What does Fidelis Management Services do?

Fidelis Management Services (Fidelis) is an independent risk advisory firm. Fidelis helps leaders identify who and what puts their organization at risk, understand where they are exposed, and reduce that exposure over time — through process and control design, training, and recurring senior advice as new threats emerge.

What does counterintelligence have to do with my company?

Counterintelligence is the discipline of identifying and countering people who are trying to take something from you — information, technology, access, or advantage. In government, that means foreign intelligence services. In the private sector, the same methods show up as a competitor recruiting your researchers, an investor whose interest comes with strings, a partner whose access quietly widens, or an employee on the way out the door. Most security programs are built to defend systems. Fidelis is built to understand the people working around them.

Who does Fidelis typically work with?

Primarily organizations whose people, technology, or information are worth targeting — technology and IP-intensive companies, enterprises with trusted-access risk, and boards and executives facing a more volatile threat environment. Fidelis also advises private clients and family offices, including on significant private projects.

Is Fidelis principal-led?

Yes. You work directly with the founder, a senior national-security and counterintelligence professional, so you get senior judgment and a single accountable point of contact. When a matter calls for it, Fidelis brings in vetted specialists.

Does Fidelis conduct investigations or background checks?

No. Fidelis does not conduct licensed private investigations or background investigations. Its work is independent review, advisory, and documentation so you can make informed decisions and direct appropriately licensed providers where warranted.

Does Fidelis assess IT systems or cybersecurity?

No. Fidelis does not perform technical security work. It advises on the human dimension of technology protection — the people, partners, access, and travel through which sensitive technology is actually lost — and coordinates with your technical teams rather than replacing them.

The Founder

Spencer L. Morris

Founder & Principal Advisor

Spencer has spent more than twenty-five years answering one question: who is the threat and how do we stop them.

He began as his career providing security at American embassies and consulates abroad, responsible for the protection of classified information, secure facilities, and the people inside them. He spent the next two decades as a counterintelligence and human-intelligence officer in the United States Marine Corps, with operational deployments to crisis areas across the Middle East, Asia, and the South Pacific. The work was to find hostile intelligence activity, understand how it operated, and take away what it could reach.

That work was rarely only about information. In hostile environments he built and led the programs that protected the mission against terrorism, espionage, sabotage, and subversion, and he trained the teams who had to carry them out under pressure. Whether the danger is a foreign service after your technology or a person at your gate, the response rests on the same baseline: understand who is behind it, see where you are exposed, close the ground they need, and build the processes that allow accurate information flow quickly to the people who need it most.

His career has spanned the Department of Defense and the U.S. Intelligence Community. He has trained and led counterintelligence teams, stood up a first-of-its-kind national security program, written counterintelligence policy at the department level, and advised senior government leaders on foreign intelligence threats, insider risk, and the protection of sensitive technology. Most recently he served as a senior national security executive, setting counterintelligence and insider-threat priorities for a federal department. Between government roles he advised federal and intelligence community clients as a private sector consultant on counterintelligence strategy, enterprise risk, and technology policy.

He founded Fidelis because the same adversaries now work against private companies, and most of those companies are defending their systems while the threat walks in through their people. Fidelis is a principal-led practice by design, not a rotating team of associates. When you engage the firm, you work with Spencer. That is the point.

The Experience Behind Fidelis

Fidelis was built on a career spent doing what the firm now does for clients: finding the people who intend harm, and taking away what they can reach. That work ran the full arc of national security risk. Directing counterintelligence and human intelligence operations for a deployed special operations task force. Standing up a first-of-its-kind counterintelligence program. Writing counterintelligence policy at the department level. Building the force protection programs that kept people and facilities intact where the threat was neither theoretical nor patient.

For a client, that background is not a résumé. It is the method. The same disciplines that protected people, facilities, critical technology, and sensitive operations at the national level now shape how Fidelis evaluates insider and trusted-access risk, finds where a company's technology and researchers are exposed, tests an organization's security posture, and pressure-tests a decision before it is made. The instinct is the same in every setting: separate confirmed fact from optimism, document it, and escalate it while there is still time to act.

For clients, the value is simpler: independent judgment, formed where the cost of being wrong was highest.

