Ruari Nicholson Former CSIS Director General (Atlantic Region) · Partner at Garuna Group

When evaluating conflict strategy, prioritize the question of enduring political objective, not the immediate tactical wins available on the battlefield. Strategy that optimises for the tactical window collapses when the political end-state shifts, which is the failure mode behind most modern protracted conflicts.

Kevin Newman Award-Winning Broadcast Journalist · Investigative Reporter · Disinformation & Crisis Communication

Verification must move upstream into the workflow before decisions are made, not operate as a downstream reactive fact-check, after claims have already spread and influenced the operating picture. The cost of correction exceeds the cost of pre-decision verification by an order of magnitude in every case we've reviewed.

Dan Hutt Advisor, Security Division, Garuna Group (Det. Staff Insp., Ret.)

Public safety incidents follow a four-phase model, Background/Assessment → Engagement → Enforcement → After-Action, with distinct posture and authority for each phase. Confusing the phase boundaries (running enforcement reflexes inside engagement) is the structural failure that ends most major incidents badly.

When more than half of recorded crime carries a cyber element, it is no longer cybercrime, it is core crime, and a specialist unit staffed with half a percent of the service will be overwhelmed on contact. The structural answer is capability at the edge: every frontline officer and every civilian member carrying some level of cyber capability.

Todd Moore Subject Matter Expert, Asset Protection & Robbery Response, Garuna Group

When a GPS tracker shows no alerts but more than four hours have passed, immediately ping the device on-demand, to retrieve real-time location before any other action. The breadcrumb history is what gives police reasonable and probable grounds for the search warrant, and that window closes fast.

Arjun B. Partner at Garuna Group, Cross-Cultural Workplace Investigations

CQ mastery is a layered competency, context first (Indigenous foundations), then definition (peer-reviewed scholarship), then operationalization (workplace), reversing the order produces the most common organisational failure mode: trained staff who can quote the definition but cannot navigate the relationship, because they were taught the concept before they had the context to hold it.

Treena Reilkoff Advisor, Trauma-Informed Conflict Management & Resilient Risk Mitigation, Garuna Group

Adaptive leadership uses a three-step sequence: recognize the bias, admit it, call it out, only then can adaptability follow. A leader who skips the naming step ends up performing adaptability without rewiring decision-making, the most common failure mode in executive development.

Jeff Thompson Subject Matter Expert Instructor, Insider Risk Management, Garuna Group

Breach scope and impact assessment is the input that calibrates the proportionality of organisational response, not a downstream documentation step. Quantify extent early or you over-spend on low-impact incidents and under-resource the ones that actually carry insider-fraud or regulatory exposure.

André Frenette Subject Matter Expert, Diplomacy, Public Affairs & Crisis Leadership, Garuna Group

In a hardship posting the operative question is not "is this environment dangerous?", many are. It is whether the country is approaching a tipping point, where conditions can change faster than protective action can be taken. Consequence-severity alone can justify almost any restriction anywhere; trajectory is the variable that separates prudence from reflex.

AJ Garuna Founder, Garuna Group, Corporate & Legal Investigator · Certified Fraud Examiner

A common name is an investigative risk before it is anything else, so every subject runs as deliberate parallel passes, base name, name variants with proximity operators, middle names, corporate affiliations, and geographic anchors, replicated across every database. Confirmation must come from independent search dimensions, never a single lucky hit.

Paul Carson Subject Matter Expert, Private Security & Regulatory Compliance (PSISA), Garuna Group

Licensing and enforcement must sit in separate entities, not for organisational tidiness, but because conflating issuer and regulator builds in the incentive to conceal defects. When the authority with exclusive visibility of a credential failure also owns that credential, quiet partial recalls replace industry disclosure.

Chrystian Viens Subject Matter Expert, National Security & Intelligence Operations, Garuna Group

A threat brief is ready for a decision-maker when it answers three things, the current situation, the resources and intelligence already held, and the consultation chain that preceded escalation. What the reviewer is listening for is completeness of the information ecosystem, not just the facts.

