Why translated risk frameworks fail in Central Asian banks
Frameworks imported from European parent institutions describe a business model, a regulatory environment and a risk profile that do not match the market they land in.
Coming soonRisk, compliance and AI governance
The risk you manage is not the risk you have.
Nazor.ai helps financial institutions and humanitarian organisations find the exposures their frameworks were never built to catch — in operations, in compliance, and in technology arriving faster than the controls around it.
Nazor.ai
Three places risk hides
Whether it is a bank adopting a new payment rail or an aid programme running cash transfers across a border, the same gaps recur.
Frameworks that don’t fit
Imported from a parent institution, a corporate standard or a donor template, the framework describes an organisation that isn’t yours. It passes review and catches nothing.
Dependencies nobody owns
Vendor models, payment processors, the partner an operation relies on to reach people. Adopted quickly, critical to delivery, and assessed once if at all.
Registers nobody uses
Assessments run because they are required. They record the risks already known, rarely change a decision, and offer no help on the day something goes wrong.
Who we work with
Two sectors, and genuine depth in both — twenty years in risk across commercial banking and international humanitarian assurance.
Financial institutions
Banks, payment operations and microfinance
Institutions that have modernised faster than their frameworks — new rails, new vendors, AI in the decision path — answering to supervisors whose expectations keep rising.
- Risk in change and transformation
- Operational risk frameworks built for the institution
- Operational resilience beyond business continuity
- AI and technology governance
NGOs and humanitarian organisations
INGOs, UN agencies and donor-funded programmes
Organisations delivering in difficult environments with less funding and the same obligations, where a compliance failure costs the grant and the operation behind it.
- Operational risk with humanitarian impact scored
- Donor compliance, from funding agreement to audit
- Partner and third-party risk
- Sanctions exposure and cash transfer controls
Where we work
Registered and operating in Uzbekistan. Expanding by following the work rather than announcing it first.
Uzbekistan
Registered and operating
Home market. The firm is registered in Tashkent and delivers engagements here directly, with no intermediary.
Kazakhstan and CIS
Active
Engagements across the region, with local registration once an engagement is signed rather than ahead of demand.
Middle East
Where the experience was built
Most of the twenty years were spent here, across banking and humanitarian operations. Engagements draw on that depth, with specialist experts brought in on a project basis where the work calls for it.
Who runs it
Every engagement is led personally by Mashal Sabti — not an account manager, and not a team of consultants two years out of university. Where the scope needs specialist depth, experts join on a project basis.
Twenty years in risk and compliance, across commercial banking and international humanitarian assurance. Seven of them at Standard Chartered across two periods, the second ending as Head of Governance and Control after leading consumer banking operations and technology risk. Then a risk function built from nothing at Egyptian Arab Land Bank, operational risk across branches and subsidiaries at Jordan Ahli Bank, and two years of independent consulting and training.
The humanitarian side began with regional internal audit at ACTED and continued at World Vision, leading risk and compliance across the Jordan, Syria and Türkiye response. Most recently, Risk and Assurance Manager at the ICRC — regionally across the Near and Middle East, then for Afghanistan from a base in Uzbekistan — in contexts where a control failure could cost access to the people the operation exists to reach.
An MBA in finance from New York Institute of Technology grounds the financial side of the work. A law degree, and a master’s in international commercial law and technology at the University of Manchester, are why the advice also covers where liability actually sits — in the contract, the vendor agreement and the regulation — and not only where the control gap is.
2024–26ICRCRisk & Assurance Manager — Near & Middle East, then Afghanistan
2023–24World Vision InternationalRisk & Compliance Manager — Jordan, Syria, Türkiye
2020–22Independent practiceRisk management consulting and training
2018–19Jordan Ahli BankAVP Operational Risk Management
2015–17Egyptian Arab Land BankExecutive Manager, Operational Risk & Information Security
2010–15Standard Chartered BankHead of Governance & Control; Head of Consumer Banking Operations
2008–10ACTEDRegional Internal Auditor — Middle East
2006–07Standard Chartered BankUnit Operational Risk Manager, Wholesale Banking
Education
2024–26LLM, International Commercial Law & TechnologyUniversity of Manchester
2020–23LLB, Bachelor of LawsMiddle East University
2003–06MBA, FinanceNew York Institute of Technology
1999–2003BA, EconomicsAl-Balqa Applied University
Certification
2020ISO 31000 Senior Lead Risk Manager
2019Training of TrainersFrankfurt School of Finance & Management
How an engagement runs
Most begin with a scoped assessment. It tells both of us whether the larger piece of work is worth doing.
A first conversation
An hour on what you are facing. If the answer is that you do not need outside help, that is a legitimate outcome and I will say so.
A written proposal
Scope, deliverables, team and timeline, agreed in writing before any work starts. No scope that expands after signature.
Fieldwork
On site with your teams. Document review, process walkthroughs, control testing and interviews — because the risk that matters rarely appears in the documentation.
Findings and a plan
What was found, ranked by exposure, with the trade-offs made explicit and remediation sequenced by what is urgent and what is achievable.
Support through implementation
Recommendations that sit in a report change nothing. Continued support is available where you want the work embedded rather than delivered.
Insights and publications
Writing on risk, regulation and emerging technology in Central Asian and frontier markets.
Who owns the model? AI governance gaps in emerging market banks
Scoring and fraud tools arrive through procurement, not through risk. By the time anyone in risk is asked about them, they are already making decisions.
Coming soonCash transfer controls in sanctioned and fragile environments
What donors expect, what field reality allows, and how to build a control set that survives both an audit and an operating environment that changes weekly.
Coming soonNews
Announcements, engagements and speaking.
Nazor.ai at the inaugural Silk Road Finance & Technology Forum
Mashal Sabti attended the inaugural Silk Road Finance & Technology Forum in Tashkent on behalf of Nazor.ai.
The forum was co-organised by the Central Bank of the Republic of Uzbekistan and the Global Finance & Technology Network, and co-hosted by Ant International. It brought together 8,500 delegates from 77 countries across policy, banking, investment and technology.
The programme covered cross-border payments, digital assets, AI, next-generation transactions and financial sector innovation — all directly relevant to the risks Nazor.ai works on.
Attending keeps the practice close to what is actually changing in the region: the emerging risks, the regulatory priorities, and where supervisory attention is moving next.
Read the official forum report →2026
Nazor.ai begins operations in Uzbekistan
The firm is registered in Tashkent and open for engagements with financial institutions and humanitarian organisations across Uzbekistan and the wider region.
Start with a conversation
Tell me what you are dealing with — a framework that is not working, a system nobody can explain, a disruption nobody has planned for, a supervisory finding, a donor audit coming. The first conversation carries no obligation.
Emailmashal.sabti@nazor.ai
Phone+998 77 741 15 78
Based inTashkent, Uzbekistan
Telegram@Mashal_Nazorai
LinkedInlinkedin.com/in/mashal-sabti