“The Gulf was built on the promise of an island of stability in an unstable sea. February 28, 2026, tested that promise more profoundly than any moment in the region’s modern economic history. The question now is not whether things have changed — they have. The question is whether we, as technology leaders, have the clarity to understand what changed, what did not, and what we must now do differently.”

The Ground Has Shifted. Not Collapsed.

Let me be direct from the outset. Twenty years in this geography gives you a particular kind of lens. I have worked through the 2008 financial crisis, the Arab Spring, the oil price collapses of 2015 and 2020, and the pandemic. Every single time, the conventional wisdom from outside the region was that the Gulf had been fundamentally altered. Every single time, in my experience, the institutions that stayed the course, deepened their commitments, and trusted the region’s underlying fundamentals were the ones who came out ahead.

What began on February 28, 2026, is different in character — though not, I believe, different in ultimate outcome. For the first time, the GCC states were not peripheral observers of a regional conflict. They became its arena.

Credible public reporting places the scale of Iranian missile and drone activity against GCC states in the thousands.¹ Dubai International Airport, long recognised as the world’s busiest international aviation hub, temporarily suspended operations amid wider airspace and aviation disruption. Abu Dhabi’s airport suffered a fatal incident, Kuwait International Airport sustained drone damage to its passenger terminal, and Qatar suspended air navigation and grounded the Qatar Airways fleet.² Separately, strikes around the Jebel Ali port area, Barakah Nuclear Energy Plant, underscored the exposure of the Gulf’s energy and logistics infrastructure. AWS data centre facilities in the UAE and Bahrain were also affected by drone attacks on March 2, pushing digital infrastructure from the background of geopolitical risk into its centre.³ Through the Strait of Hormuz — the 33-mile channel through which approximately 20–30% of global oil and around 20% of global LNG flows⁴ — ship arrivals reportedly plummeted by over 97% at the height of the disruption.⁵

For those of us embedded in this market — advising clients, building pipelines, running delivery operations, and serving institutions that staked their futures on the promise of Gulf stability — this is no longer an academic question. It is operational. Strategic. Urgent.

The question I want to explore is the one every C-suite conversation in the region is circling, but attempting to articulate cleanly:

Will what we were selling still sell? And if not, what needs to change, and how fundamentally?

First, the Honest Damage Assessment

Before we talk about what comes next, let’s be clear about the scale of what’s happened, because the strategic response depends on an honest diagnosis.

The IMF has revised 2026 economic growth projections across the region with striking severity. Qatar saw the sharpest downgrade, with its 2026 forecast reportedly cut by 14.7 percentage points to an estimated contraction of around 8.6%. Kuwait and Bahrain were also pushed into mild contraction territory, while the UAE and Saudi Arabia saw meaningful downward revisions but remained in positive-growth territory. Rystad Energy has estimated that repair and restoration costs for energy-linked infrastructure damaged in the conflict could reach as much as $58 billion, with oil and gas facilities accounting for up to $50 billion of that total. These are not rounding errors. They are structural shocks to economies that, as recently as January 2026, the World Bank expected would grow by around 4.4% in 2026.

The disruption has moved simultaneously across the sectors that the Gulf had spent more than a decade building:

Energy and Hydrocarbon Exports. The severe disruption around the Strait of Hormuz affected the export infrastructure that funds Gulf ambition. Saudi Arabia pivoted to land-based oil export pipelines, but capacity constraints are real. Reporting also pointed to disruption across Qatar’s energy and industrial operations, including facilities linked to critical export production. .⁹ Brent crude crossed $110 per barrel in the weeks following the outbreak — a paradox that improves fiscal revenues for some producers while simultaneously eroding the economic confidence that underpins the diversification investments that matter most to them.¹⁰

Aviation and Tourism. For the first time in history, all GCC airspace closed simultaneously — during Ramadan season, no less. The Middle East Council on Global Affairs estimates expected aviation and tourism losses of $40 billion.² The region had targeted 200 million tourist visits annually across its combined Vision programmes.¹¹ That ambition is not abandoned, but it has been deferred.

