Protective Intelligence in Context

Protective Intelligence in Context

The principles we describe in Protective Intelligence: Understanding Threat reflect methodologies developed within specialist government environments and subsequently applied by Specialist Investigative Support to complex organisational, operational and individual risk.

Whilst circumstances vary, the requirement, integrated framework and professional continuity remains consistent: understand what is happening, establish what can be evidenced, assess what may happen next and identify proportionate opportunities to mitigate risk.

Organisational and financial risk

SIS has, to date, assisted organisations in identifying and mitigating more than £40 million of risk.

Our operations have assisted in identifying suspected fraud and dishonesty, insider threats, information compromise, vulnerabilities in processes and people, and organised criminal targeting. 

In each case, the immediate concern represented only part of the requirement. 

Understanding the people, behaviours, associations, activity and developing risk was necessary to determine an appropriate response.

Adverse and sophisticated targeting

SIS has supported prominent individuals, families and organisations exposed to sophisticated adverse targeting.

This has included identifying, monitoring and evidencing activities that were inconsistent with tradecraft ordinarily anticipated within conventional commercial or private sector environments. 

Attribution is not always possible or necessary. 

Protective decisions still have to be made on the intelligence and evidence available.

Other assignments have involved organised criminal networks, blackmail within a diplomatic context and the identification of targeting behaviour before its purpose or potential consequence was fully understood.

Identifying threat before it reaches the target

Specialist behavioural detection has been used within crowded environments to identify individuals presenting indicators of concern amongst thousands of people.

During one major protected event, an individual identified through behavioural detection was covertly monitored and subsequently intercepted by law enforcement before reaching the event. 

Their status as a subject of interest was subsequently confirmed.

The value was not simply detection.

It was creating an opportunity to assess, covertly monitor and intervene while options remained available.

Stalking and threats to individuals

Protective intelligence has also been applied where the threat was known but its behaviour and potential for escalation required continual assessment.

In one case involving a violent and unpredictable individual, SIS provided evidential protective surveillance to safeguard a family, their home and workplace while simultaneously developing intelligence and evidence in support of ongoing proceedings.

Protection, intelligence collection and evidential development are not separate activities. 

Each informed the assessment and management of risk.

When the protected person changes the risk

Protective arrangements themselves do not remove threat, and the behaviour of the person being protected can materially alter vulnerability.

SIS has encountered circumstances where established protection arrangements were being deliberately circumvented to pursue private activities. 

In doing so, the individual created vulnerabilities extending beyond personal safety, including exposure to abduction and consequential risk to wider family interests.

The protection team had not failed.

The environment in which it was expected to manage risk had changed.

This is one reason protective intelligence operates beyond the immediate security operation.

When risk escalates.

When risk escalates, often without warning, the requirement for timely and reliable intelligence in high consequence incidents may become critical to decisions being made. 

Within a formal crisis management structure, Crisis Management Teams may require reliable fast-time intelligence from hostile or controlled environments to establish fact, understand developing threat and inform decision making while simultaneously managing legal, reputational, operational and personal consequences.

That requirement forms part of SIS specialist operational support to Crisis Management Teams through pre-existing and defined agreement. 

Supporting organisational resilience.

Developing the ability of personnel to recognise indicators of concern, understand risk within their operating environment and respond appropriately can strengthen organisational resiliance and create opportunities for early intervention.

Following specialist training delivered within the media and broadcasting sector the Head of Global Security - national broadcasting company, described the training as among the best received all year. The combination of theory and practical demonstration was particularly valued for developing understanding of how to identify and respond to risks associated with their roles within operational environments. Further training was requested.  

Intelligence. Evidence. Risk.

Specialist Investigative Support.