Every control on the perimeter assumes the people inside it are trustworthy and trained. That assumption needs a program behind it: vetting, awareness, post orders, and a clear path for reporting concerns before they become incidents.
Insider risk sits at the intersection of security, behavior, and investigations — ground HR teams and screening vendors rarely cover. Virga's programs are built on real federal insider-threat and workplace-violence-prevention experience, including chairing the federal committee that writes the standard.
Coordination and standards for screening at hire and at role change, scaled to the sensitivity of the position — not one policy for every role.
Training people actually remember, built around real scenarios rather than an annual click-through.
What to watch for, how to report it, and how reports get handled — a program, not a suggestion box.
Written, current post orders that define exactly what a guard force is responsible for at each post — not a stack from the last vendor.
Threat assessment and intervention protocols built to federal Interagency Security Committee standards.
What comes back, what gets revoked, and how fast — the CUI/PS.L2-3.9.2 requirement most programs miss, covered under Policy, Compliance & Governance.
An assessment of your vetting, training, and reporting programs — measured against federal standards, sized to your organization.