Ports and Logistics. Jebel Ali — the largest port in the Middle East and a critical node in global supply chains — faced attacks on its surrounding area. The cascade effects have touched construction project timelines, manufacturing input availability, and food security in ways that reveal a structural fragility: the GCC imports 100% of its sugar, 91% of its vegetable oils, and 77% of its rice.¹⁰

Manufacturing and Industrial Production. Bahrain’s exposure is particularly acute because hydrocarbons and energy-intensive industrial exports, including aluminium, remain central to fiscal and external earnings. Aluminium smelting is power-intensive; energy facility disruption can therefore create cascading production impacts that ripple through downstream manufacturing, employment, trade flows, and fiscal balances. The broader point is not only Bahrain-specific. Across the Gulf, the crisis has exposed how energy, industry, logistics, and fiscal resilience are more tightly connected than many operating models had assumed.

Banking and Capital Markets. M&A activity and debt and equity underwriting will suffer delays until geopolitical tensions reduce.¹³ That said, the banking sector’s structural position is stronger than many outside the region appreciate. The UAE issued bonds in March 2026 that were heavily oversubscribed, priced at just 16 basis points above comparable US Treasuries — levels typically associated with the world’s safest borrowers. S&P affirmed its AA rating for Abu Dhabi.¹⁴ Central banks maintained their pegs. Free zone rules did not change. Foreign ownership structures remained intact.¹⁵ The Gulf has been through enough cycles to build institutional muscle memory.

Digital Infrastructure. And this is where the story becomes most significant for our industry. The reported strikes affecting AWS data centre facilities in the UAE and Bahrain showed that digital infrastructure can no longer be treated as a neutral background utility.¹⁶ Whether targeted for strategic signalling, operational disruption, or both, hyperscale infrastructure has now entered the kinetic risk landscape. Iran has also explicitly threatened US technology companies operating in the region, including Microsoft, Oracle, and Amazon.¹⁷ For the first time, cloud infrastructure is not merely a geopolitical consideration. It is part of the operational risk map. That single fact changes the calculus for every technology company operating in this market.

The Worst-Timed Disruption in the Region’s Modern History

There is a line from EY’s analysis of this moment that I keep returning to:

“The GCC’s transformation programs are among the most ambitious ever seen. Before the tensions broke out on 28 February 2026, the GCC was expected to rank among the world’s top 10 economic blocs by 2030, with a combined GDP of around US$3 trillion.”¹¹

That framing matters. This conflict did not arrive into a mature, static economy that had settled into its shape. It arrived at the precise moment when the Gulf was in the middle of the most consequential economic transformation in its modern history, as noted by the Middle East Council on Global Affairs.⁹ Vision 2030 in Saudi Arabia. UAE Centennial 2071. Qatar National Vision 2030. Kuwait Vision 2035. These were not aspirational brochures. They were backed by sovereign wealth fund assets of $5–6 trillion¹⁴ ¹¹ and by commitments from global technology companies that, frankly, are staggering in their scale.

Microsoft committed $15.2 billion in the UAE between 2023 and 2029. AWS pledged over $5.3 billion in Saudi Arabia. Oracle committed $1.5 billion to Saudi cloud capacity. OpenAI’s Stargate project — a $500 billion venture — announced its first international deployment in Abu Dhabi.¹⁷ The region had, by any measure, become one of the most significant arenas for global technology investment on earth.

The conflict arrived precisely when the table was set.

The central question — does it reset the table, overturn it, or merely delay the meal? — is the one I want to spend the rest of this piece exploring. Because based on two decades of watching this region navigate adversity, and based on the evidence emerging from the ground right now, I believe the answer is: the table will be reset, but the dinner will still happen. And the menu is changing.

Something Has Shifted in the Buyer

Before we talk strategy, we need to understand the buyer. Because a strategy built on yesterday’s buyer behaviour is a strategy built on sand.

Three shifts are already visible, and they are not subtle.

Confidence Has Given Way to Contingency Thinking

Pre-conflict, the dominant posture across Gulf institutions was what I would call accelerationist. More capacity. Faster deployment. Bigger programmes. Longer commitments. The region’s sovereign funds, banks, government entities, and private sector champions were in full forward-momentum mode — and the numbers justified it.

