Proofpoint’s Sumit Dhawan on why human-centric cybersecurity is key

As cyber threats become more human-targeted and AI-driven, Proofpoint is expanding its footprint in the UAE. With local data centres, enhanced threat intelligence, and a growing partner network, the company is aligning closely with the region’s cybersecurity priorities — at a time when 74 per cent of UAE CISOs cite human risk as their top concern.

Here, we speak to CEO Sumit Dhawan about the cybersecurity challenges, opportunities and the way ahead for the company and businesses in the UAE.

What do you see as the biggest cybersecurity challenge for organisations in the UAE, and how is Proofpoint addressing them?

Today’s cyber threats are growing in sophistication. Attackers are no longer simply targeting infrastructure — they’re targeting people. This is the biggest challenge for security leaders in the region, with 74 per cent of UAE CISOs viewing human risk as their biggest cybersecurity concern.

Organisations in the UAE, and globally, are facing multifaceted threats that exploit human vulnerabilities — from business email compromise (BEC) and ransomware to impersonation and supplier-related breaches.

Proofpoint addresses this by protecting the human layer of cybersecurity — the intersection of people, data, and collaboration tools. Human vulnerabilities drive over 80 per cent of breaches, making this the most important layer of defense.

We provide tailored solutions that combine advanced threat detection, data security and governance, automated posture management, and intuitive education tools to reduce risk at scale. Traditional, siloed controls aren’t enough.

Proofpoint is building the only truly adaptive human-centric security platform that protects every individual and secures their data.

You’re announcing significant investments in the UAE. What are you focusing on and how will this help address local cybersecurity needs?

Proofpoint is deeply committed to the Middle East. We’re currently trusted by 50 per cent of the UAE and Saudi Arabia-based companies listed in the Forbes Global 2000.

Two key needs stood out in discussions with customers and government leaders:

• First, there’s strong demand for cloud-based security paired with data sovereignty — many local businesses need data to remain within national borders.
• Second, there’s unanimous agreement on the importance of human-centric security as a pillar of next-generation cybersecurity alongside XDR and SASE.

To meet these needs, we launched local data centres in the UAE and Saudi Arabia, offering world-class threat protection with full data sovereignty.

We’ve also expanded our local team, opened a new office, and built a regional partner network of 550 strong.

With the rise of AI and machine learning, what new threats are emerging, and how is AI being used to fight back?

AI has lowered the barriers for attackers. Language models now allow cybercriminals to craft convincing, localised attacks. In 2024, the UAE saw a 29 per cent increase in BEC attacks.

At the same time, AI is revolutionising cyber defense. It enables faster detection, adaptation, and prevention of threats at scale. Proofpoint’s edge lies in our vast human-centric threat data — our AI learns from millions of signals to stay ahead of attackers.

In 2025, we will further integrate AI advancements into our platform, strengthening our lead in proactive, adaptive threat protection.

How is Proofpoint helping businesses protect their data amid regulatory change and growing compliance pressure?

Data is increasingly at risk due to human behaviour and digital sprawl. The rise of generative AI, multi-cloud use, and fragmented collaboration tools make it difficult for businesses to maintain visibility and context.

Proofpoint’s human-centric platform helps unify data security, threat protection, and compliance. Our 2024 acquisition of DSPM leader Normalyze strengthened this capability. With our solutions running through local data centres, businesses in the UAE can ensure compliance while safeguarding critical and personal data.

What’s ahead for Proofpoint and how does this align with the UAE’s cybersecurity vision?

In 2025, our focus is clear: to cement our position as the leader in human-centric security and address growing challenges around sophisticated threats, stricter compliance, and fragmented security ecosystems.

We were honoured to host Dr Mohammed Al Kuwaiti, head of the UAE Cybersecurity Council, at our Protect Tour event in Dubai. Proofpoint’s mission is fully aligned with the UAE Cybersecurity Strategy — to build a secure, resilient digital future.

As AI, cybersecurity, and human behavior intersect, that’s where we’re investing and innovating.