Practice — Security Consulting
Corporate security intelligence and investigations — one team, the whole surface.
Scroll the site to see both directions of the work: what is coming, and what already arrived.
01 — The surface
You own more ground than you have people.
Offices, travel, vendors, executives, everyone who already holds a badge, and whatever the last acquisition brought in with it. All of it becomes yours the moment something goes wrong — and there are three of you.
Most corporate security teams are small. Often it is a lead with two or three people, sometimes it is one person who is the company's first security hire — and the surface they are accountable for does not shrink to match. Offices and travel, executives, vendors and contractors, everyone who already holds access, and whatever came along with the last acquisition.
The work runs in two directions. Intelligence looks outward: the regions you operate in and what is moving there, the actors who have named your industry as a target and what they actually do, executive and travel exposure, the geopolitical picture behind a decision to open somewhere new. Most of what reaches an organization is knowable before it arrives, and the difference between knowing and not is usually attention rather than access.
Investigations look inward: an insider signal, an incident that is already underway, or a history you inherited when you bought a company and now own. Worked as a case — what happened, in what order, what it touched — and documented so it holds up when a board, a regulator, or opposing counsel asks how you know.
The threshold between them is workforce identity, and it is where most real entries happen. Not the perimeter, but the contractor account nobody closed, the role that kept its old access through a transfer, the vendor still holding a credential to a system nobody has looked at since integration.
Engagements are scoped to be run by the team that already exists rather than to require a bigger one: a standing intelligence picture, investigations when they are needed, and due diligence before a deal closes rather than a year after. One group that already knows your sites, your people and your history — instead of an intelligence vendor, an investigations firm, and the headcount to manage both.