The conflict introduced something the Gulf had not experienced in this specific form: simultaneous disruption of aviation, ports, energy, and digital infrastructure. Business continuity stopped being a compliance exercise and became a lived reality. As Abdulaziz Al-Anjeri, Founder & CEO of Reconnaissance Research in Kuwait, put it: “Businesses shift quickly into contingency mode: staff safety, operational coverage, supply, and cash-flow discipline.”¹⁸

The immediate response from most institutions has been triage before transformation. Keeping the lights on before figuring out where the new lights should go. That is rational, and it is temporary. But it changes the entry point for every technology conversation right now.

Data Sovereignty Has Stopped Being a Regulatory Box to Tick

The strikes on AWS data centres achieved something that years of policy consultation had not: they made data sovereignty visceral. The question of where data lives, who controls it, and what happens when the physical infrastructure hosting it is in an active conflict zone is now a board-level conversation across every major institution in the region.

GCC states were already moving toward data localisation requirements before February 28. Saudi Arabia’s data, cybersecurity, and financial-sector regulatory frameworks — including SDAIA/PDPL, NDMO, NCA, and sectoral requirements — have already been pushing institutions toward tighter control over data location, access, transfer, and operational resilience. The UAE’s cloud security and financial-sector regulatory environment similarly places greater scrutiny on cloud adoption, while Qatar’s lack of a native Azure region further sharpens deployment and sovereignty questions.¹⁹ These regulatory realities existed before the conflict. The conflict transformed them from compliance constraints into strategic imperatives.

Gartner captures this trajectory with remarkable precision in its 2026 technology outlook: “By 2030, more than 75% of European and Middle Eastern enterprises will geopatriate their virtual workloads into solutions designed to reduce geopolitical risk, up from less than 5% in 2025.”²⁰ That projection was made before the conflict accelerated the timeline dramatically.

For technology vendors, the implication is confronting: the multi-cloud, globally distributed architecture that hyperscalers spent years selling as the definition of resilience has itself been revealed as a vulnerability. The question is no longer “which cloud?” It is “which cloud, where, under whose legal jurisdiction, with what physical redundancy, and with what guarantees when the unthinkable happens?”

Long-Term Vision Is Intact. Short-Term Execution Is Being Recalibrated.

This is the nuance that most global commentary misses — and it is the most commercially important of the three shifts.

The sovereign wealth funds — the real decision-making power in this region — are not retreating. They are recalibrating. Abu Dhabi launched L’imad Holding as a fourth sovereign investment pillar six weeks before the war began.¹⁵ Saudi Arabia’s PIF, ADIA, QIA, and Mubadala continue to operate on long-term mandates. Three Gulf states were reviewing in March 2026 how to deploy SWF holdings to offset war-related losses — not liquidating their positions, but actively redeploying capital.²¹ As the Arab Center DC analysis notes, GCC sovereign wealth funds manage approximately $6 trillion in assets, with an estimated $2 trillion invested in the United States alone.¹⁴ That capital will not disappear overnight, but the direction, pace, and conditionality of future allocation may become more selective.

Private investors are a different story. They are recalibrating risk, slowing commitments, and watching for signals. The bifurcation between state capital and private capital will, in my view, be one of the defining features of the Gulf technology market for the next two years.

The implication for technology companies is direct: know which buyer category you are serving, and calibrate your approach accordingly. The sovereign buyer has a long horizon and patient capital. The private buyer needs a shorter, more tangible resilience story before re-engaging at scale.

The Technology Industry’s Reckoning

Now to the core question. Should technology companies — product companies, services firms, platform providers, hyperscalers — do more of what they were doing? Or does something more fundamental need to change?

Let me be honest about what I think is happening, because I have watched enough technology sales cycles in this region to recognise the pattern.

The instinct of many technology organisations right now will be to wait. Wait for the conflict to resolve. Wait for the market to stabilise. Wait for buyers to re-engage on their own terms. And then resume the pre-conflict playbook.

That instinct will be costly. Because the buyers are not waiting. They are actively forming new requirements, new preferences, and new standards for what a technology partner looks like. The companies that shape those standards will own the next decade of market position. The ones that wait will find the standards have been set without them.

Do not mistake a change in buyer behaviour for a retreat from technology. The Gulf is not abandoning digital ambition; it has institutionalised it through national visions, sovereign investment mandates, and long-cycle transformation programmes. What has changed is the test. Technology must now prove that it can endure pressure, preserve control, and keep institutions operating when conditions are no longer ideal.

This is a different sale. It is not a smaller one.

