Finding the gaps
compliance reviews miss.

Forensic investigation methodology applied to agentic AI — identifying the behavioural control gaps that standard compliance frameworks were not built to detect.

Start a conversation
01 Approach

Fifteen years in fraud investigation. One discipline above all: find the gap, not the actor. Agentic AI is the same problem at a different layer.

15 yrs forensic investigation · 4 proprietary frameworks · FINMA · EU AI Act · ISO 42001 · NIST AI RMF · Full background →
02 Proprietary Frameworks Publishing soon
01 Behavioral Governance Framework
02 AI Agent Governance Stack
03 AI Control Failure Taxonomy
04 AI Agent Fraud
03 Services

Forensic AI control reviews, behavioral governance design, agentic risk assessments, regulatory alignment, and executive advisory — for regulated organisations in Switzerland and Europe. The difference is methodology: investigation discipline, not framework-matching.

View all services →
01 AI Control Architecture Review
02 Behavioral Governance Design
03 AI Agent Risk Assessment
04 Regulatory Alignment
05 Executive & Board Advisory
06 Thought Leadership & Training
04 Latest Writing
Aljona Schwan — Founder, AI Resilience Lab

Author

Aljona Schwan

Founder · AI Resilience Lab · Zürich

Writing on agentic AI governance, model risk, and the structural control failures that emerge when autonomous systems operate without adequate behavioral oversight. Grounded in primary sources, regulatory frameworks, and fifteen years of investigative practice.

LinkedIn All Writing The Execution Layer →
Apr 2026 Agentic AI Risk
Agent Intervention Taxonomy.
A governance framework for organisations deploying autonomous AI agents in production — structured across five intervention pillars with implementation prioritisation for Risk, Control, and Board-level oversight.
Read →
Apr 2026 Forensic Lens
The monitoring gap NIST cannot close.
NIST AI 800-4 documents deceptive AI behavior as an unsolved security monitoring problem. Pre-deployment evaluations exist — but face a structural ceiling. What that means for agentic deployments in regulated industries.
Read →
Ongoing All Writing
More on AI control failure, behavioral governance, and agentic AI risk.
Long-form analysis on the governance gaps that compliance reviews miss and that adversarial actors exploit first.
All writing →
05 Newsletter - coming soon
06 Contact

I work with regulated organisations that are deploying agentic AI and need a governance posture that matches the actual risk — not just the compliance checklist. If that describes your situation, I would like to hear from you.

Location
Zurich, Switzerland
Focus markets
Banking · Insurance · Corporate Technology · Advisory
Email
aljona@airesiliencelab.com
LinkedIn
Aljona Schwan