ITMG® helps insider-risk leaders move from reactive detection to proactive exposure management.
Founded in 2014 by insider-risk practitioners, ITMG® helps organizations make sense of alerts, assessments, risk registers, profiles, roadmaps, and program activity — so leaders can understand exposure, prioritize action, and prove progress.
RiskTKO® is the platform ITMG® built to make that work repeatable, measurable, and executive-ready.
Built on 25 years of insider risk leadership
RiskTKO® was created from decades of ITMG® work across national security, Fortune 500 advisory, enterprise investigations, insider-threat program design, and executive risk governance. The platform reflects a simple belief: insider risk is not just a detection problem. It is a management problem.
Selected ITMG® enterprise consulting clients
Most insider-risk programs do not fail because they lack tools. They struggle because they lack a decision layer.
Organizations spend millions on endpoint monitors, DLP tools, UEBA, and database logging. Yet, when an issue arises, executives are flooded with fragmented logs and ad hoc spreadsheets. ITMG was founded to bridge the gap between technical signals and corporate governance.
Four Core Capabilities Working in Unison
We have defined the frameworks, gathered the open-source knowledge, designed the enterprise services, and built the software required to manage insider exposure.
Specialized Services
Direct practitioner-led advisory to design, build, and audit global corporate insider risk programs.
RiskTKO® Platform
The SaaS management layer that automates, monitors, and reports program capability and exposure in real-time.
Capability Framework
The standardized industry maturity model evaluating readiness across 8 security domains and 26 areas.
Body of Knowledge
A comprehensive, open-source practitioner repository of collective threat intelligence and workflows.
Shawn M. Thompson, Esq.
Founder & CEO
Led by a former FBI, NSA, and Google Insider Risk Executive.
As an attorney, former FBI Assistant General Counsel, NSA Insider Threat Program Manager, and Senior Manager of Google's Global Insider Risk service, Shawn Thompson synthesized decades of multidisciplinary experience to establish ITMG® and architect the RiskTKO® platform.
Transforming raw telemetry into board-level risk reduction.
Over 300 successful engagements, 150 capability assessments, and 20,000 consulting hours. Review outcome-based testimonials and impactful corporate case studies.
Ready to establish a living exposure management program?
Partner with the industry-leading practitioners who built the frameworks and platforms driving modern insider risk management.