Agentic AI
,
Artificial Intelligence & Machine Learning
,
Black Hat

Schellman CEO Avani Desai on Building Governance Before Technology Enforcement

Anna Delaney (annamadeline) •
August 6, 2026    

Avani Desai, CEO, Schellman

Artificial intelligence is advancing faster than most compliance frameworks can change, creating new demands for governance, testing and assurance, said Avani Desai, CEO at Schellman. Organizations may need more than SOC 2 to prove AI trustworthiness across geographies, industries and high-risk use cases.

See Also: Why an AI Harness May Matter More Than the Latest Model

Desai pointed to ISO 42001 and AIUC-1 as complementary frameworks that address AI management and technical testing. She said companies also need an AI inventory, clear ownership and controls designed for both human and agent-led processes, as well as be prepared for AI assessments or certifications.

“This isn’t a checkbox exercise. There is actually a lot behind these assessments more than you know. We have to have a couple of controls in place,” Desai said.

In this video interview with ISMG at Black Hat USA 2026, Desai also discussed:

Why SOC 2 will remain a cornerstone of trust while AI-specific standards expand;
How strong governance can build customer trust and support AI innovation;
Aligning regulation with innovation, speed and safety.

Desai has extensive experience in information security, operations, P&L, oversight, and marketing across startup and growth organizations. She leads Schellman, a cybersecurity assessment firm that focuses on technology assessments. She has expertise on diverse emerging topics including security, privacy, information security, future technology trends and the advancement of young women in technology.