Skip to content
CATO & VEILINTELLIGENCE & INVESTIGATIONS
Services
All servicesInvestigationsIntelligence & SecurityCrisisTrainingRetained Support / Black Card
Clients
All clientsSolicitorsFamily OfficesBusinessesPrivate Clients
About
PeopleCapabilities & connectionsCase studiesCommissioning & fees
Insights
Discuss your matter
← All training

Emerging threats

AI deception & insider riskInvestigate the incident behind the convincing explanation.

1 day · £650 per person, including applicable VAT

A convincing call. An unexpected payment. Information outside the business. Work through an ambiguous incident and decide what to verify, preserve and investigate first.

Inside the programme ↓

Inside the exercise

The voice was familiar. The payment destination was not.

A fictional organisation has acted on an apparently credible instruction. Your team examines impersonation, compromised access and insider involvement as competing explanations.

Investigative perspectiveRelationships
Voice instruction01Account access02Payment record03
Compare the instruction, access and transaction before choosing an explanation.
The practiceThe exerciseJoining the programme

How the learning works

Research.
Rehearse.
Apply.

Work through the problem, compare your approach and examine the result with an instructor.

01

Synthetic identities and evidence authenticity

Identify the original communications and records needed to assess authenticity.

02

Information leakage and insider indicators

Examine who knew the approval process and who could access the information used.

03

Test competing explanations

Test each explanation against the available material. Decide which gaps matter most.

04

Coordinate legal, technical and protective responses

Prepare a coordinated investigation plan for legal, technical and protective teams.

Inside a supervised exercise

The voice was familiar. The payment destination was not.

A fictional organisation has acted on an apparently credible instruction. Your team examines impersonation, compromised access and insider involvement as competing explanations.

01 / Brief

What needs establishing?

Identify the question, the available material and the gaps in the account.

02 / Enquiry

What would you do next?

Select an approach, explain your reasoning and work through the exercise.

03 / Debrief

What did you establish?

Review the findings and the decisions that helped or limited your progress.

Programme details

Make the next
move yours.

Business leaders, legal teams, investigators and security professionals.

What you take away

A practical incident assessment and a prioritised investigation plan. Private organisational workshops are available.

Format
1 day
Course fee
£650 GBP per person · Includes applicable VAT
Delivery
Enquire for dates and arrangements
Discuss a place ↗Arrange private team training ↗

We discuss your experience and goals before recommending a programme. Individual fees are in GBP and include any applicable VAT. Travel and accommodation are not included unless expressly stated in your booking. Final syllabus, dates and inclusions are confirmed before booking. Private team training is quoted separately to scope.

← Explore other programmesTraining for your organisation ↗
CATO & VEILGlobal intelligence & investigations.Explore our capabilities & connections ↗
© 2026 Cato & Veil
CybersecurityAI corporate intelligenceAI talent intelligenceTransnational repressionCase studiesPeopleOur groupPramanaCanaryTrainingSpeakingThe Cato BriefCommissioning & feesFree consultationPrivacyContact
London · Dubai · Hong Kong · Mumbai · Sofia

Cato & Veil is a trading name of Cato and Veil Limited. Registered in England and Wales, company number 12692418. Registered office: 704b Kenton Road, Harrow, Middlesex, HA3 9QX.