Finesse And Securiti To Offer Cybersecurity Solutions
The partnership brings together Finesse's proven expertise in deploying transformative digital solutions with Securiti's groundbreaking technologies in managing sensitive data, offering a sophisticated blend of capabilities designed to address the multifaceted demands of today's cybersecurity landscape. By integrating Securiti's innovative AI-driven data privacy and security solutions into Cyberhub's comprehensive portfolio, Finesse is set to equip organizations with advanced tools to protect their critical information across both structured and unstructured data environments.
Finesse's Cyberhub already boasts an impressive suite of solutions, including its industry-leading Cognitive Security Operations Center (CSOC), automated incident response frameworks, AI-driven Zero Trust architecture, and governance frameworks for generative AI. With the addition of Securiti's advanced platforms, such as Data Vault, Data Leakage Protection, and privacy-compliance automation, the enhanced Cyberhub offering will empower businesses to deploy proactive, scalable, and highly intelligent cybersecurity strategies.
Commenting on the partnership, Megha Shastri, Vice President – Enterprise Accounts Finesse, said, 'Together with Securiti we will address critical set of challenges that organizations face in securing sensitive data across modern, distributed environments—especially in the cloud. This partnership will empower our customers with continuous visibility and control over sensitive data, reducing security risks, and ensuring compliance across environments.'
'Organizations today face a dual imperative- to innovate rapidly with AI and cloud technologies, while simultaneously maintaining stringent data security and privacy controls,' said Tahir Latif, Chief Privacy Officer ( META) at Securiti. 'Through this partnership, we are enabling enterprises to automate the discovery, classification, and protection of sensitive data at scale, providing the foundational intelligence that downstream security and AI governance solutions rely on.'
Securiti's unique ability to combine robust data visibility and controls with AI intelligence aligns seamlessly with Cyberhub's mission to ensure businesses maintain visibility and control over their digital assets while staying ahead of emerging threats. This integration also enables enterprises to achieve and sustain compliance with international privacy regulations, such as GDPR, CCPA, and similar standards, through automation and data-driven insights.
As AI continues to evolve, managing privacy and ethical considerations alongside threat mitigation has become a top priority for enterprises. Through this partnership, Finesse and Securiti aim to redefine the boundaries of PrivacyOps by introducing a new level of automation and transparency. Organizations will now have access to enhanced zero-trust frameworks, enabling them to mitigate risks proactively, while also fostering responsible adoption of AI technologies in their operations.
'Responsible AI governance begins with responsible data governance,' added Mr Latif. 'Without deep visibility into the flow and sensitivity of data, organizations risk deploying AI on unstable ground.
The Finesse – Securiti partnership comes at a critical time when businesses are navigating an era of unprecedented cyber threats and complex regulatory landscapes. Together, these two industry powerhouses are creating a secure foundation for businesses to thrive, offering seamless integration of data security, AI governance, and privacy management solutions. 0 0
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Zawya
4 days ago
- Zawya
Talabat concludes its up-skilling program in ocllaboration with the Information Technology Institute
Cairo: talabat Egypt, the leading technology platform in e-commerce across the Middle East and North Africa, announced the conclusion of its "Up-skilling Program" in collaboration with the Information Technology Institute (ITI), affiliated with the Ministry of Communications and Information Technology. In a move that reflects its commitment to supporting and empowering young talents in the technology sector, the program aimed to train a selected group of ITI students and graduates in the fields of data engineering and software engineering, to enhance their technical and professional skills in line with labor market demands. The 'Up-skilling Program' was launched with the participation of 50 carefully selected students who had passed specialized technical tests to ensure their readiness. The program included two training tracks, each consisting of four training sessions delivered by data and software engineers from talabat's Egypt Tech Hub, which allowed participants to engage directly with experts from the real professional environment. The program concluded successfully with an intensive, full-day workshop designed to develop professional skills and enhance creative thinking among participants. The workshop included an interactive session on employability skills, delivered by talabat's talent acquisition team, which equipped graduates with the necessary tools and knowledge. Additionally, a brainstorming and innovation session was held, with talabat engineers participating, which contributed to enhancing the participants' creative thinking and professional readiness. Hadeer Shalaby, Vice President and Managing Director of talabat Egypt, commented: "We believe that empowering youth is a real investment in the future of technology and digital transformation in Egypt. We designed this program specifically to bridge the gap between what students learn in academic institutions and what the labor market needs, through hands-on experience and direct professional guidance from our team. We are proud of our partnership with the Information Technology Institute and look forward to seeing these promising talents contribute to developing technological solutions that serve society." She added: "At talabat, our support for youth goes beyond employment; it extends to building an integrated ecosystem of learning, practical application, and skill development. We will continue expanding such initiatives to ensure a tangible and sustainable impact." This initiative reflects talabat's strong commitment to supporting youth and talent in Egypt. This commitment was recently demonstrated through its prominent partnership with the Egyptian Modern Pentathlon Federation. Under this four-year sponsorship, talabat Egypt reinforces its long-term vision to actively contribute to the development of vital sectors in the country, with sports and youth development being among its key priorities. This marks a significant milestone in the company's journey toward creating a better future for the Egyptian society. About talabat Egypt: talabat is a leading technology platform for online ordering, either food ordering, delivery, and convenience retail marketplace in the Middle East and North Africa. talabat operates in operates in the UAE, Kuwait, Qatar, Bahrain, Egypt, Oman, Jordan and Iraq. The company aims to support local businesses and provide a seamless shopping experience for customers, ensuring efficiency and convivence in the orders while offering multiple secure payment methods. talabat mart also provides a quick and easy online grocery shopping experience, with home delivery available in over 26 cities.
