AI Governance & Assurance
Core services
The operating answer to four questions every organisation that has deployed AI eventually has to answer in writing: what AI we run, how risky it is, who owns it, and how we prove it.
Anticipate. Understand. Act.
Govern what you deploy. Prove what you run.
AZMA advises organisations on how they govern and deploy artificial intelligence, and on the cyber and geopolitical risk that decides how safely they can operate.
Small and senior, working at the intersection of two problems most firms handle separately: how you govern the AI you deploy, and how you prove cyber resilience under obligation.
Independent principal-led advisory. Based in Switzerland, working across Europe and the Middle East.
Where we are focused now
AI governance and cyber risk are the questions boards are actually asking.
- AI Governance & Assurance
Inventory, risk classification and an operating model that makes the AI you deploy accountable, documented and defensible.
- Cyber GRC & Digital Resilience
Which obligations actually apply to you, converted into owned controls, decision-grade reporting and evidence that survives scrutiny.
- Geopolitical & Cyberwarfare Risk
The wider picture: what political and strategic-cyber change means for your exposure, presence and contingency planning.
AZMA leads with two lines of work today, supported by the geopolitical and cyberwarfare analysis that explains the environment those decisions are taken in.
The consultancy
Independent by construction
In all our activities, the following values are at the forefront: solution-oriented approaches, reliability, empathy, a socially and ethically guided way of working, and trustworthy, long-term customer relationships.
Where we lead
AI governance and strategy, and cyber governance, risk and compliance.
What we read
Geopolitical risk and cyberwarfare analysis, with a long-standing focus on the MENA region.
What holds
Crisis management and business continuity — the discipline AZMA was built on.
How we work
Senior-led, confidential, and free of platform reselling or referral arrangements.
Five lines of work
One consultancy, five connected disciplines
Every line can be engaged on its own. They are strongest together, because governance, threat and response draw on the same view of your organisation.
Cyber GRC & Digital Resilience
Core services
Cyber governance, risk and compliance made governable, evidenced and reportable — so the answer to "are we secure?" is a record, not an opinion.
Geopolitical Risk Analysis
Analytical
Country, sanctions and market-entry risk turned into a decision-ready reading of the countries, corridors and counterparties that matter to your business.
Cyberwarfare Analysis
Analytical
State-linked threats, influence operations and sector outlooks — assessed, translated for a board, and free of drama.
Crisis Management & Business Continuity
Established
The discipline AZMA was founded on: crisis leadership, continuity and recovery — prepared in advance, exercised under pressure, and reviewed afterwards.
How we work
Anticipate. Understand. Act.
The three words on our door are also the method, and they run in that order.
-
Anticipate
Establish what can affect you, how likely it is to matter, and what would tell you it is coming.
-
Understand
Test the assumptions and the dependencies underneath — your own, and those of the parties you rely on.
-
Act
Turn the analysis into owned decisions, exercised plans and evidence you can produce on demand.
Insights
Analysis, briefings and working notes
Where we publish our thinking — including material carried over from the community and exchange programme.
-
analysis
The EU AI Act Timeline: Two Deadlines Most Organisations Conflate
The AI Act's 2026 and 2027 dates are not the same obligation. The verified timeline, row by row, and why the distinction changes what you have to do and when.
Bring us a decision you have to make
A confidential conversation, no pitch deck, and a straight answer on whether the question sits inside our area of competence.