What the Old Sale Looked Like

The value proposition that drove the Gulf technology market for the past decade was built on three pillars. Transformation at speed – compress 10-year timelines, deploy AI and cloud to leapfrog legacy gaps. Global best practice – bring what works in New York, London, and Singapore; the Gulf has the capital, give us the capability. And scale alignment – bigger commitments, flagship deals, marquee announcements.

This was genuine. It created real value. Large parts of it remain valid.

What the New Requirement Looks Like

But the conflict has introduced a fourth dimension that will now sit alongside — and at times override — the first three.

Proven resilience and operational sovereignty.

Buyers across banking, sovereign wealth management, government, and critical infrastructure are now asking questions they did not ask before. What happens to our data and our operations if the physical region is disrupted again? Can your platform function in a constrained connectivity environment? Do you have genuine in-country redundancy — not just technically, but legally and operationally? What are your contractual obligations under force majeure conditions? And perhaps most tellingly: are you committed to this market for the long cycle, or will you reroute workloads to Mumbai the moment it gets difficult?

That last question is not rhetorical. Reports suggest that hyperscalers explored rerouting Middle East workloads to locations in India and Singapore, with capacity sought in Indian cities including Mumbai, Chennai, Hyderabad, and Kochi.²² That response may be operationally prudent from a continuity standpoint. But the client perception risk is real: if continuity planning looks like geographic retreat, Gulf institutions may read it as conditional commitment. That perception, fair or not, will shape procurement decisions for years.

Five Things Technology Partners Need to Reposition For

These are not prescriptions. They are observations from the ground, drawn from what I am seeing institutions actually ask for right now. The organisations I have watched navigate technology market shifts in this region successfully share a common trait: they listen to the buyer before they build the solution. So consider this a translation of what the buyer is currently saying.

1. Resilience Architecture Is Now the Opening Conversation

CIOs and CFOs are no longer opening with “what can you do to help us accelerate Vision 2030?” They are opening with “What happens to our operations if this happens again?”

Technology partners who arrive with resilience-first architectures — solutions that demonstrate how transformation and durability coexist — are finding a very different reception than those arriving with transformation roadmaps. This means multi-region deployment designs with in-country sovereign anchors, hybrid cloud models that do not assume uninterrupted hyperscale connectivity, cyber resilience frameworks calibrated for infrastructure warfare scenarios rather than just cybercrime, and operational continuity playbooks that have been stress-tested rather than merely documented.

Computer Weekly’s reporting on the regional CIO response is instructive here: the conflict reinforced the importance of multi-availability zone architectures, cross-region failover, zero-trust frameworks, and closer collaboration between the private sector and national cybersecurity authorities.²³ These are now table-stakes expectations, not premium features.

The institutions writing the next generation of large contracts in this region are the ones that experienced what happens when resilience was an afterthought. They will not make that error again.

2. Sovereign Data Capability Is the New Market Entry Requirement

Data sovereignty was a regulatory conversation. It is now a strategic imperative. Gartner’s 2026 strategic technology outlook predicts that by 2030, more than 75% of European and Middle Eastern enterprises will geopatriate virtual workloads into solutions designed to reduce geopolitical risk, up from less than 5% in 2025.²⁰

Technology vendors who can offer genuine sovereign cloud architectures — operationally isolated, legally unambiguous, physically secured within national boundaries — will have a competitive advantage that no feature set can replicate. This applies especially in financial services. The UAE financial sector has signalled it can weather the conflict’s impact, but that confidence is predicated on institutions maintaining genuine control of their critical systems.²⁴

The opportunity is significant: not just infrastructure, but the entire data management, governance, and AI stack built to operate within sovereign perimeters. Whoever owns the sovereign data layer owns the long-term relationship.

3. AI Needs to Prove It Can Handle the Hard Days, Not Just the Good Ones

The Gulf was, before February 28, one of the most ambitious AI markets on the planet. Saudi Arabia’s NEOM, the UAE’s national AI strategy, Qatar’s Smart Nation agenda — these were commitments, not experiments, backed by capital at scale.

The AI story has not died. It has matured. The question is no longer “can AI transform our operations?” That answer is broadly accepted. The question is now: can AI operate reliably when conditions are not ideal?

