Vsevolod Shabad
Vsevolod Shabad FBCS is a principal enterprise architect and former CISO across critical-infrastructure sectors. He is researching behavioural cyber-governance at the University of Liverpool.
CommentIs your performance dashboard revealing what you need to know?
Digital decision-support tools are widespread in the NHS, but their impact remains limited. Digitisation has focused on generating insights without creating the organisational architecture needed to act on them
CommentThe AI risks that NHS boards are missing
The risk for boards is not that AI will fail loudly, but that it will work efficiently while quietly missing harm. Governance that cannot see false negatives is not governance at all
CommentCapacity, not complacency, is the biggest risk to NHS cyber security
One of the most dangerous assumptions in NHS cyber governance is the belief that once compliance has been demonstrated, maintaining that formally assured position is enough. In today’s operating conditions, this is neither prudent nor responsible
CommentWhy the NHS chooses to downplay cyber attacks
Improving NHS cyber resilience requires governance systems that acknowledge how people actually communicate and decide under pressure, writes Vsevolod Shabad
CommentChristmas means cyber attacks
The NHS’s annual December stress test reveals a fundamental flaw in cyber governance: when competing pressures from security teams, IT departments, clinical services and boards collide, critical vulnerabilities are identified but cannot be addressed, creating a predictable pattern of unresolved risk
CommentThe cyber security risk you are (probably) overlooking
The new assessment framework strengthens NHS cyber security, but increased recognition of the impact of staff behaviour is vital if the service is to be properly protected
CommentBoards must take their responsibility for cyber security more seriously
Cyberattacks keep crippling NHS services not due to missing technology, but predictable board-level governance failures that leave known vulnerabilities unaddressed