Eric Hovius Subject Matter Expert, Indigenous Rights, Consultation & Aboriginal Law, Garuna Group

The duty to consult cannot be reduced to a checklist, it is different every time, and that is exactly why proponents get it wrong: they treat it as procedural notification when the obligation demands meaningful, good-faith engagement. Searching for a standard recipe is itself the misreading.

Ruari Nicholson Former CSIS Director General (Atlantic Region) · Partner at Garuna Group

Underlying motivations, recognition, grievance, legacy, hold stronger under operational pressure than financial incentives. Reframing engagement from a transactional focus on money to one about access shifts the asset's self-perception from informant to partner, and that single reframing survives the long-cycle handler turnover.

Kevin Newman Award-Winning Broadcast Journalist · Investigative Reporter · Disinformation & Crisis Communication

Disinformation influence is driven by reach and narrative stickiness, not raw content volume, Telegram and YouTube deliver higher impact per post than high-volume platforms like X, which is why monitoring optimised for tweet counts misses the actual operations every time.

Dan Hutt Advisor, Security Division, Garuna Group (Det. Staff Insp., Ret.)

During engagement, build relationships and gather intelligence, but never debate rights with rights holders. Debating rights is the single most reliable way to collapse de-escalation; the discipline is to consult and pivot to a peaceful-resolution architecture instead of arguing the constitutional ground.

At the community-hub table, only one seat belongs to a police officer, public health, education, and local not-for-profits jointly review high-risk individuals before they ever enter the criminal justice system. The data behind the model: eighty percent of referrals turn out to be about mental health, not criminality.

Todd Moore Subject Matter Expert, Asset Protection & Robbery Response, Garuna Group

A GPS device pinging at an unscheduled industrial area or warehouse is the signature that a stolen load has reached a stash location, not a routing anomaly. That detection moment is the operational pivot: the window to deploy recovery and coordinate the right jurisdictional response closes within hours, sometimes minutes.

Arjun B. Partner at Garuna Group, Cross-Cultural Workplace Investigations

Credible CQ learning pairs peer-reviewed academic sources with direct links to Indigenous-led organisations, scholarly material without community voice produces fluency without competence, and community voice without scholarly grounding produces empathy without epistemology. The combination is the discipline.

Treena Reilkoff Advisor, Trauma-Informed Conflict Management & Resilient Risk Mitigation, Garuna Group

Resilience is not "bouncing back" but "bouncing forward", recovery should advance capability beyond the pre-incident baseline, not restore the status quo. Any after-action that returns the system to its prior state has missed the actual lesson encoded in the event.

Jeff Thompson Subject Matter Expert Instructor, Insider Risk Management, Garuna Group

Effective insider-risk response begins with securing buy-in from senior executives across all functional areas, not just security, without multi-stakeholder executive alignment, downstream investigative and remediation work stalls or fragments at the first organisational friction point, which is where insider matters actually unravel.

André Frenette Subject Matter Expert, Diplomacy, Public Affairs & Crisis Leadership, Garuna Group

Data measures known risk. Leadership operates in the gap where emerging risk lives, the gradual erosion of stability that no single indicator captures yet. Organisations put people in leadership precisely to assess what the dashboard cannot yet show, and that gap widens as the stakes rise.

AJ Garuna Founder, Garuna Group, Corporate & Legal Investigator · Certified Fraud Examiner

When a record can neither be confirmed nor eliminated as your subject, the rule is to pull the primary documents, the certificates themselves carry the identifying detail that dispositions the match. An ambiguous hit left unresolved contaminates the file; a hit ruled out with documented reasoning strengthens it.

Paul Carson Subject Matter Expert, Private Security & Regulatory Compliance (PSISA), Garuna Group

In a credentialing failure, the clerical error is never the real story, the disclosure failure layered on top of it is, because a defect known to the issuer but hidden from the industry silently transfers operational, legal, and reputational risk onto the parties least able to see it coming.

Chrystian Viens Subject Matter Expert, National Security & Intelligence Operations, Garuna Group

The intake cascade that triangulates consensus is the same machinery that hides its blind spots, each compression node between analyst and decision-maker strips out the uncertainty and dissent that would most change the final assessment. The thoroughness of the chain is what makes what it filtered invisible.