Gartner frames this precisely: “Technology is essential for economic and societal stability, but it cannot always be relied upon to function flawlessly — especially in a world defined by volatility. Growing geopolitical tensions have introduced new risks, raising concerns about data security, privacy, and the resilience of digital and physical infrastructures.”²⁵ The recommendation — prioritise resilience through confidential computing, digital immune systems, and technological sovereignty — reads like a direct brief for what Gulf buyers are now demanding.

The practical implication: AI platforms and solutions that can operate within sovereign perimeters, function across hybrid and edge environments, and maintain continuity when external connectivity is constrained are no longer a niche requirement. They are becoming the baseline. Financial institutions managing multi-asset portfolios, banks running payment infrastructure, energy companies managing field operations across the Gulf — all of them are now asking whether their AI stack can handle conditions that were once considered edge cases.

4. Sovereign Wealth Funds Are the Long Game — Treat Them Accordingly

The Council on Foreign Relations has identified a dynamic that deserves more attention than it has received: the potential reduction in GCC sovereign capital flows to US technology companies could be a significant challenge for hyperscalers that have come to depend on Gulf capital to fund their AI infrastructure ambitions. GCC sovereign wealth funds invested $119 billion globally in 2025 alone, with the US the largest single beneficiary.²⁶ A sustained reduction in those flows — even a partial one — changes the financing calculus for the entire AI infrastructure build-out.

The inverse of this is equally important: the GCC sovereign funds that remain committed to long-term transformation represent the most patient, most substantial, and most strategically significant client relationships in the global technology market. These are institutions with multi-decade mandates, long-cycle capital, and the ability to make bet-the-decade commitments when they trust their partners.

The word trust is doing a lot of work in that sentence. And it brings me to the fifth repositioning, which is perhaps the most important of all.

5. Commitment Under Pressure Is the Only Differentiator That Cannot Be Copied

In a market where confidence has been shaken, the most powerful competitive differentiator is not a product feature, a pricing structure, or a deployment model. It is a demonstration of commitment under pressure.

As the Maverick Consulting Group analysis of the conflict’s strategic communications lesson notes: “Markets will tolerate geopolitical tension; they are far less tolerant of policy unpredictability.”¹⁵ Companies that maintained regional leadership through the disruption — that kept teams on the ground, supported clients operationally, engaged constructively with government stakeholders, and communicated with clarity and consistency — have built institutional credibility that no marketing campaign can manufacture.

Those who sent a crisis communication and redirected workloads will find that re-entry is harder than they expect. The Gulf has a long memory when it comes to who showed up and who did not.

Twenty years of working in this market tells me one thing above all others: the relationship is the strategy. Transactions follow trust. Always.

A Note Specifically for Financial Technology, Data & Analytics, and Wealth Management Platforms

The financial services sector in the Gulf deserves specific attention because it sits at the intersection of every major dynamic that the conflict has accelerated.

The behavioural change among Gulf financial institutions is already tangible. Three Gulf states were reported to be reviewing how to deploy sovereign wealth fund holdings to offset conflict-related losses, with wider regional losses estimated in some reports to approach $200 billion.²¹ That kind of redeployment exercise requires portfolio analytics platforms capable of real-time, multi-asset risk modelling under conditions of geopolitical stress. Quarterly-cycle analytics tools are not calibrated for the questions risk committees are now being asked to answer.

Banks are accelerating stress-testing programmes across scenarios they had never previously modelled in earnest: cyber infrastructure disruption, telecom dependency failure, liquidity access under conditions of regional conflict, and supply chain choke points in critical operations. Al-Anjeri’s observation from the field — that institutions need to “treat stress-testing as real: cyber scenarios, telecom dependencies, liquidity access, supply-chain choke points, and customer-communication playbooks that are ready before the crisis, not written during it”¹⁸ — is a direct brief for what technology partners should be building and demonstrating.

Wealth management operations are navigating a more complex cross-border allocation environment. Clients are reassessing jurisdictional diversification, booking centres, reporting regimes, currency exposure, liquidity access, and concentration risk. Platforms that can support multi-jurisdiction portfolio management, reporting across regulatory regimes, consolidated exposure views, and alternative asset tracking will find demand that pre-dates the conflict but has been materially accelerated by it. The platform question these institutions are asking is no longer “can your system process our data?” It is: “Can your system help us navigate conditions we have never faced before — and do so with a system that is itself sovereign, secure, and provably resilient?”

