I would like to go into Ferrari Challenge races, which will be the next step with this particular car,” she said. “It’s GT car racing — very interesting, with its own fan following — and we’re looking at big things with this.”

For Aligned Automation, the collaboration serves as both metaphor and proof point. Racing becomes a live demonstration of what the company does for enterprises — transforming raw data into performance.

“AI is the most misunderstood concept,” Ahuja reflected. “People think it can think on its own, but it can’t. Artificial intelligence is not real intelligence, it’s all about the data. Getting to know the data, governing it ethically, and turning it into the right decisions — that’s where the value lies.”

More news in finance