Cisco has emphasized the importance of AI sovereignty in the UAE, advocating for enhanced control over data and infrastructure management. During a recent discussion, Abdelilah Nejjari, Managing Director for the Gulf, Levant, Türkiye, Caucasus & Central Asia at Cisco, highlighted that AI sovereignty extends beyond mere data residency to encompass who governs the data and the systems that AI relies on. This shift is crucial as organizations in the UAE and the wider region seek to balance sensitive workload management with access to global innovations.
Defining AI Sovereignty in the UAE
Nejjari articulated that AI sovereignty involves providing customers with greater choice, control, and autonomy over their data and digital infrastructure. While data residency addresses where information is stored, the broader question of governance becomes paramount. The UAE’s early commitment to AI, as outlined in its National Strategy for Artificial Intelligence 2031, underscores the significance of securely managing sensitive information, such as financial transactions and operational data from critical facilities.
According to Nejjari, three key areas of control are essential: access, operations, and governance. Organizations must determine who can access their systems and data, who manages the environment, and whether their technology partners’ principles align with their own. Cisco’s Sovereign Critical Infrastructure model ensures that control over access remains entirely with the customer, with no unauthorized access permitted.
Balancing Local Control with Global Innovation
Nejjari emphasized that sovereignty does not equate to isolation. Organizations in the region aim to stay connected to global innovations while maintaining control over critical systems. The choice of deployment model—whether on-premises, hybrid, or cloud—should be driven by data sensitivity, regulatory requirements, and business needs. For instance, systems supporting national services may require fully air-gapped environments, while other workloads might benefit from a hybrid approach.
Leaders must also be aware of the trade-offs involved. Air-gapped environments typically offer standard functionality available at installation, with updates applied offline, which may limit access to certain cloud-based features. Cisco’s approach is to provide flexibility, allowing organizations to choose which workloads run on sovereign infrastructure.
Skills and Governance for Operational Capability
To effectively implement AI sovereignty, organizations must focus on governance and skills development. Nejjari pointed out that organizations need to classify workloads by criticality, define access protocols, and manage updates independently. The UAE has made significant strides in this area, with Cisco’s 2025 AI Readiness Index indicating that 64% of UAE organizations have a defined AI strategy, although only 17% have a mature innovation process.
To bridge this gap, Cisco is prioritizing training and upskilling initiatives. The Cisco Networking Academy has trained over 168,000 learners in the UAE, addressing skills shortages in managing on-premises data centers.
Security Measures for AI Agents
As AI systems evolve from making recommendations to executing actions, the underlying infrastructure must be secure and resilient. The UAE government has announced a framework to deploy agentic AI across 50% of government sectors within two years. Cisco’s 2025 AI Readiness Index found that 92% of UAE organizations plan to deploy AI agents, highlighting the urgency for robust security measures.
Cisco’s security strategy for AI agents is built on three pillars: establishing trust, protecting against external threats, and ensuring rapid detection and response capabilities. This approach is critical as AI agents begin to operate on behalf of public services, where control over data and systems becomes a matter of public trust.
In conclusion, Cisco is committed to helping organizations in the UAE build sovereign AI infrastructure while maintaining interoperability and control. Their Sovereign Critical Infrastructure portfolio, available across EMEA, allows organizations to operate secure environments tailored to their specific needs, ensuring they are well-equipped to navigate the complexities of AI deployment.
For further insights, see the full discussion on TahawulTech.
