Tel: 587 582 7958
The Gap Between Policy and Practice
Organizations rarely fail because of a lack of policy. They fail when everyday practices quietly drift away from it.
When information is accessed out of habit, documented inconsistently, or assessed without defensible reasoning, the gap widens. These patterns often go unnoticed until a privacy complaint, investigation, or breach exposes them.
Aegis identifies where those gaps are forming, why they matter, and how to reinforce systems before they become organizational risk.
This is where most organizational risk actually forms — and where Aegis focuses its work.
Organizational Risk &
Leadership Readiness Diagnostic
Our Primary Diagnostic Offering
An independent, evidence-based assessment designed to surface leadership, governance, and human-factor risks quietly accumulating inside high-trust organizations—often long before they surface as breaches, investigations, or public scrutiny.
Most organizations do not fail because policies are absent or technology is inadequate. Risk develops when everyday decisions—how authority is exercised, how information is accessed, how concerns are assessed, and how oversight is applied, gradually drift from formal intent into normalized practice.
These shifts are rarely visible in dashboards, policies, or compliance reports. They are behavioural, cultural, and structural—often remaining unseen until a triggering event exposes them. The diagnostic is designed to identify those early warning signals while intervention is still possible.
The Organizational Risk & Leadership Readiness Diagnostic is modular by design.
Depending on an organization’s risk profile, specific diagnostic lenses are applied to examine where leadership, governance, and human behaviour interact to create exposure.
In environments where information handling, investigative integrity, or internal oversight present elevated risk, this includes a focused Human-Factor Risk & Integrity diagnostic module—used to surface how everyday judgement, cultural norms, and oversight practices quietly shape compliance and trust in practice, not just on paper.
How the Assessment is Applied
Each engagement is tailored to organizational size and risk profile, but typically includes:
​
-
Targeted review of privacy, access, and investigative governance frameworks
-
Confidential interviews with key roles involved in information access, oversight, and decision-making
-
Assessment of behavioral and judgement patterns affecting privacy compliance
-
Evaluation of documentation quality, escalation thresholds, and supervisory controls
-
Identification of systemic gaps between policy intent and operational reality
How Risk Manifests Across Three Core Domains
These risks rarely appear in isolation. They interact, reinforce one another, and often remain invisible until a triggering event exposes them.
Human-Factor Behavioral Risk
How judgement, culture, and cognitive load quietly distort decision-making under pressure—normalizing risk long before it is recognized as a problem.
Information Misuse & Privacy Handling
How routine access, justification, and documentation decisions gradually create information exposure—often without intent, visibility, or clear accountability.
Investigative & Oversight Integrity
How concerns are filtered, delayed, diluted, or prematurely closed—shaping whether risk is surfaced early or embedded deeper into the organization.
Each domain represents a distinct failure mechanism; risk escalates when these mechanisms interact unchecked.
Why Organizations Trust Aegis
Trusted by public-sector and high-trust institutions through research, advisory, and investigative work.
Designed for High-Trust Organizations
We work with public-sector and high-trust organizations, including:
​
-
Public-sector agencies and Crown corporations
-
Universities, colleges, and research institutions
-
Health and social-services agencies
-
Police, public safety, and justice organizations
-
Utilities, transit, and critical infrastructure providers
“Andrew brings a rare mix of strategic thinking, integrity, and real-world leadership. In our time working together, he consistently found solutions others missed and led initiatives that made a measurable difference."
Sean Sportum, Vice-President, Canada
