Critical Pathway to Insider Threat (CPIR) Individual Risk Assessment Service  

Our CPIR individual risk assessment service helps organisations identify, prioritise and manage people-centred vulnerabilities before they escalate into harmful insider incidents.

Built on the CPIR framework developed by Dr Eric Shaw and operationalised through the CPIRIndex (Dr Mark F. Lenzenweger), the assessment provides a structured, evidence based evaluation of an individual’s risk factors, observable behaviours and contextual stressors.

Unlike one dimensional profiling, the CPIR approach focuses on behaviours and accumulative stressors that typically precede insider acts, and it is explicitly designed to guide fair, proportionate and privacy respecting interventions rather than to diagnose medical conditions.

The assessment begins with a targeted information collection phase that draws on HR records, performance history, communications and incident data, and interviews with relevant supervisors or colleagues.

Analysts use this material to populate the CPIRIndex, scoring the individual across core domains such as personal predispositions, recent stressors, concerning behaviours, and available mitigators like social supports or engagement with employee assistance programs.

The CPIRIndex is a validated, time efficient instrument that allows practitioners to generate a risk score, compare that profile to known case data, and track changes over time, a capability that improves both prioritisation and the clarity of reporting to decisionmakers.

We interpret CPIRIndex results within an investigative and ethical framework, including scoring that emphasises observable behaviours and documented facts rather than clinical diagnosis, and mitigators are captured as distinct scores so decisionmakers can see both risk drivers and protective factors.

CPIR assessment outputs include a concise, board ready brief that explains the level of concern, compares the subject to normative and ‘known bad’ profiles where appropriate, and recommends practical intervention options.

For lower CPIR-Index scores this might mean continued supervisor watchfulness or routine monitoring. For moderate elevations an enhanced monitoring regime and manager engagement, and for high scores a coordinated investigation and targeted interventions designed to interrupt the pathway to harm.

All CPIR assessments are conducted under clear governance with legal and HR oversight to protect privacy and natural justice principles. Where investigative activity is required, we follow documented procedures for evidence collection, recordkeeping and interdisciplinary case review so decisions are defensible and proportionate.

Our service can be delivered as a one off assessment for a particular individual, as part of a wider insider threat vulnerability review, or as an ongoing programme where CPIR scoring is used to monitor flagged cases and assess the effectiveness of interventions over time.

Engagement options include a rapid CPIR screening that provides a quick, evidence-based risk score and initial recommendations, or a comprehensive CPIR assessment that includes deeper document review, stakeholder interviews and a detailed mitigation plan. We also provide training for HR, security and line managers in recognising concerning behaviours and using CPIR concepts in routine supervision and referral.

Book a confidential consultation to discuss how a CPIR individual risk assessment could strengthen your personnel security posture and ensure your organisation can respond early, proportionately and ethically to people-centred risks.