Gulf Business
5 days ago
- Gulf Business
Bahrain and Qatar take diverging paths on data sovereignty: what businesses must know
Gareth Mills, partner at Charles Russell Speechlys/Image: Supplied As Gulf states race to become digital hubs, two neighbours are carving very different approaches to data governance. Bahrain has invested in cloud and data-centre capacity and adopted a pragmatic, adequacy-style model for cross-border flows. Qatar is pursuing a centralised, sovereignty-first playbook—backed by a GDPR-style law, a state-led cloud framework and big infrastructure bets. Both trajectories create real commercial opportunities, but they also reshape compliance, cloud strategy and operational resilience for any firm doing business in the region. That is the succinct read from Gareth Mills, partner at Charles Russell Speechlys, who has been advising clients on data, cloud outsourcing and cross-border transfers across the Gulf. 'Qatar is positioning itself as a leader in digital sovereignty and regulatory readiness through a deliberate, top-down strategy,' he says. 'This is primarily driven by the Qatar National Vision 2030 and the National Digital Agenda 2030 (NDA2030).' Below is a practical, B2B guide to what Mills told us — why the two countries differ, where the enforcement risks lie, how banks and telcos should think about hosting and cloud, and what firms should do now to stay compliant and resilient. Two contrasting strategies: centralised control vs. cloud enablement Qatar is building a centrally governed digital stack. The state has layered a GDPR-style statute (the QPDPPL / Law No. 13 of 2016), guidance from the National Data Privacy Office, a Cloud Policy Framework that emphasises security (rather than blanket localisation) and investments in hyper-computing and national digital identity. Mills points to the coordinated, top-down nature of policy: the Ministry of Communications and Information Technology is playing a leading role, and the overall programme is designed to create both legal certainty and sovereign control over strategic digital assets. Bahrain's posture is different. As Mills explains, Bahrain 'recognises the importance of data sovereignty but does not impose stringent data localisation requirements,' and it has sought to build local hosting capacity alongside a rules-based cross-border regime. The kingdom has actively attracted cloud and hyperscaler investment — AWS operates a regional data centre there — and private projects such as BEYON's $700m 'Digital City' further expand hosting and connectivity options. Bahrain's Cloud Law also contains novel mechanisms — including 'data embassy' arrangements that allow data stored in Bahrain to remain governed by the rules of another jurisdiction — boosting both flexibility and investor comfort. The practical takeaway: Qatar is designing for sovereign control while enabling controlled openness; Bahrain is building cloud and data infrastructure and using an adequacy model to facilitate cross-border flows. Both are attractive, but your legal and technical strategy should match which regime applies to your licence and operations. PDPL (Bahrain) vs QPDPPL (Qatar): the headline differences Both laws share privacy fundamentals, but their operational shape is very different. Data localisation and transfers. As Mills notes, 'Bahrain's PDPL does not impose strict localisation mandates; there is no general requirement compelling organisations to store personal data within Bahraini territory.' Instead Bahrain relies on an adequacy list: only transfers to jurisdictions on that list (currently 83 countries) proceed without additional approval; other countries need PDPA authorisation or are managed via contractual safeguards. Qatar's onshore statute, by contrast, 'adopts a markedly permissive stance' — transfers may flow freely unless they would cause 'serious damage' to data subjects, placing the burden on the exporter to assess and document risks. Enforcement approach. Bahrain's PDPA has strong investigatory powers and a willingness to impose penalties, including fines and criminal sanctions for grave breaches. Qatar's National Data Privacy Office historically took an education and guidance first approach, but Mills flags a change: since late 2024 regulators in Qatar have been taking a firmer enforcement stance, issuing binding decisions to correct material compliance gaps. The QFC (Qatar Financial Centre) meanwhile applies GDPR-style rules with clearer adequacy lists and contract-based transfer mechanisms. Practical consequence. In Bahrain expect prescriptive controls and active supervisory action; in Qatar expect a risk-assessment, documentation and DPIA-heavy model on the mainland, and a stricter, GDPR-aligned model inside the QFC. Organisations operating across both need a dual compliance track and consistent internal safeguards. Licensing and registration: what businesses must do on day one Mills highlights that obligations vary widely depending on the licence and the regulator: Qatar (dual system). Mainland entities