Under Dubai Chambers
Contactالعربية
العربية

Resources

Guidance for business decisions and practical action.

Explore guidance for leadership decisions, business readiness, secure technology, and workforce development. Start with a practical reading path or find material for a specific question.

Find the resource you need

Selected public resources from their original publishers. Resource language is shown on each entry.

15 resources in the collection

Featured reading

NIST CSF 2.0: Enterprise Risk Management Quick-Start Guide

A concise guide to connecting cybersecurity risk with enterprise priorities, risk appetite, accountability, and leadership reporting.

For
Executives, CISOs, and enterprise risk leaders
Use it to
Frame a leadership discussion about how cyber risks inform business decisions.
View the guide: NIST CSF 2.0: Enterprise Risk Management Quick-Start Guide. Opens the publisher’s website in a new tab.
Publisher
National Institute of Standards and Technology (NIST), United States
Format
Guide and download
Resource language
English
Published

Leadership and governance

Connect cyber risk, oversight, supplier assurance, and institutional priorities.

Supplier and technology risk

NIST CSF 2.0: Cybersecurity Supply Chain Risk Management Quick-Start Guide

Practical steps for organizing supply-chain cybersecurity responsibilities and communicating requirements to technology suppliers.

Audience and practical use
For
Security, procurement, and technology supplier leaders
Use it to
Improve discussions about supplier criticality, responsibilities, and security expectations.
View the guide: NIST CSF 2.0: Cybersecurity Supply Chain Risk Management Quick-Start Guide. Opens the publisher’s website in a new tab.
Publisher
National Institute of Standards and Technology (NIST), United States
Format
Guide and download
Resource language
English
Published

Board oversight

Cyber Security Toolkit for Boards

Guidance and discussion questions for boards on risk, strategy, people, incident readiness, and assurance. The toolkit is organized around the UK Cyber Governance Code of Practice.

Audience and practical use
For
Board members, executives, and security leaders
Use it to
Select a relevant module and use its questions to prepare a board discussion with your security team.
Explore the toolkit: Cyber Security Toolkit for Boards. Opens the publisher’s website in a new tab.
Publisher
National Cyber Security Centre (NCSC), United Kingdom
Format
Toolkit and question sets
Resource language
English
Published

UAE context: Dubai strategy

Dubai Cyber Security Strategy 2023

Dubai's strategic priorities for a cyber-secure society, innovation, city resilience, and collaboration. The strategy provides local context for industry and institutional planning.

Audience and practical use
For
Business leaders, strategy teams, and academic institutions
Use it to
Read the strategy's four domains to understand the local priorities surrounding skills, innovation, resilience, and collaboration.
Read the strategy: Dubai Cyber Security Strategy 2023. Opens the publisher’s website in a new tab.
Publisher
Dubai Electronic Security Center (DESC)
Format
Strategy and PDF
Resource language
English

Readiness and response

Build everyday safeguards, raise awareness, and rehearse incident decisions.

Business awareness

QR code security for customer-facing businesses

A practical guide for Dubai businesses using QR codes in customer-facing settings, covering tampering, safe placement, staff awareness, and reporting.

Audience and practical use
For
Retail, hospitality, and customer-facing businesses
Use it to
Review QR-code placement, signs of tampering, and staff checks.
Read the guide: QR code security for customer-facing businesses. Opens the publisher’s website in a new tab.
Publisher
Dubai Electronic Security Center (DESC)
Format
PDF guide
Resource language
English

SME readiness

NIST Cybersecurity Framework 2.0: Small Business Quick-Start Guide

An introductory guide to organizing cybersecurity risk management for smaller organizations, with practical questions about responsibilities, assets, protection, response, and recovery.

Audience and practical use
For
SME owners and teams starting a cybersecurity program
Use it to
Structure an initial discussion about cybersecurity responsibilities and priorities.
View the guide: NIST Cybersecurity Framework 2.0: Small Business Quick-Start Guide. Opens the publisher’s website in a new tab.
Publisher
National Institute of Standards and Technology (NIST), United States
Format
Guide and download
Resource language
English
Published

Incident preparedness

Exercise in a Box

Exercises and facilitator materials to help organizations rehearse their response to cyber incidents and identify improvements through structured discussion.

Audience and practical use
For
Security, operations, and business continuity teams
Use it to
Choose a scenario and rehearse decisions with colleagues before an incident.
Explore the exercises: Exercise in a Box. Opens the publisher’s website in a new tab.
Publisher
National Cyber Security Centre (NCSC), United Kingdom
Format
Exercise resources
Resource language
English

Arabic awareness material

Cyber awareness in Arabic

Arabic guidance and awareness videos covering account protection, phishing, device updates, backups, and safer information sharing.

