https://mshshuvo.com/insights Writing on cybersecurity, GRC and AI governance. en https://mshshuvo.com/insights/japan-just-showed-us-why-kyc-needs-an-upgradehttps://mshshuvo.com/insights/japan-just-showed-us-why-kyc-needs-an-upgradeMon, 26 Oct 2026 12:00:00 +0000Japan's first cyberspace state of emergency leaked millions of ID images. What that means for photo-and-selfie KYC, the stronger methods replacing it, and the policy changes that matter more.Identity & FraudGovernance & Risk https://mshshuvo.com/insights/the-ai-augmented-cyber-kill-chainhttps://mshshuvo.com/insights/the-ai-augmented-cyber-kill-chainSun, 16 Nov 2025 12:00:00 +0000How AI changes each of the seven phases of the Cyber Kill Chain, from reconnaissance to actions on objectives, and what defenders must do now that security is becoming model versus model.AI SecuritySecurity Operations https://mshshuvo.com/insights/the-unseen-risks-of-ai-transcribershttps://mshshuvo.com/insights/the-unseen-risks-of-ai-transcribersMon, 02 Dec 2024 12:00:00 +0000Meeting bots and casual screenshots can hand attackers enough voice and image data to clone you. The risks, and the consent and tooling controls that reduce them.AI GovernancePrivacy https://mshshuvo.com/insights/siem-strategies-for-tackling-cyber-threatshttps://mshshuvo.com/insights/siem-strategies-for-tackling-cyber-threatsMon, 27 May 2024 12:00:00 +0000The indicators and log sources a SIEM should use to catch malware, phishing, web application attacks, insider threats and APTs, threat by threat.Security Operations https://mshshuvo.com/insights/a-closer-look-at-nist-csf-2https://mshshuvo.com/insights/a-closer-look-at-nist-csf-2Mon, 26 Feb 2024 12:00:00 +0000What changed in NIST CSF 2.0, from the new Govern function and supply chain risk guidance to outcome-focused measurement and better alignment with ISO 27001 and COBIT.Governance & Risk https://mshshuvo.com/insights/the-ai-paradoxhttps://mshshuvo.com/insights/the-ai-paradoxWed, 17 Jan 2024 12:00:00 +0000Saving thousands of hours with AI is real, but so is the day it goes down. Why AI dependency needs fail-safes, contingency plans and people who know what to do without it.AI GovernanceGovernance & Risk https://mshshuvo.com/insights/ethical-pathways-in-ai-governancehttps://mshshuvo.com/insights/ethical-pathways-in-ai-governanceTue, 19 Dec 2023 12:00:00 +0000How NIST's AI Risk Management Framework, ISO/IEC 42001 and the EU AI Act fit together as a blueprint for trustworthy, accountable AI.AI Governance https://mshshuvo.com/insights/ai-opportunity-or-curse-for-the-labor-markethttps://mshshuvo.com/insights/ai-opportunity-or-curse-for-the-labor-marketMon, 16 Mar 2020 12:00:00 +0000What the WEF, Gartner and McKinsey forecasts actually say about AI and jobs, and the two ways professionals can prepare for roles that do not exist yet.Future of Work https://mshshuvo.com/insights/best-defense-is-common-sensehttps://mshshuvo.com/insights/best-defense-is-common-senseTue, 28 Nov 2017 12:00:00 +0000Cyber Kothon, part one (in Bengali). Three everyday habits, locking the door, testing a socket and guarding a signed cheque, mapped to locking your screen, not clicking unknown links and protecting your card.AwarenessBengali https://mshshuvo.com/insights/ransomware-facts-and-mitigation-tipshttps://mshshuvo.com/insights/ransomware-facts-and-mitigation-tipsMon, 03 Oct 2016 12:00:00 +0000What ransomware is, how it gets in, and eleven practical habits that keep individuals and organisations out of the ransom conversation.AwarenessSecurity Operations