ITMG (Insider Threat Management Group)

What ITMG (Insider Threat Management Group) does

ITMG (Insider Threat Management Group) is a US-based, privately held boutique advisory firm founded in 2014 by Shawn M. Thompson, Esq., a former FBI Assistant General Counsel, NSA Insider Threat Program Manager, and Senior Special Agent. The firm provides insider-risk advisory services to Fortune 500 enterprises, including program assessments, capability assessments, guided exposure assessments, use case assessments, insider-threat pentesting, and program design/build engagements, delivered by senior practitioners with national security and enterprise security backgrounds. ITMG reports 100+ Fortune 500 clients across financial, healthcare, retail, technology, energy, and media publishing, and cites 300+ insider-risk engagements and 20,000+ consulting hours delivered cumulatively.

The technical core is RiskTKO®, a SaaS exposure-management platform that connects fragmented program inputs—assessments, risk registers, organizational profiles, cohort profiles, roadmaps, and remediation activity—into a living exposure system. Its components include an Exposure Engine, a Command Center for executive-ready visibility, proprietary FIX Score™ prioritization logic, auto-generated risk register entries with exposure mappings, and a low-friction onboarding model that does not require software deployment or enterprise integration. The firm also publishes the Insider Risk Capability Framework™ (IRCF™), a 10-component maturity model adopted by the National Insider Threat Special Interest Group (NITSIG), and the Insider Risk Body of Knowledge™ (BoK™), an open-access practitioner education resource also adopted by NITSIG.

ITMG monetizes through three streams: subscription SaaS access to RiskTKO®, custom-scoped professional advisory services typically billed via multi-year contracts, and the upcoming ITMG® Academy certification program launching Fall 2026. Distribution is exclusively direct enterprise sales led by senior practitioners, supplemented by thought-leadership content, conference keynotes (mWISE, Insider Threat Summit, GovExec), webinars with partners such as Babel Street and Wizer, and earned media in CISA, Forrester, CSO Online, and WIRED. Notable brand associations include the founder's prior role as Global Insider Risk Practice Lead at Google (Mandiant) from 2022-2026, and recognition as one of Teramind's 15 Insider Risk Visionaries.

Name

ITMG (Insider Threat Management Group)

Legal name

ITMG (Insider Threat Management Group)

Website

https://itmg.co

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

1–10 employees

Short description

ITMG (Insider Threat Management Group) is a US boutique advisory firm that delivers insider-risk program assessments and consulting to Fortune 500 enterprises, anchored by its RiskTKO® SaaS exposure-management platform and the IRCF™ and BoK™ practitioner frameworks.

Ownership category

akta.pro rank

Product category

Insider Risk Management Software

NAICS

Other Computer Related Services (541519)

akta.pro primary industry

Insider Threat Program Design & Risk Assessments (BPAKADAM)

akta.pro secondary industries

ITSM Governance, Compliance & Audit Readiness (BPAEAJAM), IT Risk Management (ITRM) (HDADAIAD)

Keywords

• Insider risk management
• Threat exposure management
• Insider threat advisory
• Security program assessment
• Risk management platform

Headquarters

HQ city

Washington

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. RiskTKO® SaaS Platform Subscription: Subscription-based SaaS platform providing insider risk exposure management capabilities. Delivered as a management layer that connects fragmented security inputs, assessments, and program data.
2. Professional Advisory Services: Practitioner-led consulting engagements including program assessments, capability assessments, program design/build, insider-threat pentesting, and executive coaching. Delivered by former FBI, NSA, and Google insider-risk experts.
3. ITMG Academy Training & Certification: Professional certification program launching Fall 2026 for insider risk program managers. Includes verifiable professional credentials and badges.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels8 records

Core offering

ITMG provides insider-risk advisory services and sells the RiskTKO® SaaS exposure management platform that connects fragmented security inputs—assessments, risk registers, organizational profiles, cohort profiles, and roadmaps—into prioritized, board-ready exposure intelligence. Offerings are practitioner-led and span structured assessment services (Program, Capability, Exposure, Use Case), enterprise consulting, and the RiskTKO® platform, with the ITMG® Academy certification program launching in Fall 2026.

Product overview

ITMG® offers a unified platform-plus-services ecosystem built around the RiskTKO® exposure management platform, complemented by proprietary frameworks (IRCF™ and Insider Risk BoK™), professional certification (ITMG® Academy), and practitioner-led consulting services. RiskTKO® serves as the core SaaS management layer, connecting fragmented inputs—assessments, organizational profiles, cohort risk, roadmaps, and remediation activity—into a living exposure system with the RiskTKO® Command Center for executive-ready decision support. The ecosystem includes structured assessment services (Program Assessment, Capability Assessment, Guided Exposure Assessment, Use Case Assessment) that feed directly into the RiskTKO® platform, and the public IRCF™ and BoK™ resources provide standardized capability models and practitioner education that underpin the entire methodology.

