GCC’s critical infrastructure is complex and diverse, combining systems in both cyberspace and the physical world from oil and gas fields, power plants, aluminum plants, communication networks and the massive electrical grids that power industries and subsequently nation’s economies. Protection of vital assets, systems, and networks remains a top priority driven from a political level to an industrial level across the globe and more specifically now in the GCC. Developing cyber security programs with the ever evolving landscape is more important than just having a standard IT security program. “Evolve with the landscape or lose the game” is the new mantra adopted by major companies. A few recent catastrophic cyber-attacks on major companies show that in spite of having the best security systems, the level of cyber vulnerability to attacks cannot be ignored at any given point of time.