As Qatar advances its ambitious Digital Agenda 2030, cybersecurity must evolve from a technical function into a shared national responsibility, according to Dr Thamer al-Qadi, who is widely recognised as one of Qatar's leading technology executives. He has more than 25 years of experience shaping the country's digital landscape through innovation, cybersecurity, and strategic technology leadership. He is currently director of Information Technology at Katara Cultural Village Foundation.
Speaking to Gulf Times, Dr al-Qadi said the country's rapid adoption of artificial intelligence, cloud computing, smart infrastructure and digital services makes cyber resilience fundamental to sustainable development. While technology continues to reshape the way organisations operate, he stressed that trust, governance and human awareness remain the strongest safeguards against increasingly sophisticated cyber threats.
"The greatest challenge over the coming years will be the erosion of digital trust," he said. "Artificial intelligence (AI) now enables criminals to create convincing emails, forged documents, deepfake voices and realistic videos. People can no longer rely solely on what they see or hear. Trust must be based on verification."
Dr al-Qadi rejected the common perception that employees are the weakest link in cybersecurity, arguing instead that people become an organisation's strongest defence when properly trained and supported.
Most cyber incidents, he noted, result from everyday mistakes such as clicking phishing links, approving fraudulent multi-factor authentication requests, reusing passwords or opening malicious attachments. Attackers increasingly impersonate banks, government agencies, telecom providers and delivery companies, using urgent messages in Arabic and English to trick victims into revealing sensitive information.
Simple measures, including unique passwords, multi-factor authentication, regular software updates and verifying unexpected requests through a separate communication channel, remain among the most effective forms of protection, he said.
For organisations, annual awareness campaigns are no longer sufficient.
"Cybersecurity awareness must be continuous and practical," he said, advocating regular phishing simulations, role-specific training and an environment where employees can report suspicious activity without fear of blame.
AI, Dr al-Qadi said, has transformed both cyberattacks and cyber defence. AI enables criminals to launch highly personalised phishing campaigns at unprecedented speed, but it also allows security teams to detect unusual behaviour, prioritise threats and respond more rapidly to incidents.
"AI should enhance professional judgement, not replace it," he said, emphasising that strong governance and human oversight remain essential as organisations adopt intelligent technologies.
The expansion of hybrid and remote working has also redefined cybersecurity. Traditional office boundaries have disappeared as employees increasingly access corporate systems from homes, airports and public networks.
To address these risks, Dr al-Qadi advocates a Zero Trust security model in which every user, device and connection is continuously verified regardless of location. Organisations should centrally manage corporate devices, implement strong authentication, encrypt sensitive information and establish clear policies governing remote work.
"Providing a laptop and VPN is no longer enough," he said. "Security must be integrated into the entire operating model."
Dr al-Qadi also warned against the misconception among small and medium-sized enterprises (SMEs) that they are too small to attract cybercriminals.
Automated attacks constantly scan the internet for vulnerable systems, regardless of company size, while smaller businesses frequently become gateways into larger organisations through supply-chain attacks.
Rather than investing immediately in costly security infrastructure, SMEs should focus on the fundamentals: protecting critical data, enabling multi-factor authentication, maintaining secure backups, keeping systems updated and developing practical incident-response plans.
He added that outsourcing IT services does not transfer cybersecurity responsibility. Organisations remain accountable for protecting their information and ensuring service providers comply with clearly defined security and data protection requirements.
Looking ahead, Dr al-Qadi believes Qatar's growing investment in smart cities and Internet of Things (IoT) technologies presents enormous opportunities, provided cybersecurity is embedded from the outset.
Connected devices controlling transport systems, utilities, buildings and public services can improve efficiency, but they also create new attack surfaces if security is overlooked. He called for secure-by-design principles, robust procurement standards and continuous monitoring of connected infrastructure throughout its lifecycle.
Despite the growing sophistication of cyber threats, Dr Al Qadi stressed that the objective is not to eliminate risk but to build resilience.
"No organisation or individual is ever completely unhackable," he said. "Success lies in preventing attacks where possible, detecting breaches quickly, limiting their impact and recovering rapidly."
He urged organisations to test backups regularly, rehearse incident-response plans and clearly define responsibilities before an attack occurs rather than during a crisis.
For Qatar, he concluded, cybersecurity has become a strategic enabler of economic diversification and digital innovation.
Cybersecurity is no longer the responsibility of the IT department alone," Dr al-Qadi said. "It belongs to every individual, every organisation and every leader. By embedding secure behaviour into our daily lives and combining innovation with strong governance, Qatar can build a trusted and resilient digital future."
He urged organisations to regularly rehearse incident-response plans, test backups and clarify responsibilities before crises occur.
Ultimately, he said, cybersecurity extends far beyond technology.
"It is a shared responsibility that belongs to every individual, every organisation and every leader," he said.
With Qatar investing heavily in digital infrastructure, cloud computing, artificial intelligence and smart services, Dr al-Qadi believes trust will determine the success of the country's digital future.
"Cybersecurity is not simply about protecting computers," he said. "It is about protecting confidence in the digital economy. By embedding secure behaviour into everyday life and combining innovation with good governance, Qatar can build a resilient digital future that supports sustainable growth for generations to come."
