What does Fidelis Management Services do?

Fidelis Management Services (Fidelis) is an independent risk advisory firm. Fidelis helps leaders identify who and what puts their organization at risk, understand where they are exposed, and reduce that exposure over time — through process and control design, training, and recurring senior advice as new threats emerge.

What does counterintelligence have to do with my company?

Counterintelligence is the discipline of identifying and countering people who are trying to take something from you — information, technology, access, or advantage. In government, that means foreign intelligence services. In the private sector, the same methods show up as a competitor recruiting your researchers, an investor whose interest comes with strings, a partner whose access quietly widens, or an employee on the way out the door. Most security programs are built to defend systems. Fidelis is built to understand the people working around them.

Who does Fidelis typically work with?

Primarily organizations whose people, technology, or information are worth targeting — technology and IP-intensive companies, enterprises with trusted-access risk, and boards and executives facing a more volatile threat environment. Fidelis also advises private clients and family offices, including on significant private projects.

Is Fidelis principal-led?

Yes. You work directly with the founder, a senior national-security and counterintelligence professional, so you get senior judgment and a single accountable point of contact. When a matter calls for it, Fidelis brings in vetted specialists.

Does Fidelis conduct investigations or background checks?

No. Fidelis does not conduct licensed private investigations or background investigations. Its work is independent review, advisory, and documentation so you can make informed decisions and direct appropriately licensed providers where warranted.

Does Fidelis assess IT systems or cybersecurity?

No. Fidelis does not perform technical security work. It advises on the human dimension of technology protection — the people, partners, access, and travel through which sensitive technology is actually lost — and coordinates with your technical teams rather than replacing them.

The Founder

Spencer L. Morris

Founder & Principal Advisor

Spencer has spent more than 25 years answering one question: who is the threat and how do we stop them.

He began his career providing security at American embassies and consulates abroad, responsible for the protection of classified information, secure facilities, and the people inside them. He spent the next two decades as a counterintelligence and human-intelligence officer in the United States Marine Corps, with operational deployments to crisis areas across the Middle East, Asia, and the South Pacific. The work was to find hostile intelligence activity, understand how it operated, and take away what it could reach.

That work was rarely only about information. In hostile environments he built and led the programs that protected the mission against terrorism, espionage, sabotage, and subversion, and he trained the teams who had to carry them out under pressure. Whether the danger is a foreign service after your technology or a person at your gate, the response rests on the same baseline: understand who is behind it, see where you are exposed, close the ground they need, and build the processes that move accurate information quickly to the people who need it most.

His career has spanned the Department of Defense and the U.S. Intelligence Community. He has trained and led counterintelligence teams, stood up a new national security program, written counterintelligence policy at the department level, and advised senior government leaders on foreign intelligence threats, insider risk, and the protection of sensitive technology. Most recently he served as a senior national security executive, setting counterintelligence and insider-threat priorities for a federal department. Between government roles he advised federal and intelligence community clients as a private sector consultant on counterintelligence strategy, enterprise risk, and technology policy.

He founded Fidelis because the same adversaries now work against companies, universities, and research institutions that have no counterintelligence program of their own, and most of them are defending their systems while the threat walks in through their people. Fidelis is a principal-led practice by design, without a rotating team of associates. When you engage the firm, you work with Spencer. That is the point.

The Fidelis Method

Every engagement follows the same disciplined sequence, adapted from counterintelligence practice to the risk at hand. In public terms, the Method:

Defines what must be protected and the decision to be made.
Identifies relevant threats, harmful insiders, actors, or adverse conditions.
Evaluates intent, capability, access, opportunity, and observable indicators.
Maps how the threat could reach the protected interest.
Distinguishes evidence, assumptions, judgment, alternatives, and uncertainty.
Determines where actual exposure exists.
Develops proportional mitigation tied to the supported pathway.
Establishes how effectiveness and personnel performance will be evaluated.
Returns new evidence to the appropriate decision for reconsideration.

Risk is rarely retired in a single stroke; it is bought down deliberately, over time. Internal methods and technical implementation are proprietary and are not described publicly.

Independent by Design

Fidelis operates as an independent, non-executing advisor. Fidelis does not perform the work it reviews, and it does not report through the parties whose performance, claims, or assumptions require verification.

That independence allows Fidelis to provide objective reporting focused on risk, documentation, decision readiness, and the client's interests.

Principles That Guide Fidelis

Independence

Fidelis does not perform the work it reviews.

Threat-informed

Fidelis starts with the adversary and works back to your exposure, never from a generic checklist.

Fact over assumption

Fidelis separates confirmed fact from optimism and incomplete reporting.

Documentation

Fidelis creates a clear record of what is known, unknown, disputed, or at risk.

Discretion

Fidelis handles sensitive matters with care and restraint.

Decision Utility

Fidelis reporting is designed to support action, escalation, funding, intervention, or restraint.

This is why Fidelis is faithful to facts, to documentation, and to accurate reporting, even when the accurate answer is the inconvenient one. Reducing risk means knowing who is working around you and closing the ground they rely on. That is what Fidelis means when it says The Threat Is Human.

What Fidelis Is Not

Fidelis is not a guard company, surveillance vendor, private investigator, law firm, IT security provider, or replacement for executive leadership. Fidelis provides independent review, verification, risk visibility, documentation, reporting, and advisory support so responsible decision-makers can act with better information.

Need independent clarity before a consequential decision?

Start a confidential conversation with Fidelis Management Services.

Discuss Your Risk Environment