Audience and practical use
For
Awareness leads, employees, and smaller business teams
Use it to
Find Arabic material for a staff discussion about everyday digital safety.
Explore the Arabic hub: Cyber awareness in Arabic. Opens the publisher’s website in a new tab.
Publisher
Dubai Electronic Security Center (DESC)
Format
Awareness hub and videos
Resource language
Arabic

Digital safety and awareness

How to protect yourself in the digital world

An Arabic session on social engineering, phishing, data protection, account security, and responding to suspicious AI-generated content.

Audience and practical use
For
Employees and awareness facilitators
Use it to
Support a practical awareness discussion about digital risks and safer habits.
View the Arabic session: How to protect yourself in the digital world. Opens the publisher’s website in a new tab.
Publisher
DGOV Academy
Format
Arabic session, 54 minutes
Resource language
Arabic

Incident response and recovery

NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management

Recommendations for integrating incident preparation, detection, response, and recovery into cybersecurity risk management using the NIST Cybersecurity Framework 2.0.

Audience and practical use
For
Incident response, security risk, and business continuity teams
Use it to
Review how incident responsibilities and lessons learned connect to your wider risk-management program.
View the guide: NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management. Opens the publisher’s website in a new tab.
Publisher
National Institute of Standards and Technology (NIST), United States
Format
Guide and download
Resource language
English
Published

Secure technology and innovation

Examine the security questions behind cloud services and AI adoption.

Responsible innovation

Responsible AI use for small businesses

Practical considerations for setting AI-use rules, protecting sensitive information, reviewing outputs, and helping employees use approved tools responsibly.

Audience and practical use
For
Business owners and managers introducing AI tools
Use it to
Set rules for approved tools, sensitive information, and human review.
Read the article: Responsible AI use for small businesses. Opens the publisher’s website in a new tab.
Publisher
National Cybersecurity Alliance, United States
Format
Article
Resource language
English
Published

AI system security

Guidelines for secure AI system development

Security considerations across AI system design, development, deployment, and ongoing operation, including systems built on external models and services.

Audience and practical use
For
AI developers, product owners, security teams, and risk leaders
Use it to
Use the four lifecycle stages to structure a security review before deploying an AI-enabled product or service.
Read the guidance: Guidelines for secure AI system development. Opens the publisher’s website in a new tab.
Publisher
National Cyber Security Centre (NCSC), United Kingdom
Format
Guidance and PDF
Resource language
English
Published

Cloud assurance

The cloud security principles

Fourteen principles for assessing cloud platforms and software-as-a-service, covering protection, resilience, governance, identity, operations, and supplier assurance.

Audience and practical use
For
Cloud architects, security teams, and technology buyers
Use it to
Prepare questions and evidence requests when assessing a cloud provider against your organization's security needs.
Explore the principles: The cloud security principles. Opens the publisher’s website in a new tab.
Publisher
National Cyber Security Centre (NCSC), United Kingdom
Format
Technical guidance
Resource language
English

Dubai cloud requirements

Cloud Service Provider (CSP) Security Standard

DESC's overview of cloud security requirements and certification. It identifies the standard's application to cloud providers serving Dubai government and semi-government entities.

Audience and practical use
For
Cloud providers serving Dubai government and semi-government entities, and their public-sector buyers
Use it to
Check the publisher's scope and certification information when preparing provider-assurance discussions for this market.
View the requirements: Cloud Service Provider (CSP) Security Standard. Opens the publisher’s website in a new tab.
Publisher
Dubai Electronic Security Center (DESC)
Format
Standard overview
Resource language
English

Skills and workforce

Use role and skills references to connect learning with cybersecurity work.

Workforce and skills

NICE Framework: Current Versions

A shared vocabulary for cybersecurity work roles, competency areas, tasks, knowledge, and skills, with reference publications and downloadable framework components.

Audience and practical use
For
Employers, security team leaders, educators, and learners
Use it to
Compare team responsibilities with relevant tasks and skills to inform role descriptions, development plans, or learning pathways.
Explore the framework: NICE Framework: Current Versions. Opens the publisher’s website in a new tab.
Publisher
National Institute of Standards and Technology (NIST), United States
Format
Framework and reference data
Resource language
English

Perspectives from CSBG

Explore the group's articles on the practical decisions behind cybersecurity.

Read the CSBG blog

Prepare a sector issue

A focused inquiry makes your perspective easier to understand. Use these five prompts to explain an issue that matters beyond one organization. A short paragraph is enough to start.

  1. What is the business problem?

    Describe the decision, barrier, or recurring difficulty. Explain its practical effect on the business.

  2. Who encounters it?

    Identify the kinds of organizations or roles affected, without naming clients or individuals.

  3. What example can you share?

    Use a general or anonymized example that you are authorized to discuss. Keep it relevant to the shared issue.

  4. What would improve the situation?

    Suggest the clarification, practical guidance, or discussion that would help. You do not need to have a complete solution.

  5. What could you contribute?

    Describe relevant experience, research, or expertise you could bring. You can also ask how to take part.

Express interest

Help shape CSBG’s developing agenda in industry dialogue, business readiness, talent, and innovation. Choose a shared challenge and tell us what experience or insight you could contribute.

Explore initiatives