CISO Tribune

Vendor comparison · 2 companies

ICF vs NGC Risk

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. NGC Risk provides fractional executives and risk programs for mid-market businesses. CISO Tribune files both under Security consulting and advisory. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • ICF
  • NGC Risk
ICF vs NGC Risk: Products, Customers and Funding Compared
ICFICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats.icf.comNGC RiskNGC Risk provides fractional executives and risk programs for mid-market businesses.ngcrisk.com
What it sells
  • ICF Fathom[3]ICF's suite of tailored AI solutions and services.
  • Fractional Leadership[3][4]Provides a part-time senior executive to fill a CISO, CIO/CTO, or CRO seat and own the client's security, technology, or risk strategy.
  • Digital Risk Programs[1][3]Defined-scope engagements covering disaster recovery and operational resilience, AI governance, framework readiness such as ISO 27001, ISO 42001 and SOC 2, SDLC governance, and audit response.
  • The Wardroom[1][3]An enterprise risk reasoning platform currently offered in closed beta.
Categories
Headquarters
Not stated on its pagesUnited States[2]
Founded
1969[3]Not stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, ICF sells its security and resilience services to government and industry. ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF names government and commercial clients in public health, IT modernization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF's acquisitions point to cybersecurity and identity management work for U.S. federal civilian and defense agencies. ICF's acquisitions point to work for electric and gas utilities, state and local governments, and state energy offices.From its own pages, NGC Risk sells mainly to mid-market businesses. NGC Risk places executives in the CISO, CIO/CTO, and CRO seats that those businesses cannot yet fill full-time. NGC Risk also offers defined-scope work such as framework readiness, SDLC governance, and audit response and remediation. NGC Risk describes a setting in which boards, regulators, clients, and insurers ask who owns the risk.
Last verified
October 14, 2026October 16, 2026

Where they overlap

  • Security consulting and advisory is the primary category of both ICF and NGC Risk.

Where they differ, field by field

  • ICF is also filed under Compliance automation, Incident response and forensics and Vulnerability management. NGC Risk is also filed under AI governance.
  • ICF lists ICF Fathom. NGC Risk lists Fractional Leadership, Digital Risk Programs and The Wardroom.
  • NGC Risk is headquartered in United States.
  • ICF was founded in 1969.

How they differ

CISO Tribune files ICF under Security consulting and advisory, Compliance automation, Incident response and forensics, and Vulnerability management, with Security consulting and advisory as its primary category. CISO Tribune files NGC Risk under Security consulting and advisory and AI governance, and Security consulting and advisory is its primary category as well. ICF sells security and resilience services meant to help government and industry strengthen defenses against cyber, physical, and emerging threats, and it also sells ICF Fathom, a suite of tailored AI solutions and services. NGC Risk sells Fractional Leadership, which provides a part-time senior executive to fill a CISO, CIO/CTO, or CRO seat, along with Digital Risk Programs and The Wardroom, an enterprise risk reasoning platform currently in closed beta. The Digital Risk Programs cover disaster recovery, AI governance, and framework readiness such as ISO 27001, ISO 42001 and SOC 2.

ICF says it was founded in 1969, and it describes itself as a global solutions and technology provider. It files annual reports on Form 10-K and quarterly reports on Form 10-Q with the U.S. Securities and Exchange Commission. NGC Risk is headquartered in United States. Its principal runs every engagement, and senior advisors with the same operator background join when the work needs more hands.

ICF delivers its services to clients across the U.S. federal government through a contracts portfolio, and it names government and commercial clients in public health, IT modernization, energy efficiency, and utility consulting. NGC Risk sells mainly to mid-market businesses that cannot yet fill the CISO, CIO/CTO, and CRO seats full-time. NGC Risk states that it owns the strategy and the program and is the accountable voice with the client's board and clients.

What it sells: ICF

What ICF Fathom does[3]
ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents.

Questions about ICF and NGC Risk

What do ICF and NGC Risk sell?
ICF sells ICF Fathom. NGC Risk sells Fractional Leadership, Digital Risk Programs and The Wardroom.
Are ICF and NGC Risk in the same category?
Yes. Security consulting and advisory is the primary category of both on CISO Tribune.
Where are ICF and NGC Risk headquartered?
NGC Risk is headquartered in United States.
When were ICF and NGC Risk founded?
ICF was founded in 1969.
Who are ICF and NGC Risk sold to?
From its own pages, ICF sells its security and resilience services to government and industry. From its own pages, NGC Risk sells mainly to mid-market businesses.

