Executive protection · Risk management
What an executive protection strategy actually contains
Most organisations buy protection without a strategy, then cannot answer whether it is proportionate. What the document contains, and why it reduces risk before anyone deploys.
Published 31 August 2026 · 2 min read
Most organisations buy executive protection the way they buy any other service: they describe a need and someone sends operators. What they usually do not buy is the document that says what is being protected, against what, to what standard, and who decides. Without it, two questions cannot be answered: is this proportionate, and how would we know if it stopped being proportionate.
What it contains
- The assessed threat, written down, with the reasoning visible rather than a conclusion asserted.
- The protective posture that follows from it, and why that level rather than one above or below.
- The thresholds at which protection increases or stands down, agreed in advance rather than decided under pressure by whoever is awake.
- Who may authorise a change of plan, so a driver at a gate is not improvising policy.
- What the principal has agreed to, so protection is not quietly renegotiated one exception at a time.
- What gets recorded, and where it goes: this is the part that turns an incident into something the next plan learns from.
Why it reduces risk
Because most of what goes wrong is decided in advance. The decisions that fail on the night are the ones nobody made in daylight: whether this counts as an escalation, whether the movement should be cancelled, whether the person at the door has the authority to say no. A strategy converts those into decisions already taken.
Why it makes the cost defensible
A board can approve a proportionate response to an assessed threat. It cannot approve an open ended number of people. Organisations that scale protection well write the strategy first and let it decide the headcount; the ones that struggle hire a detail and reverse engineer a justification for it afterwards.
One structural point worth insisting on: the firm assessing what protection is warranted should not be the firm whose revenue rises with the answer. Where the same provider does both, ask for the assessment as a separate document, and hold it against what is actually deployed.
Read next
General information, not advice for your circumstances. Obligations change: confirm anything you intend to rely on against the current instrument.