Latest news with #AshrafAboukass
Morocco World
15-04-2025
- Business
- Morocco World
GITEX Africa 2025: Experts Discuss Africa's OT Security Within Digital Infrastructure Expands
Marrakech — Industry leaders gathered at GITEX Africa 2025 today for a thought-provoking panel discussion that highlighted the urgent need for robust operational technology (OT) security measures as Africa accelerates its industrial digitalization. The session, 'Building Digital Resilience: The Future of OT Security in Africa's Growth Story,' brought together cybersecurity experts and digital transformation leaders to address how the continent can protect its rapidly expanding critical infrastructure. 'We're witnessing a fundamental shift in how African nations approach industrial security,' said Ashraf Aboukass, head of cybersecurity at Confidential, Qatar, during the panel. 'The traditional divide between IT and OT professionals continues to create vulnerabilities that malicious actors are eager to exploit.' Aboukass spoke of the differences that often prevent effective collaboration between information technology and operational technology teams. 'OT professionals rightfully pride themselves on their specialized expertise — controlling critical parameters in industrial settings like temperature, humidity, and rail speeds. Their priority is operational safety, ensuring trains don't crash and critical infrastructure functions properly,' he explained. The challenge, according to panelists, lies in protecting decades-old systems not designed with cybersecurity in mind. 'These systems were built 30-40 years ago,' noted Aboukass. 'Applying contemporary security solutions to legacy systems creates unique technical and operational challenges.' Aboukass shared a short insightful snapshot on the historical development of cybersecurity as something that didn't even exist 25 years ago, but is now an entire field with multiple specialties, with OT security emerging only about 15 years ago. As the Chief Information and Digital Officer at ONCF, Fatima Zohra El Ouerkhaoui explained the critical distinction between IT and OT security objectives: 'IT security primarily aims to protect data and digitized business processes. But OT security's fundamental concern is safety — protecting human lives within industrial systems.' As Africa's OT cybersecurity market surges toward a projected $5.33 billion valuation by 2031, panelists discussed the particular difficulties in implementing modern security tools like Network Detection and Response (NDR) and Endpoint Detection and Response (EDR) within critical infrastructure environments. 'When you're dealing with critical processes, you can't simply interrupt operations to analyze potential threats,' explained Aboukass. 'In OT environments, the stakes are fundamentally different — disruptions can have severe real-world consequences.' The panel identified Africa's unique position in the global industrial landscape, noting that the continent has untapped opportunities to build security considerations into its digital infrastructure from the ground up, potentially avoiding cybersecurity pitfalls experienced in other regions. The consensus among speakers was clear: as Africa continues its impressive growth trajectory, building digital resilience in industrial and critical infrastructure systems will be essential to sustainable development and economic security. 'We need to bridge the gap between IT and OT security approaches,' concluded El Ouerkhaoui. 'Africa's industrial future depends on our ability to protect not just data, but the physical systems that power our economies and ensure public safety.' Panelists agreed that OT security development is a long journey that should be taken to ensure cybersecurity. In a compelling conclusion to the panel, Ashraf Aboukass offered crucial advice for Africa's emerging cybersecurity professionals. 'While technical skills are important and will get your CV through the door, they're not enough,' he advised, adding that future professionals should hone their soft skills as cybersecurity practitioners must develop the ability to communicate effectively, influence stakeholders, and build relationships. GITEX Africa 2025, the continent's largest technology exhibition and conference, continues until tomorrow, April 16, in Marrakech. Tags: CybersecurityGITEX AFRICAGITEX Africa 2025OT security
Morocco World
13-04-2025
- Business
- Morocco World
Breaking Down Cyber Walls: A Conversation with Ashraf Aboukass
Soon, Marrakech will be buzzing with tech thought-leaders at GITEX Africa 2025 – where innovation, AI, and cybersecurity are at the heart of every conversation. Returning to this year's program is the Cybersecurity Forum from 14-15, which will feature a wide range of experts united against cybercrime in this $900 billion tech frontier. Among them? Ashraf Aboukass, a man who has seen it all when it comes to the world of cybersecurity in Africa. Cybersecurity isn't just a job for him. It's a battleground. A high-stakes game of digital cat and mouse where the threats are real, the stakes are high, and the people making the calls need to be razor-sharp. And let's be honest — doesn't that sound a little thrilling? In an interview with Morocco World News, the current cybersecurity head at Confidential takes us behind the screen, sharing his journey, the biggest threats on the horizon, and why, in this field, soft skills might just be your best weapon. A career rooted in a self-taught skill Ashraf's journey into cybersecurity wasn't just a career choice — it was a calling. 'When things go wrong and chaos takes over, most people freeze or react irrationally,' he explained. 