That is a fundamentally different value proposition from the one most financial technology platforms were built to deliver. The ones that can answer yes — and demonstrate it — are in the strongest possible position for what comes next.

The implication is simple but uncomfortable. The Gulf technology market has not become less attractive. It has become more exacting. The next cycle will not reward companies that merely repackage old transformation narratives with new crisis language. It will reward those who can prove, architecturally and operationally, that resilience and sovereignty are built into the proposition — not added as footnotes after the contract is signed.

Realignment, Reconfiguration, or Re-engineering?

Let me answer the strategic question as directly as I can, because I think the honest taxonomy matters.

For some technology companies, realignment is sufficient. The core product is sound; the go-to-market positioning needs to lead with resilience, sovereignty, and durability rather than speed and scale. The sales motion and client conversations need to shift before the product does. This applies to many enterprise software, analytics, and managed services organisations whose underlying architecture can already serve the new requirements — they just have not been positioning it that way.

For others, reconfiguration is necessary. The product architecture assumed uninterrupted hyperscale connectivity, globally distributed infrastructure, and frictionless cloud access. Those assumptions need to be rebuilt into the product itself, not just the sales narrative. Hybrid deployment models, sovereign data options, edge capabilities, and degraded-environment operations need to move from the product roadmap into the product release. The timeline for that work has just been compressed significantly.

For a smaller number, re-engineering is required. Those whose infrastructure model is fundamentally incompatible with data sovereignty requirements, or whose value proposition was built entirely on the transformation-at-pace narrative, face a more profound rethink. Not because the market has gone away — it has not. But because the market has moved to requirements that the existing product cannot meet without fundamental architectural change.

The honest self-assessment question for every technology leader reading this: Which category are we in? And are we being fully honest with ourselves about the answer?

What Comes After This

I want to close with what I genuinely believe, and I want to be clear that it is a perspective shaped by twenty years in this geography rather than a prediction offered as certainty.

The Gulf will recover. The trajectory of economic diversification — the shift from hydrocarbon dependence to a multi-sector, knowledge-driven economy — is not reversible. It is backed by sovereign capital at a scale that few other markets in the world can match, by demographic necessity, and by a generation of Gulf nationals who have built careers and identities around a future that is categorically not oil-dependent.

But the recovery will not return to the pre-February-28 equilibrium. It will arrive at something more mature, more demanding, and in some ways more resilient precisely because it has been tested.

The GCC that emerges from this conflict will be a market that demands digital sovereignty as the price of technology entry, not as a premium option. That prices resilience into procurement decisions at the RFP stage, alongside feature sets and pricing. That diversifies its technology partnerships, because the risk of over-concentration on any single hyperscaler or platform has been made viscerally clear. That rebuilds with a longer time horizon, with more emphasis on architectural soundness over deployment velocity. And that asks harder questions about partner commitment — because it now has lived experience to draw on when evaluating the answer.

The organisations that understand this and lead with it — rather than retreating to pre-conflict playbooks and waiting for normal to resume — will find the Gulf’s next chapter its most consequential.

The ones that wait for the market to return to what it was will find, when they look up, that it has moved on without them.

The Call to Action

For every technology organisation operating in or targeting this market, I would offer the following — not as instructions, but as the questions I would be asking myself right now.

Audit your proposition honestly against the new requirements. Resilience. Sovereignty. Long-term commitment. Operational durability under pressure. Are you leading with these? Or are you still leading with speed, scale, and transformation aspiration?

Look at your regional presence honestly. Not the one in the press releases, but the one in the delivery model. Do you have genuine in-country capability — people, infrastructure, accountability — or are you flying in from elsewhere and calling it local? Gulf clients are paying more attention to this distinction than they ever have.

Engage your existing clients first. The institutions that navigated the past 90 days alongside you deserve a proactive conversation about how your platform serves their new reality. They are already forming the questions. Be the partner who answers them before being asked.

Position for the rebuild. Reconstruction of damaged infrastructure, reinforcement of sovereign digital frameworks, and the re-acceleration of Vision programmes with resilience genuinely embedded will create significant technology demand. The companies that show up with practical solutions will help write the next chapter. The ones that show up only with sympathy will be politely listened to and then overlooked. And above all: stay. Not just physically, but strategically. The Gulf has always rewarded consistency, depth of relationship, and the willingness to be present when it matters most. That has never been truer than it is right now.