Built for High-Consequence Decisions

Fidelis Management Services is an independent risk advisory firm. It helps leaders understand who threatens their organization, see where their people, facilities, information, and technology are exposed, and reduce that exposure over time. The firm was created for clients who cannot rely on optimism, incomplete reporting, or information filtered through parties with a stake in the outcome.

The Threat Is Human

Understanding your environment and the adversary is not administrative. It is how risk gets reduced. In technology-driven organizations, it helps protect sensitive information, intellectual property, and trusted workforces. In enterprise environments, it helps security, legal, resilience, and operations leaders identify exposure before it becomes disruption. Where private capital is committed to a major project, it helps principals and fiduciaries understand what is actually happening before more is committed. Across every engagement, the purpose is the same: give leaders a documented basis for action.

The Fidelis Method

Every engagement follows the same disciplined sequence, adapted from counterintelligence practice to the risk at hand. Risk is rarely retired in a single stroke; it is bought down deliberately, over time.

Understand the threat

Who would target you, what they want, and how they actually operate, drawn from a career spent studying exactly that rather than from a generic checklist.

Map the exposure

Where people, information, and technology are genuinely vulnerable, with findings traced to their sources and separated cleanly from assumption.

Reduce it

Design the processes, controls, and escalation routines that close the gaps, because seeing risk is not the same as reducing it.

Sustain it

Train the people who carry the risk, and stay close as the threat picture changes. New threats appear; old assumptions expire.

Independent by Design

Fidelis operates as an independent, non-executing advisor. Fidelis does not perform the work it reviews, and it does not report through the parties whose performance, claims, or assumptions require verification.

That independence allows Fidelis to provide objective reporting focused on risk, documentation, decision readiness, and the client's interests.

Principles That Guide Fidelis

Independence

Fidelis does not perform the work it reviews.

Threat-informed

Fidelis starts with the adversary and works back to your exposure, never from a generic checklist.

Fact over assumption

Fidelis separates confirmed fact from optimism and incomplete reporting.

Documentation

Fidelis creates a clear record of what is known, unknown, disputed, or at risk.

Discretion

Fidelis handles sensitive matters with care and restraint.

Decision Utility

Fidelis reporting is designed to support action, escalation, funding, intervention, or restraint.

Built for Clients With Consequential Exposure

Fidelis serves:

Sensitive-technology and IP-intensive organizations.
Enterprise security, resilience, legal, HR, and operations leaders.
Executives, boards, and family offices facing targeted-threat risk.
Federal agencies, defense organizations, and mission partners.
Private clients and fiduciaries responsible for significant projects.
Teams preparing for crisis, change, or a high-risk decision.

What Fidelis Is Not

Fidelis is not a construction manager, guard company, surveillance vendor, law firm, engineering firm, or replacement for executive leadership. Fidelis provides independent review, verification, risk visibility, documentation, reporting, and advisory support so responsible decision-makers can act with better information.

Need independent clarity before a consequential decision?

Start a confidential conversation with Fidelis Management Services. Use the Contact page to begin.

Our Driving Philosophy

Every organization eventually acts on incomplete information. The question is not whether uncertainty exists, but whether leaders can see clearly enough to act well despite it. Fidelis Management Services exists because, in the environments where its founder operated, the difference between success and failure was rarely a matter of courage or effort. It was whether decision-makers had an accurate, verified picture of reality.

Fidelis holds a few convictions:

Optimism is not a plan

Assurances, projections, and good intentions are not the same as verified fact. Risk hides in the gap between what is assumed and what is true.

Problems are cheapest to fix early

The cost of a missed risk compounds with time. Disciplined, early verification is the least expensive insurance a leader can buy.

Objectivity requires independence

Information filtered through the parties performing the work carries their incentives. Real value comes from a source with no stake in the answer.

Documentation is protection

A clear, contemporaneous record of what was known, and when, protects people, capital, and reputations long after a decision is made.

This is why Fidelis is faithful to facts, to documentation, and to accurate reporting, even when the accurate answer is the inconvenient one. Reducing risk is not about eliminating uncertainty. It is about knowing who is working around you, and closing the ground they rely on. That is what Fidelis means when it says The Threat Is Human.