What is pattern-of-life analysis, and how do protective teams use it?
Pattern-of-life analysis is the assessment of a person's routine: where they live, work and spend time, and when. Protective teams use it to anticipate where a person of concern is likely to be and to recognize when that pattern changes, especially when it moves toward the principal. The same lens, turned inward, shows how predictable the principal's own routine has become.
By Ravus5 min read
What does a pattern of life describe?
A pattern of life describes the shape of a person's days. It starts with anchors: where the person sleeps, where they spend the working day and the places they return to. It adds time: when they wake, when they travel between those places, which appointments never move and which days look different from the rest. And it notes the gaps, the periods the pattern does not explain.
None of this is remarkable on its own. Its value to a protective team lies in comparison: between the person's routine and the principal's, and between this week's routine and last month's.
Why does a person of concern's routine matter to a protective team?
- Anticipation. Knowing where a person of concern usually is, and when, lets the team plan the principal's movements, venues and timings so their paths are unlikely to cross.
- Change is the signal. A stable routine is a baseline. A departure from it, such as a new location, a disrupted schedule or time spent near the principal's office or residence, is what warrants attention. Approach behavior is an indicator threat assessment takes seriously.
- Proportion. A routine that stays settled and far from the principal's world can support a measured posture, rather than protection sized to worst-case assumptions.
What is in a geolocation analysis?
Ravus delivers pattern-of-life work as a geolocation analysis: a pattern-of-life assessment of a person of interest or potential threat. It contains:
- Key places, mapped and coded. Residences, daytime hubs and recurring points of interest, each with a confidence level and a plain note on how far to trust it.
- The routine, hour by hour. Wake times, commutes, workday windows and fixed appointments, shown by weekday and hour in the subject's local time.
- Predictable windows. Where and when the subject is most predictable, ranked, each with a time window and a note on how the protective team can use it. Gaps in the pattern are called out too.
- A profile that shows its working. What the analysis shows, what it implies and what is only speculation, each labeled as such.
- Confidence, limits and lawful basis. A plain confidence note, what the analysis cannot show, and the lawful basis stated in every report.
The sample analysis is shown under a placeholder name and discloses no real subject.
How do protective teams use it in practice?
- Planning the principal's schedule. Venues, routes and timings are chosen with the person of concern's routine in view.
- Briefing the detail. The team knows what normal looks like for the person of concern, so a departure from it is noticed rather than missed.
- Setting posture. The routine feeds the posture recommendation in a protective intelligence brief, alongside the threat and behavioral indicators.
- Deciding when to escalate. Movement toward the principal's locations is a trigger to reassess, tighten coverage or establish law-enforcement liaison.
- Keeping the picture current. Where a concern persists, continuous monitoring of the person of concern keeps the team informed of change.
What should a pattern-of-life assessment not claim?
A routine is a probability, not a schedule. A sound assessment is careful about what it asserts:
- Inferences are not facts. They stay unconfirmed until they are corroborated on the ground.
- Speculation is labeled as a hypothesis to test, never presented as a finding.
- Each location carries a confidence level, so the team knows which parts of the picture are solid.
- Limits are stated up front, including what the analysis cannot show.
It also has a defined purpose. Pattern-of-life work for a protective team exists to protect a principal from an assessed concern. Ravus performs it under OnTrial, LLC's Texas Private Security License No. C31261501, and every report states its lawful basis.
How predictable is your own principal?
The same lens applies to the person being protected. Principals and families keep routines too: the same school run, the same gym at the same hour, the same table at the same restaurant each week. Fixed routines are where a principal is easiest to anticipate, by anyone. Executive protection practice has long treated predictability as exposure, and varies routes and timings where it matters most.
An exposure review of the principal shows what can be learned about the principal and the family, and what to reduce. It is often the natural companion to executive protection for principals and families, and to covert, low-profile protection where visibility is itself the risk.
Common questions.
- Is pattern-of-life analysis lawful?
- Ravus performs it for a protective purpose under OnTrial, LLC's Texas Private Security License No. C31261501. Every report states its lawful basis, and only corroborated claims are reported as findings.
- How is a geolocation analysis different from a protective intelligence brief?
- A protective intelligence brief assesses the threat a person of concern poses and the posture it calls for, and includes a map of their pattern of life. A geolocation analysis goes deeper into the routine itself: key places, the hour-by-hour pattern and the predictable windows.
- Can pattern-of-life analysis predict exactly where someone will be?
- No. It shows where a person is likely to be and when, with a confidence level for each finding. Inferences stay unconfirmed until they are corroborated on the ground.
- Is the public sample based on a real person?
- No. The sample is shown under a placeholder name and discloses no real subject. Its findings are inferences to verify, not statements of fact about anyone.