Arab AI Governance Lab

Areas of work

Cybersecurity

Capacity to protect digital infrastructure as a prerequisite for responsible AI deployment.

Key messages

  • Five states score above 94 on the ITU Global Cybersecurity Index: Saudi Arabia, the UAE, Oman, Egypt and Qatar.
  • Eight states score below 36, most of them in fragile or conflict-affected contexts.
  • The ITU index and the National Cyber Security Index agree fairly well (r = 0.83, n = 15) but diverge for several Gulf states.
  • Strong cybersecurity institutions, as in Oman, can serve as a platform for AI oversight where dedicated bodies are still thin.

Five states score above 94 on the ITU index: Saudi Arabia, the United Arab Emirates, Oman, Egypt and Qatar. The ITU index and the National Cyber Security Index agree fairly well across the region (r = 0.83, n = 15). Where cybersecurity institutions are strong and AI bodies are still thin, as in Oman, the former can host early AI oversight functions.

Figure 18Five states score above 94 on the ITU Global Cybersecurity Index; eight score below 36
Source: ITU Global Cybersecurity Index 2024, table F7.
Figure 19The two cybersecurity indices agree fairly well (r = 0.83, n = 15); the UAE, Oman and Bahrain score far higher on the ITU index than on the NCSI
Source: ITU GCI 2024; e-Governance Academy NCSI; table F7.
Table 7Cybersecurity indices by state
StateStageITU GCINCSIDigital development level
SAUAdvanced99.5484.4263.89
UAEAdvanced98.0640.2668.87
OMNEmerging96.0445.4559.51
EGYIntermediate95.4857.1446.93
QATAdvanced94.5058.4464.99
TUNIntermediate86.2353.2546.26
MAREmerging82.4170.1346.88
BHRIntermediate77.8625.9765.17
KWTInitial75.07n/an/a
JORInitial70.9628.5754.07
SDNNascent35.0311.6925.50
DZAInitial33.9533.7742.81
LBNNascent30.44n/an/a
LBYNascent28.7810.3941.10
PSENascent25.18n/an/a
SYRNascent22.1415.5833.40
IRQEmerging20.715.19n/a
MRTInitial18.9411.6911.30
YEMNascentn/a7.79n/a

Note. The Cyber Exposure Index shown on the earlier site is withheld until its source is documented. Comoros, Djibouti and Somalia are at the Nascent stage; their indicator values are not displayed in the 2025 release.

The Lab designs and delivers capacity building for ministries, regulators, data protection authorities and regional bodies: executive programmes, regulator training and institutional development, grounded in its comparative evidence and delivered in Arabic, English or French.

Contact the Lab

Other areas

Regulatory and legal frameworksAI readiness and digital governmentAI research and publicationsDigital infrastructureAI, culture and communicationGovernance typologyHuman capital and capacity