governed by the QPDPPL must implement internal governance (a Personal Data Management System), maintain Records of Processing Activities and perform DPIAs for high-risk processing. There is no universal public register, but prior authorisation is required for processing 'personal data of a special nature' (health, religion, children, criminal records). Entities in the QFC follow QFC DPR rules and the QFC DPO's processes, which are closer to GDPR norms. Bahrain. Data controllers must register with the PDPA and notify processing activities. Data processors may also have registration duties depending on their role. Transfers to non-adequate jurisdictions require PDPA approval. In practice: before you process any sensitive categories in either jurisdiction, map your licence (mainland vs free zone), compile RoPAs, embed DPIAs in project lifecycles and ensure you have documented approvals where required. Sensitive personal data: sector implications Both jurisdictions regard certain categories of data as especially high risk, but definitions and routes to lawful processing differ: Qatar (mainland and QFC divergence). Onshore Qatar defines 'personal data of a special nature' to include health, religious beliefs, ethnic origin, criminal records and children; the QFC's list broadens further to include political opinions and biometric data. Mills stresses the operational impact: 'Healthcare: This sector faces the most stringent controls. Patient health information is sensitive under both regimes, mandating explicit consent and regulatory pre-approval … Telecoms: Operators must obtain explicit, opt-in consent for direct marketing …'. Bahrain. Processing sensitive data is generally prohibited without consent, except for enumerated exceptions (healthcare provision, public interest, legal claims, etc.). Financial services and telecoms must therefore build explicit consent mechanisms, robust security and carefully justified processing bases. For regulated sectors such as healthcare, financial services and telcos, that means: pre-approval workflows (where required), enhanced technical protections, and rigorous consent and access controls. Read: Cross-border transfers: pick the right tool for the job Mechanisms differ by jurisdiction and by licence: Qatar (mainland). There are no fixed standard contractual clauses mandated; instead exporters must document DPIAs and draft bespoke contractual protections. For particularly sensitive transfers, prior regulatory approval may be required. Qatar (QFC). Mirroring the EU model, the QFC recognises a list of 'adequate' jurisdictions (EEA, UK, Canada, Japan, South Korea, Switzerland, Uruguay and California), and provides official SCCs and the option of BCRs. Bahrain. The PDPA's adequacy list (83 countries) simplifies flows to those jurisdictions. Transfers to non-listed countries require PDPA authorisation and submission of contracts. Mills' practical rule: adopt a dual-track approach. Use DPIAs and tailored contract clauses for mainland Qatar flows; rely on QFC / PDPA adequacy mechanisms or SCCs/BCRs when operating under those regimes. Where feasible, align your internal policy to the stricter of the two frameworks — that simplifies governance and reduces legal friction. Financial services and telecoms: local rules matter more than you think Sector regulators impose additional constraints that often trump general data law: Qatar Central Bank (QCB). Retail banks and insurers face stringent localisation for customer data and tight cloud outsourcing rules. Material cloud outsourcing requires prior QCB approval and contractual terms that preserve supervisory access. QFC regulator (QFCRA). Wholesale firms may outsource to global cloud providers, subject to safeguards that preserve regulatory oversight and adequacy protections. Bahrain (CBB). The Central Bank of Bahrain mandates cloud and security standards for financial firms, which steers hosting choices toward providers with onshore capability. Telcos in both jurisdictions must meet opt-in rules for marketing and special protections for children's data. The upshot: cloud strategy must be sector-aware — a bank cannot rely on the same sourcing model as a non-regulated e-commerce operator. Operational resilience and cloud contracts: the non-negotiables Mills highlights the operational checklist regulators expect to see: ISO-level security (ISO 27001), encryption in transit and at rest, role-based access controls and multi-tenancy protections. Audit rights, SLAs with measurable recovery time objectives, and executable exit and portability plans to prevent vendor lock-in. Disaster recovery and business continuity plans that are demonstrable to the regulator. For Qatari onshore entities, the regulator expects documented risk assessments for every cross-border transfer and active monitoring of third-party controls. For Bahrain, while operational resilience rules are still maturing, expectations are moving in the same direction. Practically: get your contracts right now (with audit and termination rights), and