CPX – ADNEC GROUP

PUTTING CYBER
EXCELLENCE AT THE HEART
OF THE COMPANY CULTURE
CASE STUDY: CPX – ADNEC GROUP

PUTTING CYBER EXCELLENCE AT THE HEART OF THE COMPANY CULTURECASE STUDY: CPX – ADNEC GROUP
As one of the most diversified conglomerates in the UAE,
ADNEC Group has a versatile business portfolio spanning
exhibition venues, events, hotels, F&B, event services,
tourism, and media. Operating across this dynamic
landscape, the ADNEC Group needed a strategic partner who
could bolster the Group’s overall cybersecurity posture. In
2023, CPX was instrumental in helping ADNEC Group build a
robust cyber strategy by establishing clear benchmarks and
making cyber excellence an integral part of the Group’s
culture and strategy.
IN BRIEF
ADNEC Group is a leading UAE conglomerate with a versatile business portfolio that
spans exhibition venues, events, hotels, F&B, event services, tourism and media. As a
regional and global market leader, the Group plays a pioneering role in the event
industry and in business and leisure tourism. In 2023, ADNEC Group welcomed 5.3 million
visitors to its three award-winning venues, the Abu Dhabi National Exhibition Centre,
the Al Ain Convention Centre, and ExCel London.
FULL
STORY
FORGING A ROBUST
CYBERSECURITY FRONTIER
ADNEC Group has close to 5,000 employees and offices in Abu Dhabi, Dubai, Riyadh,
Munich, London and Paris. Operating within a fast-paced environment across multiple
time zones, ADNEC Group manages a vast array of data, including event information,
customer details, financial transactions, and proprietary intellectual property. With
the volume of sensitive data constantly increasing, and in light of escalating global
cybersecurity threats, ADNEC Group identified a pressing need to strengthen its
cyber defence strategy and processes.
ADNEC Group wanted a partner who could develop and implement a multi-faceted
cybersecurity strategy tailored to the company’s business requirements. The Group
approached CPX to enhance its digital security and thus began a transformational
journey that included implementing effective security controls and embedding a
strong security mindset and culture across the Group’s workforce.
As a first step, the CPX team assessed the organisation’s cybersecurity challenges,
which ranged from the constant threat of data breaches and unauthorised access to
concerns about potential disruptions to critical operations. The company’s existing
technology infrastructure, though functional, required augmentation to keep pace
with the rapidly evolving threat landscape.
The situational analysis revealed a need for a more comprehensive approach to threat
detection, incident response mechanisms, and an overarching cybersecurity strategy
that aligned with the company’s expansive growth plans. The assessment also
revealed the value of assigning a dedicated inhouse team to oversee the company’s
cybersecurity operations. Employee awareness and training emerged as another
critical requirement and implementing cybersecurity education became essential to
addressing risks associated with human error or negligence.

PUTTING CYBER EXCELLENCE AT THE HEART OF THE COMPANY CULTURECASE STUDY: CPX – ADNEC GROUP
ADNEC Group enlisted CPX as a strategic advisor. The CPX team delivered clear recommendations and
made substantial efforts to implement security controls, spanning endpoints, browser security, email
security, awareness training, and cloud security.
As part of the defined cyber maturity strategy, ADNEC Group undergoes bi-annual assessments that are
aligned with the CIS (Center for Internet Security) Critical Security Controls and the UAE Information
Assurance (IA) standards. Additionally, CPX’s incident response services enable ADNEC Group to maintain
a constant state of readiness that ensures swift and effective responses to any incident that may occur.
CPX, A STRATEGIC ADVISOR
CPX initiated a comprehensive training program to address employees’ awareness of cybersecurity in
order to mitigate risks associated with human error and promote a culture of cybersecurity
consciousness. As part of the broader cybersecurity strategy, ADNEC Group established an inhouse
security function and increased investments to implement additional controls in pursuit of higher
maturity. During an interim period, a dedicated CPX cybersecurity manager facilitated the selection of a
training platform, initiated an awareness program, and assisted in recruiting a permanent inhouse
cybersecurity manager, who subsequently took over the responsibilities of leading ADNEC Group’s
cybersecurity efforts.
A DEDICATED INHOUSE CYBERSECURITY EXPERT
At a high level, the key strategy pillars focused on establishing a measurable framework for assessing
maturity. To demonstrate progress and improvement, ADNEC Group adopted two frameworks: the UAE
Information Assurance (UAEIA) standards and the CIS Critical Security Controls. Benchmarking against
these standards became a cornerstone of the strategy. Emphasis was also given to internal awareness,
training, and cultivating a more robust security culture within the workforce to ensure alignment with the
organisation’s cybersecurity goals. ADNEC Group is currently ISO/IEC27001 certified, with plans to
maintain this certification as part of its long-term security measures.
ESTABLISHING SECURITY BENCHMARKS
THE
SOLUTION
In response to these critical needs, CPX collaborated
with ADNEC GROUP to develop and implement a robust
Cyber Excellence strategy. It included:

