Dubai Municipality Trains Employees on Over 300 Security Controls and AI Safeguards.
Dubai: Social engineering remains one of the most common tactics used by cybercriminals to target individuals, prompting Dubai Municipality to strengthen employee training on identifying suspicious activity and reporting potential security threats.
Engineer Nasser Hassan, Manager of the Corporate Security Office at Dubai Municipality, highlighted the growing risks during a cybersecurity awareness event organised by the authority.
According to Hassan, phishing emails remain the most frequently encountered threat, followed by fraudulent phone calls and video calls targeting vulnerable members of the public.
He stressed that recognising a cyberattack attempt is only part of the challenge. Employees must also understand the correct procedures for reporting suspicious incidents to prevent further risks.
Dubai Municipality’s cybersecurity awareness initiatives extend beyond its workforce, with efforts also aimed at educating the wider community about digital threats and safe online practices.
Dubai’s approach to cybersecurity
Hassan explained that Dubai follows a practical, regulation-driven approach to protecting information and digital infrastructure.
“Laws and regulations dictate how information security is built, and government entities follow local best practice alongside international standards such as ISO 27001,” he said.
He added that Dubai government entities have already implemented policies addressing artificial intelligence security and post-quantum cybersecurity, reflecting efforts to prepare for emerging technological risks.
More than 300 cybersecurity controls
Explaining how Dubai Municipality responds to evolving cyber threats, Hassan outlined a comprehensive approach built around regulatory compliance, security policies and employee awareness.
“The Dubai Electronic Security Center issued an information security regulation more than a decade ago. That carries over 300 security controls that entities must meet. The centre has also released an AI security policy,” he said.
These measures provide a framework for government organisations to strengthen information security, manage emerging risks and ensure employees understand their responsibilities in maintaining a secure digital environment.
Hassan explained that the Dubai Digital Authority provides additional cybersecurity guidelines, while individual government entities introduce their own internal security initiatives to strengthen protection.
With these multiple layers of safeguards in place, he believes Dubai has the potential to become the world’s most cyber-secure city, provided the regulations and security measures are consistently implemented.
How serious is the threat posed by AI?
Artificial intelligence is increasingly becoming part of the cybersecurity landscape, and Hassan identified two key areas that require attention: organisational use and personal use.
At the corporate level, organisations must establish clear policies and governance frameworks to ensure AI systems operate according to their intended purpose.
These safeguards must also include continuous monitoring to confirm that the systems remain within their defined limits over time.
Hassan pointed to incidents in other parts of the world where AI systems have bypassed established safeguards and performed actions beyond their intended scope.
He said government regulations and security policies play an important role in reducing such risks in Dubai.
Three AI safety tips for UAE residents
However, Hassan stressed that responsible AI use should not be limited to government departments and businesses. Individuals must also understand the risks associated with sharing information and relying on AI-generated responses.
He offered three important precautions for residents:
- Protect your personal information: Understand what personal data you are sharing before interacting with an AI platform.
- Check document confidentiality: Assess whether documents contain sensitive or confidential information before uploading them to AI tools.
- Never trust AI responses blindly: Review AI-generated information carefully and verify its accuracy before relying on it.
AI is a tool, not a source of absolute truth
Hassan emphasised that artificial intelligence should be treated as a technology that helps people complete tasks more efficiently, rather than an unquestionable source of reliable information.
He encouraged residents to critically evaluate AI-generated content, check the information provided and request supporting sources whenever necessary.
His broader warning was that cybercriminals often exploit human behaviour before attempting to compromise technological systems.
For this reason, awareness, responsible digital habits and timely reporting of suspicious activity remain essential to preventing cyberattacks.
Hassan concluded by reaffirming that information security continues to be one of Dubai Municipality’s highest priorities, with employee education, regulatory compliance and public awareness forming key parts of its cybersecurity strategy.