test failover plans periodically. Law-enforcement access: prepare policies and playbooks Both countries allow authorities to requisition data under national security and criminal law — often with wide discretion. As Mills summarises: 'Qatar's Cybercrime Law (2014), Telecom Law (2006), and Criminal Procedure Code empower national security and law enforcement agencies to access or intercept data, often without judicial oversight in security cases.' Bahrain likewise provides mechanisms for authorised inspectors to exercise law-enforcement powers. Recommendation: establish a formal disclosure playbook — verification steps, proportionality checks, secure transfer controls and a rigorous logging regime. Limit disclosures to legal requirements, keep careful records, and train front-line staff to escalate any unusual requests. Cross-border M&A, outsourcing and dispute readiness Mills emphasises a commercial lens: data governance is now a deal and risk variable. Buyers will insist on strong RoPAs, evidence of DPIAs, encryption posture, and contractual remedies. Vendors must be able to show regulatory licences, approvals for sensitive processing, and tested incident response playbooks. For cross-border M&A and large outsourcing deals, the ability to demonstrate continuous compliance — not just a point-in-time audit — materially affects valuations. Looking ahead Mills believes that looking ahead, legal experts anticipate that GCC data governance frameworks will evolve rapidly, particularly in response to digital transformation and the rise of AI. Laws are likely to address ethical and privacy considerations around data usage and algorithm transparency, while cybersecurity regulations will tighten — potentially mandating minimum standards for firewalls, intrusion detection, encryption, and secure access controls, with sector-specific variations. For long-term resilience, businesses should invest in robust cybersecurity infrastructure, deploy technology solutions that support compliance, such as encryption and data management platforms, train employees regularly on data protection practices, and conduct periodic audits to identify gaps and vulnerabilities before regulators do. Bottom line Bahrain and Qatar are both actively building the region's digital future but they do so from different starting points. Bahrain has doubled down on cloud capacity and an adequacy-style transfer model; Qatar is centralising governance, investing in sovereign digital infrastructure, and moving toward more assertive enforcement. For businesses that operate across the Gulf, that means designing compliance programs that are jurisdiction-aware, sector-sensitive and operationally hardened. 'Businesses should stay informed about these developments to ensure compliance,' Mills says. His practical advice is clear: treat data governance as a core part of commercial strategy, not a legal afterthought. Do that, and your cloud, outsourcing and cross-border plans will be ready for the next wave of Gulf digitalisation. Definitions Jurisdiction Full Term Acronym Notes Qatar (Mainland) The Personal Data Privacy Protection Law (No. 13 of 2016) QPDPPL The primary data protection law governing onshore Qatar. The National Cyber Security Agency NCSA The regulatory authority responsible for the QPDPPL. The National Data Privacy Office NDPO The specific office within the NCSA that handles data privacy matters and enforcement. The Communications Regulatory Authority CRA Regulates the telecommunications sector and authored the Cloud Policy Framework. The Qatar Central Bank QCB Regulates financial institutions and imposes data localisation rules. Qatar (QFC) The Qatar Financial Centre QFC A separate economic zone with its own legal and regulatory framework. The QFC Data Protection Regulations 2021 QFC DPR The GDPR-aligned data protection law applicable within the QFC. The QFC Regulatory Authority QFCRA The financial regulator for entities licensed within the QFC. The QFC Data Protection Office QFC DPO The data protection regulator within the QFC. Bahrain Personal Data Protection Law (No. 30 of 2018) PDPL The primary data protection law for Bahrain. The Personal Data Protection Authority PDPA The data protection regulator in Bahrain. The Central Bank of Bahrain CBB The financial regulator in Bahrain. General Terms Personal Data of a Special Nature N/A Term used in the QPDPPL (Qatar Mainland) for sensitive data categories. Sensitive Personal Data N/A Term used in the QFC DPR and Bahrain PDPL for sensitive data categories. Data Protection Impact Assessment DPIA A risk assessment required for high-risk processing or transfers under the QPDPPL. Standard Contractual Clauses SCCs A mechanism for legitimising cross-border data transfers, officially adopted by the QFC.
Tahawul Tech
06-08-2025
- Tahawul Tech
Flow Redox Batteries Archives
"By providing deep visibility into encrypted AI conversations, we're giving leaders the controls to stop data leakage and govern AI use". Learn more about @F5's new solution below. #F5 #AI #tahawultech