'But during the first major incident I was called to support, I felt completely at home.' While others panicked, Ashraf remained calm and focused, quickly formulating a plan. 'This is something that most people struggle with,' he added. For him, it wasn't just about technical skills — it was about the mindset that truly defines a cybersecurity professional. As a leader, Ashraf has navigated high-stakes situations where every second counts. One memorable moment was during a major internet outage at a company in London. Initially suspected to be a cyberattack, Ashraf trusted his instincts and directed his team to dig deeper. 'The issue wasn't an attack but a DNS misconfiguration from years ago,' he said. By questioning assumptions and trusting his gut, Ashraf not only saved time but also prevented unnecessary disruptions, allowing the company to restore services quickly. A fresh approach to cybersecurity It's often said that cybersecurity professionals need a strong technical foundation, but Ashraf believes there's an underrated skill that often gets overlooked – emotional intelligence. 'In high-pressure situations, cybersecurity professionals often work with non-technical stakeholders who are confused, anxious, and looking for guidance,' he explained. Being able to read people's emotions and adapt your approach can make all the difference, especially when making decisions under pressure. When asked about the most sophisticated cyber threat he's encountered, Ashraf points to Stuxnet, a highly advanced piece of malware that still serves as a stark reminder of what can happen when infinite resources are dedicated to creating cyber weapons. 'What's scary is that this malware was discovered around 15 years ago,' he noted, acknowledging that the most advanced threats may not even be disclosed yet. For Ashraf, it's no longer just about preventing attacks — it's about assuming compromise and focusing on how to respond effectively. Looking ahead, Ashraf foresees critical infrastructure systems as the prime target for cyber threats in the next five years. 'The drive for digitalization, coupled with migration to the cloud powered by the hunger to leverage advancements in machine learning, will create a tremendous challenge in terms of cybersecurity,' he warned. The role of AI As cybercriminals become more sophisticated, leveraging AI to craft tailored malware, businesses must adapt to new threats or risk falling victim to disruption. AI's role in cybersecurity is undeniable, but will it eventually replace human analysts? 'AI will undoubtedly reshape the cybersecurity landscape,' Ashraf said. 'However, the need for experienced security professionals won't vanish. Cybersecurity isn't just about identifying threats; it's about understanding intent and making judgment calls that AI alone cannot handle.' For Ashraf, AI will elevate the profession, freeing up human talent to focus on more complex, high-value roles. In an era where cyber warfare is increasingly becoming a tool of geopolitical conflict, corporations must be prepared. Ashraf believes governments must prioritize digital resilience through policy, funding, and education programs. 'Addressing these threats requires a multifaceted approach and collective effort between governments, businesses, and cybersecurity professionals,' he stated. While there is no one-size-fits-all rule for cybersecurity, Ashraf advocates for the principle of 'least privileges.' 'Every company should implement this without exception,' he added. By ensuring that accounts are granted only the minimum necessary privileges, companies can significantly reduce their exposure to cyber risks. Follow the money, learn your tech When discussing the growing profitability of cybercrime, Ashraf explains that the low entry cost, availability of hacking tools, and the global reach of cybercriminals make it an attractive venture. 'Cybercriminals are driven by financial gain, so following the money is essential,' he said. While it's clear that stronger international collaboration and threat intelligence sharing are key to disrupting this ecosystem, Ashraf believes that early education is just as crucial. 'We must counter the glamorization of cybercriminals,' he urged. With cloud security taking center stage as a key focal point at GITEX Africa 2025, Ashraf warns businesses not to fall into the trap of assuming that the cloud is inherently secure. 'If businesses don't understand their shared responsibility model, cloud adoption can turn into a security disaster,' he cautioned. Understanding the security tools provided by cloud providers and integrating them properly into business operations is essential for mitigating risks. Coming home for GITEX Africa While cybersecurity may be Ashraf's professional focus, Marrakech holds a special place in his heart. 'I've been visiting regularly since I was a child, as my father is a Marrakechi,' he revealed. 'He was an actor in one of the first theatre productions here, and even now, he continues to write plays and poetry.' 'For me, Marrakech is a living, breathing reflection of my father's inspiration.' As he continues to return to the city, Ashraf finds it to be a place where he can recharge and connect with his roots. GITEX Africa 2025 prepares to open its doors, and if there is one thing that is clear: cybersecurity is no longer just a technical issue — it's a critical component of our digital futures. For experts like Ashraf Aboukass, this is only the beginning of a thrilling and ever-evolving journey. Tags: Africa CybersecurityCybersecuritygitexGITEX Africa 2025