PUTTING CYBER EXCELLENCE AT THE HEART OF THE COMPANY CULTURECASE STUDY: CPX – ADNEC GROUP
THE
SOLUTION
In response to these critical needs, CPX collaborated
with ADNEC GROUP to develop and implement a robust
Cyber Excellence strategy. It included:
Supported by CPX, ADNEC Group created an inhouse cybersecurity function and introduced a dedicated
training platform that is now used to launch phishing campaigns and training courses on a regular basis.
The cybersecurity team, in collaboration with the Managing Director and Group CEO, have communicated
the importance of cybersecurity through regular emails, provided extensive training, and established a
dedicated cyber security email address to respond to any concerns and foster a proactive approach to
security. Over time, a noticeable shift has occurred in the company’s culture, with employees actively
engaged with the cybersecurity team and reporting suspicious activities across various platforms. This
change highlighted demonstrated a collaborative approach wherein employees felt empowered to raise
security concerns.
EQUIPPING EMPLOYEES FOR SUCCESS
As part of the cybersecurity maturity journey, CPX helped ADNEC Group advance its cloud security. In
collaboration with industry partners, two assessments were conducted, and a clear roadmap was
outlined to strengthen cloud security. This initiative, which involved CPX, and industry partners,
underscored the company’s commitment to comprehensive cyber and information security measures.
Furthermore, a comprehensive disaster recovery plan was developed to outline steps and procedures for
recovering critical systems and data in the event of a major cybersecurity incident or natural disaster.
Having this plan in place would enable ADNEC Group to resume operations as quickly as possible with
minimal disruption following any incident.
DELIVERING CLOUD EXCELLENCE IN AN
EVOLVING THREAT LANDSCAPE
“In today’s fast-changing digital landscape, cyber awareness is not just a task; it’s a collective responsibility.
At ADNEC Group, we remain committed to embracing a strong cyber culture and aligning it with a robust
cyber strategy. We strongly believe that only by fortifying our defenses can we build a resilient organisation
that can withstand evolving threats,”
says Humaid Matar Al Dhaheri, Managing Director and Group CEO of ADNEC Group.

PUTTING CYBER EXCELLENCE AT THE HEART OF THE COMPANY CULTURECASE STUDY: CPX – ADNEC GROUP
Today, thanks to a robust cybersecurity posture, ADNEC Group is in a strong position to continue driving innovation,
expanding its market presence, and safeguarding sensitive information in accordance with the highest standards
of resilience and diligence. The Group is establishing a new six-month security roadmap on a rolling basis, based on
bi-annual maturity assessments and VAPTs.
Within a short time, ADNEC Group has increased its cyber maturity significantly through its strategic partnership
with CPX on the basis of a clear mandate from ADNEC Group MD and Group CEO, Humaid Matar Al Dhaheri, and the
company’s Board.
Looking forward, ADNEC Group’s executive team and its employees are fully committed to continuing its cyber
journey and to keeping cyber excellence at the heart of its culture and strategy.
As a UAE-based cybersecurity expert, CPX understands the unique market dynamics and is well-equipped to help
organisations navigate and adopt a cybersecurity posture that works best for their business.
CONCLUSION
About ADNEC GROUP
Founded in 2005, ADNEC Group is one of the most
diversified conglomerates in the UAE and a huge
economic driving force within the MENA region. ADNEC
Group’s versatile portfolio of clusters spans venues,
events, hotels, F&B, event services, tourism and media.
Our mandate is to deliver premier services to every
stakeholder while supporting Abu Dhabi’s long-term
policies and goals of economic growth and
diversification. From hosting world-class events to
maximising the financial returns of our hotels, we’ve
experienced significant growth over the years, and
continue to strive for excellence at every turn.
ADNEC supports the Abu Dhabi Economic Vision 2030
and Plan Abu Dhabi 2030 through delivering significant
direct and indirect impact on the Abu Dhabi economy to
help the Emirate achieve its long-term goals of economic
growth and diversification.
About CPX Holding
CPX, headquartered in Abu Dhabi, is a leading provider of
digital-first cybersecurity solutions and services.
Established in 2022, CPX protects public and private
sector organisations with customised solutions that
reduce the risk of sophisticated cyberattacks. We
provide clients and partners with end-to-end
cybersecurity capabilities to ensure compliance with
stringent cybersecurity standards and accelerate their
cyber maturity.
Learn more at
www.cpx.net
“Working with CPX has allowed us to build a solid cybersecurity strategy that aligns with our business strategy.
It has enabled us to set clear measurable Cyber Excellence targets based on UAE Information Assurance
standards and CIS Critical Security Controls, and to foster a stronger security awareness
culture within our workforce,”
added Alexander Knigge, Group Chief Digital Information Officer, ADNEC Group.