About ICF

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. ICF frames resilience as key to protecting America's security, economy, and way of life. ICF's security work covers safeguarding critical assets, fortifying infrastructure, and building a security-first culture that considers cyber and physical convergence. ICF develops capabilities and executes real-time operations in support of national security.

ICF's infrastructure security and resilience work starts with understanding threats to mission-critical assets. ICF experts assess vulnerabilities, analyze cyber and physical risks, and develop strategic defenses to safeguard essential operations and national security. ICF experts design custom algorithms using statistics, machine learning, and AI. ICF analyzes the domain, integrates expert insights, and builds analytics for strategic decision-making and national security. ICF experts apply analytical methods and cybersecurity expertise to develop solutions for mission needs and national defense.

ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents. ICF has ServiceNow and Appian capabilities. ICF partners with marketing, commerce, cloud and analytics platforms, with vertically-specific technology providers particularly in the energy sector, and with supply chain professionals. ICF says technology partners play a larger role in its offerings as the world becomes more interconnected. ICF seeks to collaborate with experts, suppliers, contractors, and technology partners.[5]

ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF works for government and commercial clients in areas including public health, IT modernization and digitization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF provides clients with facts, data, and independent analysis to help them further their missions. ICF's team includes business analysts and policy specialists who work alongside technologists, data scientists, and creatives. ICF has built and integrated a set of marketing and communications capabilities to help organizations develop engagement with their audiences.[6][7]

Incentive Technology Group, LLC (ITG) provides cloud-based platform services to the U.S. federal government. ICF combines its strategic consulting, analytics and domain expertise with ITG's digital capabilities to help agencies architect and develop the technology platforms they need for their missions. Creative Systems and Consulting provides IT modernization and digital transformation solutions to U.S. federal agencies. SemanticBits provides digital modernization services using open-source frameworks to U.S. federal health agencies. ICF pairs its health and social services with ESAC's health technology solutions and applied understanding of genomics, proteomics and physical sciences in its digital health solutions. DMS Disaster Consultants is a disaster planning and recovery services firm whose capabilities augment ICF's disaster response, recovery and preparedness work in the public sector. Applied Energy Group (AEG) provides energy technology and advisory services to electric and gas utilities, state and local governments, and state energy offices.

ICF traces its origin to 1969, when a WWII veteran and former Tuskegee Airman, along with three U.S. Department of Defense analysts, founded the Inner City Fund to finance businesses in Washington, D.C. ICF describes itself as a global solutions and technology provider. In 2012, ICF acquired GHK Holdings Limited, a London-based consultancy with offices across Europe and Asia that added capabilities in environment, health, education, social programs, logistics, and international development. Mostra SA is a communications agency based in Brussels, Belgium, whose strategic communications capabilities complement ICF's policy work. ICF files annual reports on Form 10-K and quarterly reports on Form 10-Q with the U.S. Securities and Exchange Commission.[2][6]

ICF on the record

Sources

ICF full record

  1. [1]Cybersecurity Solutions and Cyber Strategy | ICFICF · undated page, accessed October 14, 2026 · Tier A
  2. [2]Who We Are | ICFICF · undated page, accessed October 14, 2026 · Tier A
  3. [3]Who We Are | ICFICF · undated page, accessed November 10, 2026 · Tier A
  4. [4]Acquisitions | ICFICF · undated page, accessed November 10, 2026 · Tier A
  5. [5]Seeking Suppliers, Contractors, and Technology Partners | ICFICF · undated page, accessed November 10, 2026 · Tier A
  6. [6]Overview | Investor Relations | ICF International Inc.ICF International Inc. · undated page, accessed November 10, 2026 · Tier A
  7. [7]About Us - We're the Changemakers | ICF Next | ICFICF · undated page, accessed November 10, 2026 · Tier A

NGC Risk full record

  1. [1]ngcrisk.comNGC Risk · ngcrisk.com · undated page, accessed October 16, 2026 · Tier A
  2. [2]PrivacyNGC Risk · ngcrisk.com · published October 2, 2026 · Tier A
  3. [3]NGC Risk | Leadership that sees what's comingNGC Risk · undated page, accessed November 10, 2026 · Tier A
  4. [4]About | NGC RiskNGC Risk · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.