Insider risk advisory for organizations that take governance seriously.

Program Evaluation

Is your program structured to succeed?

An independent, structured evaluation of your insider risk program — assessing whether it meets the standards that matter.

Grounded in authoritative frameworks (NITTF, CISA IRMPE, NIST, CMU-SEI) and applicable federal guidance, the evaluation examines governance, personnel, and detection capabilities across the full program lifecycle.

Data is gathered through interviews, document review, and direct observation — providing an honest picture of program effectiveness and a prioritized path to reduce exposure.

Vulnerability & Effectiveness Assessment

Are your controls actually working?

Identifies the specific gaps insiders could exploit — grounded in analysis of more than 1,600 real-world insider threat cases.

The assessment evaluates critical services across seven functional domains — Operations, HR, IT, Legal, Physical Security, Systems Engineering, and Technical & Business Processes — producing a clear, domain-by-domain view of exposure mapped to a defined preparedness scale with prioritized recommendations.

Program Design & Implementation

A policy is not a program.

APC designs insider risk programs that work under real conditions — for organizations starting from scratch, or with fragmented elements that don't yet add up to a coherent program. Governance structures, core documentation, and a phased roadmap aligned to your operational and regulatory environment.

Board Governance Advisory

Your board is accountable for insider risk. Are they informed?

Translating insider risk into board-level language — governance, oversight structures, director readiness, and the questions boards should be asking but often aren't.

Virtual Insider Risk Advisor (VIRA)

Senior expertise. There when it matters.

Senior expertise on a retained basis — providing continuity, strategic oversight, and escalation support without the cost of a full-time hire.

Human Risk & Security Awareness

Generic training creates compliance. Practitioner training creates culture.

Bespoke awareness and training programs grounded in real investigative experience — not generic compliance modules.

Insider Incident Response Advisory

Don't design your investigation protocol during the investigation.

When an insider incident unfolds, APC provides immediate advisory support — guiding investigation approach, evidence handling, and stakeholder management under pressure.

Specialist partners are engaged as required.

Trade, Customs & Supply Chain Advisory

Supply chain risk has an inside story.

Trade and supply chain operations carry insider risk most programs overlook.

APC provides advisory and investigative guidance grounded in federal experience — addressing exposure tied to insider facilitation, trade fraud, and regulatory risk.