What does Fidelis Management Services do?

Fidelis Management Services (Fidelis) is an independent risk advisory firm. Fidelis helps leaders identify who and what puts their organization at risk, understand where they are exposed, and reduce that exposure over time — through process and control design, training, and recurring senior advice as new threats emerge.

What does counterintelligence have to do with my company?

Counterintelligence is the discipline of identifying and countering people who are trying to take something from you — information, technology, access, or advantage. In government, that means foreign intelligence services. In the private sector, the same methods show up as a competitor recruiting your researchers, an investor whose interest comes with strings, a partner whose access quietly widens, or an employee on the way out the door. Most security programs are built to defend systems. Fidelis is built to understand the people working around them.

Who does Fidelis typically work with?

Primarily organizations whose people, technology, or information are worth targeting — technology and IP-intensive companies, enterprises with trusted-access risk, and boards and executives facing a more volatile threat environment. Fidelis also advises private clients and family offices, including on significant private projects.

Is Fidelis principal-led?

Yes. You work directly with the founder, a senior national-security and counterintelligence professional, so you get senior judgment and a single accountable point of contact. When a matter calls for it, Fidelis brings in vetted specialists.

Does Fidelis conduct investigations or background checks?

No. Fidelis does not conduct licensed private investigations or background investigations. Its work is independent review, advisory, and documentation so you can make informed decisions and direct appropriately licensed providers where warranted.

Does Fidelis assess IT systems or cybersecurity?

No. Fidelis does not perform technical security work. It advises on the human dimension of technology protection — the people, partners, access, and travel through which sensitive technology is actually lost — and coordinates with your technical teams rather than replacing them.

Federal and Defense

Counterintelligence Support for Organizations With a High Threat Profile and No Counterintelligence Element of Their Own

Many federal departments, programs, and mission partners face foreign intelligence and insider threats but have no counterintelligence element of their own. They are not Title 50 organizations.

They will not run counterintelligence operations, and they should not try.

What they need is a baseline: a clear picture of what the threat actually looks like against them, the processes and policies to handle it, people trained to recognize it early, and a defined path to the authorized partners who act on it.

Fidelis provides threat-focused estimates, risk and vulnerability assessments, mitigation strategies, and evaluation and training support to those organizations, either directly or as a specialized partner to a prime contractor. Every engagement is scoped to the decision the organization faces and bounded by its authorities.

Request a Confidential Discussion

Core Capabilities

Baseline Counterintelligence Program Development

For departments, programs, and mission partners with no organic counterintelligence element. Fidelis helps stand up the foundation: threat awareness, reporting and referral workflows, protective practices, and the escalation paths that reach the authorized partners who can act.

Counterintelligence Policy and Process Development

Written procedure, ready to execute. Fidelis drafts the policies, standards, and operating procedures that turn threat awareness into something an organization can execute, review, and defend.

Counterintelligence Training for Individuals and Teams

Hands-on training designed and delivered personally by the founder and built around the organization's specific threat: awareness for the workforce, indicator recognition for supervisors, and decision training for leaders.

Insider Risk Program Design and Evaluation

Design of insider-risk and trusted-workforce programs, or independent evaluation of an existing program against a disciplined standard, with the reporting and referral workflows leaders need.

Critical Technology and Information Protection

Advisory on protecting critical technology, research, and sensitive information across partners, collaborations, and supply chains, including emerging-technology exposure and program protection.

Tabletop and Red Team Exercises

Facilitated tabletop exercises, and red team exercises authorized in writing with stop conditions, that test how a program identifies, escalates, and acts on threat information before a real event tests it.

What a Federal Client Receives

Understand the threat

The Threat Estimate: who would target the mission, what they want, and how they operate, drawn from publicly available sources and from the organization's internal information under handling terms agreed in writing.

Map the exposure

The Risk & Vulnerability Assessment: where people, programs, information, and partnerships are genuinely exposed, measured against the organization's own requirements.

Reduce it

The Risk & Vulnerability Mitigation Strategy: prioritized actions with owners, sequencing, resources, and measures, written to fit the organization's authorities.

Sustain it

The Evaluation & Training Plan: how protective measures and people will be tested, trained, and reassessed as the threat changes.

CISANDRA: A Standing Counterintelligence Capability

A department, program, or mission partner without an organic counterintelligence element often has one officer carrying the whole function. CISANDRA, the on-site counterintelligence tool suite Fidelis installs and supports, helps that small office support a large mission with a standing analytical capability: a curated reference foundation, the organization's private analytical memory, and Sandy, an analytical partner the officer works with by text or voice. Connected services are optional, follow the organization's approved providers and data-sharing rules, and can remain disabled where required. CISANDRA supports analysts and decision-makers; it does not conduct operations or replace an authorized counterintelligence element.

Meet CISANDRA

Teaming With Primes and Partners

Fidelis adds a specialized counterintelligence, insider-risk, and program-protection layer to broader delivery teams. It can support a defined work package as a subcontractor or specialist advisor, with clear scope boundaries, protection of client and partner information, and no competition with the partner's core capability.

How a Federal Engagement Begins

Most engagements begin with a bounded first step: an executive framing session with program leadership, a focused assessment of one program or concern, or a review of an existing counterintelligence or insider-risk program. Scope, access, information handling, and review terms are agreed in writing before work starts, within the contracting vehicle the organization uses.

Two other starting points apply when a program already exists: a Risk Awareness Architecture Assessment that traces real reports from first observation to decision, and an independent review of an existing counterintelligence, insider-risk, or program-protection effort. Once a strategy is agreed, Fidelis stays engaged while the organization puts it in place within its own authorities and staff.

Certification

Fidelis Management Services, LLC is certified by the U.S. Small Business Administration as a Service-Disabled Veteran-Owned Small Business (SDVOSB) and a Veteran-Owned Small Business (VOSB) under the Veteran Small Business Certification (VetCert) program, and is eligible for SDVOSB and VOSB set-aside contracts.

SBA Service-Disabled Veteran-Owned Certified

A capability statement with contracting identifiers is available on request.

What Fidelis Does Not Do

Fidelis is advisory. It does not conduct counterintelligence operations or investigations, it does not collect, and it does not replace an authorized counterintelligence element. Where a matter requires action, Fidelis helps you engage and coordinate with the authorized counterintelligence and law enforcement partners whose mission that is. Exercises are conducted only within scope and authorities the organization approves in writing.

Fidelis is also a principal-led practice by design. The work above is scoped to what a single accountable principal can deliver personally, with vetted specialists where a matter calls for them. Fidelis does not bid enterprise security programs, mission assurance, or staffing.

Leadership Experience

Fidelis is led by Spencer L. Morris, who spent 21 years in the United States Marine Corps in counterintelligence and human-intelligence assignments, followed by senior counterintelligence leadership responsibilities at the Naval Criminal Investigative Service. His experience spans counterintelligence, insider risk, technology protection, and security leadership, including standing up national security programs and writing counterintelligence policy at the department level. That experience is his own; it is not presented as Fidelis corporate past performance.

Discuss a Mission Requirement

If your organization carries a threat it has no organic capability to address, start a confidential discussion.