Dubai Cyber Force Program

The Dubai Cyber Force program will signpost skilled and competent individuals and companies that can deliver Penetration Testing and Incident Response services to the Dubai government, semi-government, and CII. The program is part of the delivery of the Dubai Cyber Security Strategy (DCSS) with the vision of placing Dubai among the most secure cities electronically in the world.  

There is considerable variability in the services delivered by Penetration Testing and Incident Response service providers globally. Methodologies vary, breadth, depth and quality of assessment vary, and the underlying skills and competencies of the individuals delivering services can differ significantly. Penetration Testing and Incident Response services are highly technical, and the language, findings and recommendations can confuse buyers of services.  

This program sets a high, internationally recognised benchmark for the delivery of cyber services. It uses a program-based approach to deliver increased quality, improved technical skills, and greater consistency across the cyber security sector. It is essential to have confidence that Dubai’s public sector and critical information infrastructure (CII) are well protected. By defining a series of requirements for service providers and the professionals that deliver these services, the Cyber Force program delivers more consistent outcomes for delivering cyber services in Dubai.  

Buyers of services under the Cyber Force Certification Program in Dubai (e.g. Penetration Testing and Incident Response) can visit the CREST Register online to view the companies that have been registered for the program.    

Visit this link: Registered Companies   

Or via the DESC listing: Certifications – DESC 

Visit the Certifications section of the CREST website for more information about booking a CREST exam. CREST will share details of its ‘CREST Exam Centre’ in Dubai in due course.

For information on becoming a provider of the program, email [email protected].  

Visit the Membership section of our website to discover the benefits of becoming a CREST member company and apply by emailing [email protected].  

Please get in touch with DESC at [email protected] for more information.  

The program is expected to become mandatory from the 31 July 2024. All interested parties are encouraged to register for the program as soon as possible to ensure they meet this timescale.  

A key domain of the DCSS is creating a Cyber Smart Society – achieving awareness, skills, and capabilities to manage cyber security risks for Dubai’s public and private sectors and individuals, including:  

Capacity – Availability of knowledgeable, experienced, and trained personnel specialised in cyber security for public and private sector organisations.  

Capability – Raising the skills of cyber security experts.  

A key guiding principle and domain of the DCSS is National and International collaboration:    

Establishment of international collaboration – setting standards that are internationally recognised and enable Dubai to build a cyber eco-system that aligns with the best globally

Collaboration between organisations forming part of the Critical Information Infrastructure (CII) and establishment of partnerships with public and private sectors – connecting the public sector to the private cyber services sector through collaboration with global standard setters.  

Establishment of cyber security legislation and regulations – the implementation of regulations that drive capacity, capability and consistency aligned with international standards.  

Individuals must present a valid Dubai Police security clearance when applying for recognition as part of your team.

To access Dubai Police security clearance portal, use the following link: Police Clearance Certificate (dubaipolice.gov.ae)

No costs are associated with applying to be certified under the DESC Cyber Force Program. However, the applicant will bear any costs to achieve the required individual certifications outlined in the Appendices and Company Accreditations. 

Depending on the discipline, DESC may require specific reporting for certain government agencies. 

For existing CREST members the process takes approximately five working days, from submission to notification of the result. 

For those needing to Accredit their organisation, the timeline is dependent on how quickly they can provide the required evidence and complete the membership process.

Yes, renewal is required annually.