Ruari Nicholson Former CSIS Director General (Atlantic Region) · Partner at Garuna Group

When evaluating conflict strategy, prioritize the question of enduring political objective, not the immediate tactical wins available on the battlefield. Strategy that optimises for the tactical window collapses when the political end-state shifts, which is the failure mode behind most modern protracted conflicts.

Kevin Newman Award-Winning Broadcast Journalist · Investigative Reporter · Disinformation & Crisis Communication

Verification must move upstream into the workflow before decisions are made, not operate as a downstream reactive fact-check, after claims have already spread and influenced the operating picture. The cost of correction exceeds the cost of pre-decision verification by an order of magnitude in every case we've reviewed.

Dan Hutt Advisor, Security Division, Garuna Group (Det. Staff Insp., Ret.)

Public safety incidents follow a four-phase model, Background/Assessment → Engagement → Enforcement → After-Action, with distinct posture and authority for each phase. Confusing the phase boundaries (running enforcement reflexes inside engagement) is the structural failure that ends most major incidents badly.

When more than half of recorded crime carries a cyber element, it is no longer cybercrime, it is core crime, and a specialist unit staffed with half a percent of the service will be overwhelmed on contact. The structural answer is capability at the edge: every frontline officer and every civilian member carrying some level of cyber capability.

Todd Moore Subject Matter Expert, Asset Protection & Robbery Response, Garuna Group

When a GPS tracker shows no alerts but more than four hours have passed, immediately ping the device on-demand, to retrieve real-time location before any other action. The breadcrumb history is what gives police reasonable and probable grounds for the search warrant, and that window closes fast.

Arjun B. Partner at Garuna Group, Cross-Cultural Workplace Investigations

CQ mastery is a layered competency, context first (Indigenous foundations), then definition (peer-reviewed scholarship), then operationalization (workplace), reversing the order produces the most common organisational failure mode: trained staff who can quote the definition but cannot navigate the relationship, because they were taught the concept before they had the context to hold it.

Treena Reilkoff Advisor, Trauma-Informed Conflict Management & Resilient Risk Mitigation, Garuna Group

Adaptive leadership uses a three-step sequence: recognize the bias, admit it, call it out, only then can adaptability follow. A leader who skips the naming step ends up performing adaptability without rewiring decision-making, the most common failure mode in executive development.

Jeff Thompson Subject Matter Expert Instructor, Insider Risk Management, Garuna Group

Breach scope and impact assessment is the input that calibrates the proportionality of organisational response, not a downstream documentation step. Quantify extent early or you over-spend on low-impact incidents and under-resource the ones that actually carry insider-fraud or regulatory exposure.

André Frenette Subject Matter Expert, Diplomacy, Public Affairs & Crisis Leadership, Garuna Group

In a hardship posting the operative question is not "is this environment dangerous?", many are. It is whether the country is approaching a tipping point, where conditions can change faster than protective action can be taken. Consequence-severity alone can justify almost any restriction anywhere; trajectory is the variable that separates prudence from reflex.

AJ Garuna Founder, Garuna Group, Corporate & Legal Investigator · Certified Fraud Examiner

A common name is an investigative risk before it is anything else, so every subject runs as deliberate parallel passes, base name, name variants with proximity operators, middle names, corporate affiliations, and geographic anchors, replicated across every database. Confirmation must come from independent search dimensions, never a single lucky hit.

Paul Carson Subject Matter Expert, Private Security & Regulatory Compliance (PSISA), Garuna Group

Licensing and enforcement must sit in separate entities, not for organisational tidiness, but because conflating issuer and regulator builds in the incentive to conceal defects. When the authority with exclusive visibility of a credential failure also owns that credential, quiet partial recalls replace industry disclosure.

Chrystian Viens Subject Matter Expert, National Security & Intelligence Operations, Garuna Group

A threat brief is ready for a decision-maker when it answers three things, the current situation, the resources and intelligence already held, and the consultation chain that preceded escalation. What the reviewer is listening for is completeness of the information ecosystem, not just the facts.

