Government
Counterintelligence and insider-risk support for federal and state organizations without a counterintelligence element of their own.
Federal programs and state agencies hold what others want: people with access, sensitive information, critical systems and public trust. Most have no one whose job is to see insider and foreign threats coming. Fidelis gives them that capability, scoped to their authorities and delivered personally by its founder.
Federal and Defense
Counterintelligence Support for Organizations With a High Threat Profile and No Counterintelligence Element of Their Own
Many federal departments, programs, and mission partners face foreign intelligence and insider threats but have no counterintelligence element of their own. They are not Title 50 organizations.
They will not run counterintelligence operations, and they should not try.
What they need is a baseline: a clear picture of what the threat actually looks like against them, the processes and policies to handle it, people trained to recognize it early, and a defined path to the authorized partners who act on it.
Fidelis provides threat-focused estimates, risk and vulnerability assessments, mitigation strategies, and evaluation and training support to those organizations, either directly or as a specialized partner to a prime contractor. Every engagement is scoped to the decision the organization faces and bounded by its authorities.
Core Capabilities
Baseline Counterintelligence Program Development
For departments, programs, and mission partners with no organic counterintelligence element. Fidelis helps stand up the foundation: threat awareness, reporting and referral workflows, protective practices, and the escalation paths that reach the authorized partners who can act.
Counterintelligence Policy and Process Development
Written procedure, ready to execute. Fidelis drafts the policies, standards, and operating procedures that turn threat awareness into something an organization can execute, review, and defend.
Counterintelligence Training for Individuals and Teams
Hands-on training designed and delivered personally by the founder and built around the organization's specific threat: awareness for the workforce, indicator recognition for supervisors, and decision training for leaders.
Insider Risk Program Design and Evaluation
Design of insider-risk and trusted-workforce programs, or independent evaluation of an existing program against a disciplined standard, with the reporting and referral workflows leaders need.
Critical Technology and Information Protection
Advisory on protecting critical technology, research, and sensitive information across partners, collaborations, and supply chains, including emerging-technology exposure and program protection.
Tabletop and Red Team Exercises
Facilitated tabletop exercises, and red team exercises authorized in writing with stop conditions, that test how a program identifies, escalates, and acts on threat information before a real event tests it.
What a Federal Client Receives
Understand the threat
The Threat Estimate: who would target the mission, what they want, and how they operate, drawn from publicly available sources and from the organization's internal information under handling terms agreed in writing.
Map the exposure
The Risk & Vulnerability Assessment: where people, programs, information, and partnerships are genuinely exposed, measured against the organization's own requirements.
Reduce it
The Risk & Vulnerability Mitigation Strategy: prioritized actions with owners, sequencing, resources, and measures, written to fit the organization's authorities.
Sustain it
The Evaluation & Training Plan: how protective measures and people will be tested, trained, and reassessed as the threat changes.
CISANDRA: A Standing Analytical Capability, in Development
A department, program, or mission partner without an organic counterintelligence element often has one officer carrying the whole function. CISANDRA, the on-site counterintelligence tool suite Fidelis is building, is designed to help that small office support a large mission with a standing analytical capability: a curated reference foundation, the organization's private analytical memory, and Sandy, an analytical partner the officer works with by text or voice. Connected services are optional, follow the organization's approved providers and data-sharing rules, and can remain disabled where required. CISANDRA supports analysts and decision-makers; it does not conduct operations or replace an authorized counterintelligence element.
CISANDRA is in development. Fidelis is speaking with organizations interested in an early pilot.
Teaming With Primes and Partners
Fidelis adds a specialized counterintelligence, insider-risk, and program-protection layer to broader delivery teams. It can support a defined work package as a subcontractor or specialist advisor, with clear scope boundaries, protection of client and partner information, and no competition with the partner's core capability.
How an Engagement Begins
Most engagements begin with a bounded first step: an executive framing session with program leadership, a focused assessment of one program or concern, or a review of an existing counterintelligence or insider-risk program. Scope, access, information handling, and review terms are agreed in writing before work starts, within the contract or purchasing method the organization uses.
Two other starting points apply when a program already exists: a Risk Awareness Architecture Assessment that traces real reports from first observation to decision, and an independent review of an existing counterintelligence, insider-risk, or program-protection effort. Once a strategy is agreed, Fidelis stays engaged while the organization puts it in place within its own authorities and staff.
State Government
State agencies run public safety, transportation, health and emergency management systems, hold residents' data, and fund research at state universities. Few employ anyone whose job is to recognize when an insider or an outside party is targeting those people and systems.
Fidelis helps state agencies:
- Assess threats and vulnerabilities at facilities, venues, programs and systems.
- Design or review insider risk programs, with clear reporting and referral steps.
- Train staff, supervisors and security teams to recognize risk early.
- Support threat assessment and management programs.
- Test readiness through tabletop exercises.
This includes public universities, which buy as state agencies through their state's procurement system.
Fidelis works as a prime contractor, or as a certified subcontractor to a prime on contracts with veteran participation goals. It responds to requests for quotes and invitations to bid through eMaryland Marketplace Advantage (eMMA), and first engagements are scoped to fit an agency's small-purchase thresholds: a single assessment, a training session or a tabletop exercise.
Contracting Information
Fidelis Management Services, LLC
SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and Veteran-Owned Small Business (VOSB) under VetCert
Maryland Small Business Reserve (SBR) and Veteran-Owned Small Business Enterprise (VSBE) certified
Montgomery County, Maryland: approved for the Local Small Business Reserve, Veteran Preference, and Minority, Female and Disabled-Owned Businesses programs
UEI RCF8EQAH7MY6 · CAGE 22L89 · SAM registered and active
NAICS 541611 (primary), 541618, 541690, 541990, 541614, 611430
Bethesda, Maryland · (301) 893-4527 · info@fidelismgt.com
What Fidelis Does Not Do
Fidelis is advisory. It does not conduct counterintelligence operations or investigations, it does not collect, and it does not replace an authorized counterintelligence element. Where a matter requires action, Fidelis helps you engage and coordinate with the authorized counterintelligence and law enforcement partners whose mission that is. Exercises are conducted only within scope and authorities the organization approves in writing.
Fidelis is also a principal-led practice by design. The work above is scoped to what a single accountable principal can deliver personally, with vetted specialists where a matter calls for them. Fidelis does not bid enterprise security programs, mission assurance, or staffing.
Leadership Experience
Spencer L. Morris spent 25 years in Department of Defense counterintelligence and human-intelligence assignments, in the United States Marine Corps and at the Naval Criminal Investigative Service, where he established and led the Navy's first counterintelligence operations center and served as Assistant Director for National Security Operations, a senior-executive GS-15 in role and authority. His experience spans counterintelligence, insider risk, technology protection, and security leadership, including standing up national security programs and writing counterintelligence policy at the department level. That experience is his own; it is not presented as Fidelis corporate past performance.
Discuss a Mission Requirement
If your organization carries a threat it has no organic capability to address, start a confidential discussion.