This perspective is shaped by two decades of working across GCC markets and by watching the region respond to repeated moments of stress — financial crises, oil shocks, geopolitical tensions, the pandemic, and now a conflict that has touched the operating infrastructure of the Gulf itself. Again and again, the region has shown an ability to absorb pressure, reorganise quickly, and return with a more deliberate version of its ambition.

What is different this time is not the Gulf’s determination to recover. That remains intact. What has changed is the nature of the questions being asked by institutions, boards, CIOs, CTOs, CEOs, regulators, sovereign investors, and technology buyers. The conversation has moved from speed alone to resilience, from cloud adoption to sovereign control, from transformation aspiration to operational durability.

This reading is informed by my own experience, ongoing conversations with industry leaders and clients, and analysis from multiple credible sources listed below. The conflict and its economic impact remain active and evolving as of the date of publication; some estimates may change as institutional reporting matures.

Sources

¹ Harbus / Harvard Business School — GCC Sovereign Wealth Funds: Rainy Day Account or Economic Pressure Tool?, April 3, 2026

² Middle East Council on Global Affairs — The Costs of the Iran Conflict for the Gulf, March 8, 2026

³ Reuters / Financial Times — Reporting on AWS data centre disruption in the UAE and Bahrain following drone attacks, March 2026

⁴ Credendo — Middle East Conflict Raises Challenges for GCC Countries, March 9, 2026

⁵ Deloitte — Middle East Geopolitical Developments and Economic Impact, April 1, 2026

⁶ Stimson Center — Iran Conflict Hits Foundations of Gulf Economies, May 2026; Rystad Energy estimate on Gulf energy infrastructure repair costs, March/April 2026

⁷ Global Finance Magazine — Middle East: Key Trends Shaping 2026, April 7, 2026

⁸ Deloitte — Middle East Geopolitical Developments and Economic Impact, April 1, 2026

⁹ Middle East Council on Global Affairs — The Costs of the Iran Conflict for the Gulf, March 8, 2026

¹⁰ Deloitte — Iran and Middle East Conflict Impacts Global Economy, March 31, 2026

¹¹ EY — Why the GCC is at an Inflection Point, May 2026

¹³ Morningstar — What’s the Impact of the Iran War on Global Banks and Asset Managers?, March 5, 2026

¹⁴ Arab Center, Washington, DC — Protection or Vulnerability? Gulf Sovereign Wealth Funds and the Iran War, April 16, 2026

¹⁵ Maverick Consulting Group — Gulf Strategic Communications: 2026 Iran Conflict Lessons, May 2026

¹⁶ TechPolicy Press — The Legal and Policy Fallout from Data Center Strikes in the Middle East War, March 12, 2026

¹⁷ Asia Society Policy Institute — Iran Is Hitting Data Centers in the Gulf. It’s Strategic., April 1, 2026

¹⁸ Global Finance Magazine — War In The Middle East: GCC Mulls Action Over Iranian Attacks, March 13, 2026. Attributed to Abdulaziz Al-Anjeri, Founder & CEO, Reconnaissance Research, Kuwait

¹⁹ AGBI — Iran Conflict to Cause GCC Data Centre Slowdown, March 24, 2026

²⁰ Gartner — Top Strategic Technology Trends for 2026, October 2025

²¹ Reuters — Some Gulf states reviewing sovereign investments to offset economic shock from Iran war, March 2026; Arab Center, Washington DC — Protection or Vulnerability? Gulf Sovereign Wealth Funds and the Iran War, April 16, 2026

²² Storyboard18 / Economic Times — AWS, Microsoft Explore Rerouting Middle East Data Centre Workloads, March 9, 2026

²³ Computer Weekly — Resilience Under Pressure: How Regional Conflict is Reshaping the Middle East Tech Strategy, March 3, 2026

²⁴ The National — UAE Financial Sector Can Weather Impact of Iran War, March 29, 2026

²⁵ Gartner — Hype Cycle for Emerging Technologies, 2025

²⁶ Council on Foreign Relations — Disappearing Gulf Capital: The Iran War Risk Wall Street Isn’t Watching, May 1, 2026