Webinars

Most cybersecurity frameworks are sound, globally validated, and MEA regulators have built on them for good reason.

The gap is not in the standard itself. It is in what happens between the compliance checklist and actual operational resilience. Across the Middle East and Africa, that gap is often wider than organizations are willing to admit.

After years of working across the region with dozens of organizations, industries, and regulatory environments, The Kernel is opening a conversation that usually stays behind closed doors.

No product demos. No global templates repackaged as regional insight.

‍

What we'll cover

• Why digital transformation across MEA is outpacing security maturity — and what that means for your organization.
• The three recurring patterns we continue to see across security deployments in the region that leave organizations exposed despite significant investments in tools and technology.
• What actually changes outcomes in MEA: the right approach, realistic implementation phases, and the stakeholder conversations that drive meaningful progress.

Join us for a practical discussion based on real-world experience from the region, focused on turning compliance into resilience.

Deploying identity controls and email protection is only half the defense, the other half is knowing whether they're holding. This session shows how Energy Logserver turns cloud infrastructure logs into an active defense layer connecting the identity and email controls covered in previous sessions to a live monitoring and alerting capability that closes the DEFEND loop.

Key Takeaways:

- Why visibility is a DEFEND-layer requirement, not just a detection-layer one, and how cloud environments create blind spots

- How ELS centralizes AWS CloudTrail, Azure Monitor, and on-prem logs into a single correlated view

- A live demo: detecting suspicious login behavior and failed MFA attempts in real time, connecting directly to Yubico/Pointsharp deployments

- How to configure automated alerts for the most common cloud attack patterns: privilege escalation, unusual access hours, lateral movement

- How channel partners can position ELS as the "proof layer" that validates every other security investment their clients have made

Deploying identity controls and email protection is only half the defense, the other half is knowing whether they're holding. This session shows how Energy Logserver turns cloud infrastructure logs into an active defense layer connecting the identity and email controls covered in previous sessions to a live monitoring and alerting capability that closes the DEFEND loop.

Key Takeaways:

- Why visibility is a DEFEND-layer requirement, not just a detection-layer one, and how cloud environments create blind spots

- How ELS centralizes AWS CloudTrail, Azure Monitor, and on-prem logs into a single correlated view

- A live demo: detecting suspicious login behavior and failed MFA attempts in real time, connecting directly to Yubico/Pointsharp deployments

- How to configure automated alerts for the most common cloud attack patterns: privilege escalation, unusual access hours, lateral movement

- How channel partners can position ELS as the "proof layer" that validates every other security investment their clients have made

This session explores why password sharing persists in many organizations and how to address it with both cultural change and technical controls in Active Directory. Using real-world examples, we will show how to limit concurrent logins, control initial access points, and apply workstation, OU, and IP-based restrictions to attribute every session to a unique identity.

Key Takeaways:

1. Understanding the everyday reasons users share passwords and how this behavior undermines accountability and security.

2. How to configure concurrent session limits and single-point-of-entry rules so the same account cannot be used from multiple machines at once.

3. How to apply context-aware restrictions (workstation/OU/IP/time) in AD to stop careless behavior, prevent unauthorized use of stolen credentials, and ensure all access is attributable to one user.

Description As of 2026, 78% of domains have a DMARC record, but only 42% are actually enforcing it, leaving a 36-point enforcement gap that attackers are actively exploiting. Closer to home, 31% of MEA's top companies have zero DMARC protection, and another 68% are stuck at monitor-only mode; meaning they can see attacks happening but aren't stopping them. This session shows exactly what domain impersonation looks like in the wild, why "having DMARC" is not the same as being protected, and how Skysnag takes organizations from vulnerable to enforced in 30 days, not months.

Key Takeaways:

- How attackers exploit the gap between DMARC awareness and DMARC enforcement in MEA organizations

- The real cost of domain impersonation, from BEC fraud to brand damage and email deliverability collapse

- A live walkthrough of what a DMARC audit reveals in 10 minutes using Skysnag

- The 30-day roadmap from p=none to p=reject without breaking legitimate email flows - Why Google, Yahoo, and Microsoft's enforcement mandates make this a now-or-never conversation for your clients