Eric Hovius Subject Matter Expert, Indigenous Rights, Consultation & Aboriginal Law, Garuna Group

The duty to consult cannot be reduced to a checklist, it is different every time, and that is exactly why proponents get it wrong: they treat it as procedural notification when the obligation demands meaningful, good-faith engagement. Searching for a standard recipe is itself the misreading.

Ruari Nicholson Former CSIS Director General (Atlantic Region) · Partner at Garuna Group

Underlying motivations, recognition, grievance, legacy, hold stronger under operational pressure than financial incentives. Reframing engagement from a transactional focus on money to one about access shifts the asset's self-perception from informant to partner, and that single reframing survives the long-cycle handler turnover.

Kevin Newman Award-Winning Broadcast Journalist · Investigative Reporter · Disinformation & Crisis Communication

Disinformation influence is driven by reach and narrative stickiness, not raw content volume, Telegram and YouTube deliver higher impact per post than high-volume platforms like X, which is why monitoring optimised for tweet counts misses the actual operations every time.

Dan Hutt Advisor, Security Division, Garuna Group (Det. Staff Insp., Ret.)

During engagement, build relationships and gather intelligence, but never debate rights with rights holders. Debating rights is the single most reliable way to collapse de-escalation; the discipline is to consult and pivot to a peaceful-resolution architecture instead of arguing the constitutional ground.

At the community-hub table, only one seat belongs to a police officer, public health, education, and local not-for-profits jointly review high-risk individuals before they ever enter the criminal justice system. The data behind the model: eighty percent of referrals turn out to be about mental health, not criminality.

Todd Moore Subject Matter Expert, Asset Protection & Robbery Response, Garuna Group

A GPS device pinging at an unscheduled industrial area or warehouse is the signature that a stolen load has reached a stash location, not a routing anomaly. That detection moment is the operational pivot: the window to deploy recovery and coordinate the right jurisdictional response closes within hours, sometimes minutes.

Arjun B. Partner at Garuna Group, Cross-Cultural Workplace Investigations

Credible CQ learning pairs peer-reviewed academic sources with direct links to Indigenous-led organisations, scholarly material without community voice produces fluency without competence, and community voice without scholarly grounding produces empathy without epistemology. The combination is the discipline.

Treena Reilkoff Advisor, Trauma-Informed Conflict Management & Resilient Risk Mitigation, Garuna Group

Resilience is not "bouncing back" but "bouncing forward", recovery should advance capability beyond the pre-incident baseline, not restore the status quo. Any after-action that returns the system to its prior state has missed the actual lesson encoded in the event.

Jeff Thompson Subject Matter Expert Instructor, Insider Risk Management, Garuna Group

Effective insider-risk response begins with securing buy-in from senior executives across all functional areas, not just security, without multi-stakeholder executive alignment, downstream investigative and remediation work stalls or fragments at the first organisational friction point, which is where insider matters actually unravel.

André Frenette Subject Matter Expert, Diplomacy, Public Affairs & Crisis Leadership, Garuna Group

Data measures known risk. Leadership operates in the gap where emerging risk lives, the gradual erosion of stability that no single indicator captures yet. Organisations put people in leadership precisely to assess what the dashboard cannot yet show, and that gap widens as the stakes rise.

AJ Garuna Founder, Garuna Group, Corporate & Legal Investigator · Certified Fraud Examiner

When a record can neither be confirmed nor eliminated as your subject, the rule is to pull the primary documents, the certificates themselves carry the identifying detail that dispositions the match. An ambiguous hit left unresolved contaminates the file; a hit ruled out with documented reasoning strengthens it.

Paul Carson Subject Matter Expert, Private Security & Regulatory Compliance (PSISA), Garuna Group

In a credentialing failure, the clerical error is never the real story, the disclosure failure layered on top of it is, because a defect known to the issuer but hidden from the industry silently transfers operational, legal, and reputational risk onto the parties least able to see it coming.

Chrystian Viens Subject Matter Expert, National Security & Intelligence Operations, Garuna Group

The intake cascade that triangulates consensus is the same machinery that hides its blind spots, each compression node between analyst and decision-maker strips out the uncertainty and dissent that would most change the final assessment. The thoroughness of the chain is what makes what it filtered invisible.