NAVIGATION
Table of contents
In close protection, one mistake recurs: treating visible presence as proof of protection. Someone stays very close to the protectee, adopts an intimidating posture, issues unnecessary commands and repeatedly signals readiness to intervene. The display may look reassuring, but it does not necessarily reduce risk. It may instead heighten tension, attract attention, restrict movement and make coordinated, discreet protection more difficult.
The purpose of executive protection is not simply to place someone beside a protected person. It is to reduce risk while enabling the protectee to carry out their responsibilities with as little disruption as circumstances allow. Calm, efficient movement should be the outcome of planning, information and control — not a substitute for them.
“Security theatre” — when protection is mainly for show
In the security profession, the term security theatre describes measures that appear robust but contribute little to actual risk reduction. In close protection, examples may include:
- exaggerated posturing that suggests a constant expectation of confrontation;
- loud commands in public spaces when there is no operational need;
- nervous scanning, pushing people or creating space indiscriminately;
- staging protective activity so overtly that bystanders begin to watch, react or interfere.
Such behaviour can:
- draw additional attention to the protectee;
- encourage someone to test the protection team’s response;
- reduce the protectee’s confidence and freedom of movement;
- disrupt coordination within the team and with other stakeholders.
Visibility can be valuable when it is used deliberately for deterrence, reassurance or operational control. It is not, by itself, evidence of effective protection. Its value depends on the threat profile, the operational objective and the wider protective plan.
Effective protection begins before the protectee arrives
The effectiveness of close protection is determined to a considerable extent before an event or movement begins. This preparatory process — commonly referred to as advance work — should convert information about the protectee, the environment and the intended activity into a workable protective plan.
- the venue has been assessed, including entrances, exits, lifts, service areas, holding areas and potential chokepoints;
- primary and alternative routes have been planned, together with decision points and contingencies;
- roles, responsibilities and decision authority have been clearly defined;
- a concise and unambiguous communications and escalation plan has been established;
- realistic medical, evacuation and other emergency arrangements have been prepared and can be implemented in practice.
Good preparation reduces reliance on improvised displays of force. It allows the team to move with purpose, coordinate with relevant stakeholders and adapt without creating avoidable confusion. If conditions change, the team has viable options rather than having to react from scratch.
Security starts with information
Threats do not always emerge without warning. Relevant indicators may appear before an incident:
- in publicly available online information and social media activity;
- in direct or indirect communications;
- in patterns of fixation, persistence or escalating interest shown by particular individuals;
- in business disputes, personal conflicts or changes in sentiment surrounding an event or organisation.
Protective intelligence is the structured and lawful process of identifying, collecting, assessing and communicating information relevant to potential threats against a protected person. It is not surveillance for its own sake, nor does it mean treating every anomaly as a threat. Its value lies in connecting relevant information to operational decisions: adjusting a route, changing timings, modifying resources, engaging other stakeholders or reconsidering whether an activity should proceed as planned.
Composure supports control — it does not mean passivity
Effective protection professionals do not seek confrontation. They maintain disciplined attention, communicate clearly and act decisively when action is required.
This matters because real situations demand sound decisions under pressure. One framework that can support structured thinking is the OODA loop:
- Observe — identify what is happening;
- Orient — interpret the information in its operational context;
- Decide — select an appropriate course of action;
- Act — implement it clearly and consistently.
OODA is a useful prompt rather than an automatic formula. Under pressure, emotion, incomplete information and poor communication can distort judgement and produce an unnecessarily aggressive or delayed response. Preparation, clear authority and effective team coordination remain more important than familiarity with the model alone.
De-escalation as an operational capability
Where circumstances permit, the preferred course of action is the one that resolves the situation without unnecessary escalation. De-escalation aims to create time, space and options. It does not exclude decisive protective intervention when the threat or urgency requires it.
Depending on the circumstances, practical measures may include:
- clear, calm and purposeful communication;
- appropriate positioning and control of space;
- maintaining distance and separation between the potential threat and the protectee;
- slowing the tempo of events where possible;
- buying time to assess, coordinate and implement an extraction or other response.
The principles of time, distance and communication are practical tools, but in close protection they must always support the primary objective: safeguarding the protectee and preserving viable movement or withdrawal options.
Unnecessary physical confrontation can create several additional exposures:
- medical and safety risks, including injury to the protectee, team members or bystanders;
- legal and compliance consequences;
- reputational harm to the protectee and the organisation;
- operational disruption, including crowd reaction, media exposure and loss of movement options.
The goal is operational freedom — not visible performance
Effective executive protection should enable the protectee’s activity rather than dominate it. The strongest arrangements are those in which:
- the protectee can conduct their activities with an appropriate degree of confidence and freedom of movement;
- those around the protectee see controlled, purposeful movement rather than visible tension;
- the team understands its roles and is not forced to improvise basic arrangements at the last moment;
- concerns are identified and managed before they become incidents;
- protective measures can adapt as the threat profile and operating environment change.
At programme level, this approach is consistent with the risk-based framework reflected in the ASIS Executive Protection Standard. Where protective activity involves business travel, it should also be integrated with the organisation’s wider travel risk management arrangements, including those informed by ISO 31030:2021. Whether protection is delivered by a small team or through an enterprise programme, it should function as a managed process — not merely create an impression through proximity and visibility.
A question worth asking
If you deliver or oversee executive protection, ask:
Does the protective arrangement reduce risk and give the protectee greater confidence and freedom of movement — or does it mainly make the protection itself more visible?
Professional performance is demonstrated through consistency, composure and reliable execution — not volume or theatrical visibility.
A visible protective presence can be appropriate for deterrence, reassurance, access control or communicating readiness to respond. It should, however, be intentional, proportionate to the assessed risk and integrated with the wider plan. Visibility is a tool — not a measure of effectiveness.
FAQ
What is “security theatre” in executive protection?
It refers to measures that appear robust but contribute little to actual risk reduction. They may even heighten tension, draw attention to the protectee, disrupt movement or provoke avoidable reactions.
What does advance work include?
Advance work is the preparation completed before an event or movement. It may include a venue assessment, route and entry analysis, contingencies, team roles, communications, coordination with stakeholders and realistic emergency arrangements.
What is protective intelligence?
Protective intelligence is the structured and lawful identification, collection, assessment and communication of information relevant to potential threats against a protected person. Its purpose is to support timely, proportionate operational decisions.
Why is composure important in close protection?
Composure supports clearer judgement, communication and team coordination under pressure. It does not mean passivity: decisive action remains necessary when the threat or urgency requires it.
How does de-escalation work in practice?
De-escalation uses communication, positioning, distance and control of tempo to create time and options. It can reduce medical, legal, reputational and operational exposure, but it does not rule out protective intervention when intervention is necessary.
When is a visible protective presence appropriate?
Visibility may be appropriate for deterrence, reassurance, access control or communicating readiness to respond. It should be selected deliberately, remain proportionate to the assessed risk and support the wider protective plan.
About this series
This article is part of a series developed in response to recurring questions about the delivery, management and training of close protection. Each article addresses a key issue, distinguishes professional practice from common misconceptions and places operational activity within a risk-based framework.