Differentiator

Problem solved

Functional benefit

Brands

• RiskTKO: Insider risk exposure management SaaS platform developed by ITMG to help organizations manage insider risk exposure through connecting assessments, organizational context, risk registers, and remediation workflows.
• IRCF (Insider Risk Capability Framework)
• Insider Risk Body of Knowledge (BoK)
• ITMG Academy

Products and services

• RiskTKO® Proprietary SaaS insider risk exposure management platform for enterprise security and risk leaders that links assessments, risk registers, organizational profiles, cohort profiles, roadmaps, and remediation activity into a living decision layer for prioritizing action and demonstrating measurable risk reduction.
• Insider Risk Program Assessment & Review

Quantifiable outcome

• Actionable exposure baseline in 10 business days with no software deployment or enterprise integration required
• +4 more outcomes

Named customers11 records

Segments5 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Partnerships

Six partnerships are on record, tiered minor and core.

• TeramindminorGTM or Marketing Partner · 1 March 2024Teramind recognized Shawn Thompson as one of 15 Insider Risk Visionaries, providing industry visibility and credibility through their media platform. Mutual relationship through industry content collaboration and podcast appearances.
• Google (Mandiant)coreStrategic or Co-development Partner · 1 January 2022Shawn Thompson served as Senior Manager and Global Insider Risk Practice Lead at Google (Mandiant) 2022-2026. Built and scaled Google's global insider risk service, developed repeatable offerings, and delivered keynote at mWISE Conference.
• Layer 8 TechnologiesminorGTM or Marketing PartnerCollaborative podcast appearance on FireWall Chats Episode 14 discussing importance of effective insider threat strategy and steps for building successful programs.
• Babel StreetminorGTM or Marketing PartnerOn-demand webinar collaboration on Intelligence & Insider Threats detailing how OSINT and threat intelligence telemetry empower security committees to identify active threat vectors.
• Wizer Security Awareness TrainingminorGTM or Marketing PartnerCollaborative webinar panel with Gabriel Friedlander discussing human factors, behavioral indicators, and structural awareness standards for reducing corporate vulnerabilities.
• Forscie / Insider Threat MatrixminorStrategic or Co-development PartnerIndustry collaboration with James Weston (Co-founder) defining next generation insider risk standards, thinking, and practices through joint thought leadership.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Microsoft Purview Insider Risk Management: Microsoft Purview's Insider Risk Management module is embedded across Microsoft 365 and Azure ecosystems, targeting the same Fortune 500 enterprises as ITMG. While not a direct boutique competitor, it competes for the same insider risk budget allocation at any Microsoft-heavy enterprise.
• Forcepoint: Forcepoint's Insider Threat product line includes user activity monitoring and risk analytics inside a broader data security and DLP portfolio. It overlaps with ITMG's enterprise buyer base and is a frequent participant on enterprise insider risk RFPs.
• Proofpoint (ObserveIT): Proofpoint's ObserveIT-derived insider threat management product sits inside a much broader email/data security portfolio. It competes with ITMG on the same insider risk program outcomes, but Proofpoint bundles detection and DLP rather than positioning as an exposure decision layer.

Direct peers

• Securonix: Securonix offers a SaaS insider threat / UEBA platform for enterprise security operations, addressing the same Fortune 500 buyers ITMG serves with overlapping insider risk use cases. It competes with RiskTKO's "decision layer" positioning by combining detection, analytics, and response inside one product suite.
• DTEX Systems: DTEX provides an insider threat intelligence SaaS platform focused on behavioral analytics and data loss prevention for enterprise insider risk programs. It targets the same Fortune 500 CISO/CSO buyers ITMG serves and competes for similar assessment-to-platform budgets.
• Code42 (Incydr): Code42's Incydr product focuses on insider risk, data exfiltration, and IP protection for enterprise. It targets very similar Fortune 500 use cases to ITMG (especially in tech and retail customer segments ITMG cites, e.g., safeguarding engineering IP).
• Teramind: Teramind is an insider risk and employee monitoring SaaS platform with explicit overlap on insider risk personas and use cases. ITMG already has an existing media/partnership relationship with Teramind (named Thompson as one of 15 Insider Risk Visionaries), making it a natural co-marketing and adjacent-vertical peer.
• Haystax (now part of Navix): Haystax historically provided insider threat and behavioral analytics for federal and regulated enterprise buyers, overlapping ITMG's federal/government segment and insider risk framework space. Comparable on the buy side and in the type of insider risk programs it services.

Others

• National Insider Threat Special Interest Group (NITSIG): NITSIG is a U.S. industry body for insider risk practitioners that has formally adopted ITMG's IRCF and Insider Risk BoK as public standards. It is not a commercial peer but is the most direct ecosystem counterpart shaping the buyer conversation around insider risk programs.
• Mandiant (Google Cloud): Mandiant is the Google Cloud incident response and threat intelligence unit, where founder Shawn Thompson served as Global Insider Risk Practice Lead from 2022-2026. It is comparable as a practitioner-led cyber advisory + product hybrid, and is both a feeder and a competitor for insider risk advisory engagements.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/risktko

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ITMG (Insider Threat Management Group)