NEPC is an investment consulting firm headquartered in Boston, Massachusetts. The firm provides research-driven investment advisory services to a range of clients including governments, endowments and foundations, healthcare organizations, insurance companies, public pension funds, corporate defined benefit plans, Taft-Hartley plans, and ultra-high-net-worth individuals. Its core offerings include Outsourced Chief Investment Officer (OCIO) services, sustainable investment solutions, and pooled employer plans.
For security professionals, the surface area here is institutional and financial. The firm manages advisory relationships across public pensions, healthcare systems, and government entities - environments where data integrity, regulatory compliance, and the confidentiality of financial and personal information are non-negotiable. Protecting sensitive investment data, client PII, and fiduciary records across these verticals means contending with threats that target financial institutions specifically: credential compromise, vendor risk, and the pressure to secure complex multi-entity data flows.





