Experts call for global cybersecurity rules, echoing nuclear age diplomacy

Massimo Marotti, managing director for Strategies and Cooperation at Italy’s National Cybersecurity Agency, highlighted the necessity of concrete collective efforts within Europe. AN photo
Short Url
Updated 02 October 2024
Follow

Experts call for global cybersecurity rules, echoing nuclear age diplomacy

RIYADH: In light of rapidly advancing technology outpacing regulatory measures, experts at an event in Riyadh emphasized the steps needed to address cyber risks and foster responsible state behavior.

The Global Cybersecurity Forum showcased speakers discussing the evolving landscape of cyber diplomacy and the imperative for collective action.

Robin Geiss, director of the UN Institute for Disarmament Research, noted that discussions around cybersecurity at the UN have been ongoing for over 25 years. “Technology is not that new for the UN anymore... it’s a dialogue between everyone,” he stated, underscoring that this dialogue serves as a confidence- and transparency-building measure.

Geiss pointed out the difficulty in measuring the impact of these dialogues, saying, “When things escalate, we see directly the cost of human life... But of course, we don’t see so clearly what we’ve prevented.” He stressed the complexities of keeping pace with technology, adding, “Diplomacy and progress at the multilateral level move at the speed of trust.”

Highlighting the current geopolitical climate, Geiss observed a significant trust deficit that complicates multilateral mechanisms in cybersecurity. “What we really need is more progress in action than in theory or proclamations,” he asserted. “We know what we need to do... So how do we move forward at the implementation stage? That is really the challenge.” He praised initiatives like the GCF that unite diverse entities and individuals, while emphasizing that universal bodies like the UN are essential for effective coordination.

Concrete effort

Massimo Marotti, managing director for Strategies and Cooperation at Italy’s National Cybersecurity Agency, highlighted the necessity of concrete collective efforts within Europe.

“You mentioned concrete effort—that’s exactly what we do at the European level. We have 27 agencies for cybersecurity, and our regular meetings lead to concrete measures,” Marotti said.

He cited a recent meeting in Athens, where they addressed the post-quantum cryptography threat, warning, “In a few years, the computer revolution will make all the codes and keys we use today useless unless we change them.” He emphasized the importance of coordinated action, as Europe’s interconnected infrastructure means insecurity in one nation can pose risks for others. Marotti also mentioned forthcoming European regulations designed to enhance cybersecurity across the continent, stating, “We also work with partner countries, not only the EU. For instance, we recently signed a cooperation agreement with Albania.”

Adam Hantman, deputy director of the Bureau of Cyberspace and Digital Policy at the US Department of State, discussed ongoing global efforts to establish cybersecurity norms. “Essentially, what we’re doing here as a community is mapping out the rules of the road to govern a completely new domain,” he explained. He drew parallels to the dawn of the nuclear age, noting, “It took decades for the international community to establish norms and rules governing state roles in that space.”

Hantman emphasized the UN's critical role in cyber diplomacy and highlighted the Counter Ransomware Initiative in Washington, which now includes nearly 70 countries and organizations focused on combating ransomware.

In a separate panel, Heidi Crebo-Rediker, a senior fellow at the Council on Foreign Relations, expressed skepticism about the UN as the central platform for cybersecurity discussions. “I think the UN’s probably not the right place, but there are a lot of mini-lateral spaces where this is very active,” she remarked, suggesting alternative frameworks may be more effective for addressing cybersecurity challenges.


Two Saudi cybersecurity firms plan Tadawul listings within two years 

Updated 10 sec ago
Follow

Two Saudi cybersecurity firms plan Tadawul listings within two years 

RIYADH: Two Saudi cybersecurity companies, Cyber and Infratech, plan to list a portion of their shares on the Saudi Stock Exchange, or Tadawul, between 2026 and 2027, according to the companies’ chairmen, who spoke to Al-Eqtisadiah. 

Abdulrahman Al-Kenani, founder and CEO of Cyber, said: “The company is currently planning to acquire certain entities, which will be disclosed in the coming period, in addition to preparing for a public offering through the Tumooh program on the stock market within the next two years at the latest.” 

Al-Kenani explained that the financial, healthcare and services sectors are witnessing continuous cyberattacks as Saudi Arabia expands its digital transformation, accompanied by a rise in the frequency of such incidents. He added that this phenomenon is not limited to the Kingdom but is a global issue. 

The CEO added: “The company is working with several Saudi airports and vital sectors, in addition to collaborating with major international companies to provide cutting-edge cybersecurity solutions.” 

Infratech plans 4 R&D centers abroad 

Ayman Al-Suhaim, CEO of Infratech, stated: “The size of the information technology and cybersecurity market in Saudi Arabia has reached approximately SR87 billion ($23.2 billion), of which SR15.7 billion are allocated to the cybersecurity sector. This includes consulting, managed services, governance, risk management, and cybersecurity within the industrial sector.” 

He said the company has a strategic plan covering the period from 2026 to 2028, which includes establishing a firm in the first quarter of next year to finance cybersecurity and artificial intelligence products, as well as launching four research and development centers in the US, Russia, China and Eastern Europe. 

The plan also includes investment in cloud storage, overseas ventures, and the expansion of operations and investments in data centers. 

Al-Suhaim said the company intends to go public in 2027, noting that it operates across multiple cybersecurity domains serving sectors including energy, defense, aviation and government services. 

The Tumooh program for small and medium-sized enterprises in Saudi Arabia is one of the support initiatives offered by the General Authority for Small and Medium Enterprises, or Monsha’at. It aims to drive SME growth by strengthening capabilities, improving performance and accelerating expansion. 

The initiative seeks to help fast-growing SMEs prepare for initial public offerings in the financial markets. To date, the program has facilitated the listing of 24 companies on the Nomu Parallel Market out of more than 2,500 firms registered under the scheme.