What is a protective intelligence brief, and when do you need one?
A protective intelligence brief is a sourced threat assessment of one specific person of concern, written for the team protecting the principal. It opens with the bottom line and an overall rating, sets out each threat and behavioral indicator with its confidence and what it means for the protectee, and recommends the protective posture the situation calls for.
By Ravus5 min read
What is a person of concern?
A person of concern is an individual whose behavior, grievance or fixation toward a principal warrants assessment. Common examples include a former employee with a grievance, an individual who writes repeatedly to the principal or the family, someone who appears at the principal's events or near the residence, and a separation that is going badly.
Not every unwelcome contact is a threat, and not every threat arrives as an explicit message. A long-standing principle of threat assessment is that the people who make threats and the people who pose them are not always the same. The purpose of a brief is to separate genuine concern from noise, so the protective team neither overreacts nor misses what matters.
What is in a protective intelligence brief?
A Ravus protective intelligence brief carries six parts:
- The bottom line, first. An overall rating, a short bottom line, the recommended posture and the three actions that matter most, readable by a detail lead in under a minute.
- Every indicator, explained. Each threat and behavioral indicator marked Alert, Caution or Clear, with a confidence level, its sources and what it means for the protectee.
- The subject, profiled. A profile for the team to work from, including identifying details, a vehicle of record and the associates around the subject.
- Pattern of life, mapped. The subject's anchors and frequented places, and any approach toward the protectee's office or residence, dated and drawn on a map.
- A posture gap analysis. The protectee's current posture set against what the threat calls for, across the detail, vehicle, residence, movements and law-enforcement liaison, with prioritized actions and the reason for each.
- Sources, gaps and limits. Every finding names the documents behind it, and what remains unknown is stated plainly. The brief is decision support, never a guarantee.
The public sample shows a fictional former employee, fixated on a chief executive, rated Critical overall.
How do you read the bottom line?
The bottom line up front, often shortened to BLUF, exists so that the person who has to act can act quickly. Read it in order. The overall rating sets the urgency. The summary says why. The recommended posture says what level of protection the situation calls for. The priority actions say what to do now.
Then read the indicators behind it before acting, particularly any marked Alert. A bottom line is only as strong as the findings beneath it, and a good brief lets the team check each one.
What do the indicators tell a protective team?
Indicators are the behaviors and circumstances that bear on whether a concern is escalating. In threat assessment practice they include fixation on the principal, a stated or implied grievance, communications that reference the principal's family, home or schedule, approach behavior such as appearing near the residence or office, and recent events in the subject's life that may be destabilizing.
Each indicator in a Ravus brief carries a status, a confidence level and a protective implication. The implication is the part a detail lead uses: not only what was found, but what it means for the protectee. An indicator marked Clear is useful too. It shows what was considered and where nothing of concern appeared within the brief's stated limits.
What is protective posture, and how does the brief change it?
Protective posture is the level and shape of protection in place, relative to the threat: the detail, the vehicle, the residence, the principal's movements and liaison with law enforcement. The brief's posture gap analysis sets the current posture beside the one the threat calls for and lists what to change, in priority order, with the reason for each.
Changes might include adjusting the principal's movements, briefing household or front-desk staff, tightening access at the residence or establishing law-enforcement liaison. A brief can equally show that the current posture is proportionate. Proportion is part of the point: protection that is too visible can draw attention of its own.
When do you need a protective intelligence brief?
- A specific person has made contact that worries the principal, the family or staff.
- A termination or separation involves someone with a grievance. See high-risk termination and workplace violence prevention.
- Someone has reported threatening behavior at work or at home.
- The same individual has appeared at the residence, the office or the principal's events more than once.
- A public event is coming up and a known person of concern may attend.
- The protective team needs a documented basis for changing its posture.
Where the concern persists after the brief, Ravus offers continuous monitoring of the person of concern, so the team learns of a change rather than discovering it. The wider service is described under protective intelligence and threat assessment.
Common questions.
- How is a protective intelligence brief different from a threat assessment?
- Threat assessment is the broader discipline: a structured evaluation of a person, an event, a residence or a trip. A protective intelligence brief is the deliverable for one specific person of concern, written for the team protecting the principal. See threat assessment.
- Who should receive a protective intelligence brief?
- The protective team, and whoever is responsible for the principal's safety, such as the family office or the security lead. A brief is for the protective team only and should be shared on a need-to-know basis.
- What happens if the concern continues after the brief?
- The posture can be reassessed as circumstances change, and Ravus offers continuous monitoring of a person of concern so the team learns of a change in behavior or movement.
- Is the subject in the public sample real?
- No. The subject, the protectee and every detail in the public sample are fictional.