Executive Protection Glossary

High-net-worth individual (HNW or HNWI) is a financial industry term for a person with significant investable assets, typically defined as $1 million or more in liquid financial holdings excluding their primary residence. Very high-net-worth (VHNW) refers to individuals with $5 million or more, and ultra high-net-worth (UHNW) refers to individuals with $30 million or more. The categories are used by private banking, family offices, and protective services to scope the level of personalized service required.

The principal is the individual a protection detail is assigned to keep safe. The term is used across executive protection, military, and diplomatic security contexts to refer to the protected person, regardless of their role, title, or threat profile.

A detail is the team of operators assigned to protect a principal during a specific operation, event, or period. A detail can be one operator or many, depending on the threat profile, environment, and movement plan.

Advance work is the planning and reconnaissance done before a principal arrives at a venue or location. It includes route surveys, venue walks, identification of safe rooms and exits, coordination with venue security, and confirmation of arrival, departure, and contingency plans.

A personal security detail (PSD) is a team of trained operators dedicated to protecting a single individual or small group on a continuous or assignment-specific basis. PSDs are common in military, diplomatic, and high-net-worth executive protection contexts.

Executive protection is the discipline of protecting high-profile, high-net-worth, or high-risk individuals from physical, reputational, and operational threats. It combines close protection, protective intelligence, advance work, and risk planning into an integrated program tailored to the principal's life and exposure.

Close protection is the on-the-body protective coverage of a principal. It refers specifically to the operators positioned closest to the principal, responsible for direct intervention if a threat materializes. Close protection is one component of a complete executive protection program.

In executive protection, soft skills are the interpersonal, observational, and judgment-based capabilities that determine how effectively an operator works with principals, families, staff, and the public. They include communication, situational awareness, etiquette, body language reading, and conflict de-escalation.

Hard skills in executive protection are the technical, physical, and tactical capabilities required to operate in a protective role. They include firearms proficiency, defensive driving, first aid and trauma care, defensive tactics, and equipment handling.

Surveillance detection is the practice of identifying whether a principal, location, or movement is being observed, followed, or studied by a hostile party. It is a proactive discipline that uses route variation, observation drills, and pattern recognition to spot indicators of surveillance before an attack is launched.

Counter-surveillance is the active discipline of detecting, deterring, and disrupting hostile surveillance of a principal or facility. It overlaps with surveillance detection but focuses on engaging the surveillance once it has been identified, including identifying the operatives, their methods, and their objective.

Protective intelligence is the discipline of identifying, analyzing, and mitigating threats to a principal before they materialize. It combines open-source intelligence, behavioral analysis, social media monitoring, and pattern recognition to spot risk indicators that traditional reactive security misses.

A threat assessment is a structured analysis of the people, groups, environments, and circumstances that pose risk to a principal, organization, or facility. It considers the credibility, capability, and intent of potential threats and produces a prioritized picture of what protection has to address.

A vulnerability assessment evaluates the weaknesses in a principal's environment, routine, residence, and movement that an adversary could exploit. It is the inward-facing counterpart to a threat assessment and identifies what needs to be hardened, changed, or covered.

A Lioness Program is a protective program staffed by female protection specialists, designed for female principals and gender-specific assignments. Female specialists can access environments and conversations male operators cannot, and they often provide a level of comfort and discretion that the assignment requires.

A clandestine operation is a protective engagement conducted with deliberate concealment of the operator's role, presence, or affiliation. The principal is protected without anyone outside the engagement recognizing that protection is in place. Clandestine work is used when visible security would compromise the principal's privacy, business, or safety.

A site survey is the on-location reconnaissance of a venue, residence, or location the principal will visit or occupy. It documents access points, sight lines, choke points, safe rooms, exits, communication coverage, and coordination requirements with venue security or staff.

A route survey is the planning and reconnaissance of the routes a principal will travel between locations. It identifies primary and alternate routes, choke points, traffic patterns, escape options, and coordination with local law enforcement or venue security where required.

An IFAK is a compact medical kit designed to treat the most common life-threatening injuries until professional medical help arrives. It typically includes a tourniquet, hemostatic gauze, pressure bandages, chest seals, and basic airway tools. Every trained operator carries one.

Verbal judo is a tactical communication discipline that uses language, tone, and de-escalation techniques to defuse confrontations before they become physical. The framework is widely used in law enforcement and protective work.

Body language reading is the practiced skill of identifying intent, stress, deception, and pre-attack indicators through observation of posture, movement, eye behavior, and micro-expressions. It is a core observational skill in executive protection and behavioral threat assessment.

Crowd management in executive protection is the discipline of moving a principal through, near, or around groups of people while controlling exposure and maintaining intervention distance. It includes positioning, screening, and movement patterns adapted to crowd density and behavior.

A choke point is a physical location where movement is constrained, options are limited, and an adversary has an advantage. Examples include doorways, elevators, stairwells, narrow corridors, and bridges. Choke points are mapped in every site and route survey.

Area of responsibility (AOR) is the physical or operational zone an operator or detail is assigned to cover during an engagement. AORs are defined to ensure overlapping coverage, clean handoffs, and accountability across a multi-operator detail.

Cover and evacuation is the protective response to an imminent or active threat. The operator places themselves between the principal and the threat (cover) and moves the principal to a pre-identified safe location (evacuation). The drill is rehearsed in advance and adapted to the environment.

A hard target is a person, location, or facility that has visible, layered, and effective security in place. A soft target is one that does not. Adversaries select soft targets because they are easier to attack with lower risk. Effective executive protection moves a principal toward the hard-target end of the spectrum.

Low profile in executive protection refers to operators and operations that are designed not to draw attention. Operators in business attire, vehicles that blend with traffic, and movement patterns that look ordinary are all low-profile by design. The opposite is overt or high-visibility protection.

Operational security (OPSEC) is the practice of protecting information about an operation, principal, or organization from collection by adversaries. It includes controlling what is published, posted, discussed in public, and visible in routine patterns. OPSEC failures often cause incidents that protection alone cannot prevent.

Doxxing is the act of researching and publishing private information about an individual without consent, typically with hostile intent. Doxxing has become a primary attack vector against executives, public figures, and HNW individuals because of the volume of personal data available through public records, data brokers, and social media.

A red team is a group of trained personnel who simulate adversary behavior against a security plan, facility, or principal in order to identify weaknesses before a real adversary finds them. Red teaming is a structured way to test protection against the people who would actually try to defeat it.

A static post is a fixed protective position assigned to cover a specific location, entry, or asset. Static posts complement mobile coverage and are common at residences, hotel rooms, and event venues. The operator's job at a static post is to control access and observe, not to move with the principal.

A motorcade is a coordinated convoy of vehicles used to move a principal between locations. Motorcades typically include an advance vehicle, a principal vehicle, and a follow vehicle, with additional support depending on threat profile. Motorcade movements are pre-planned and rehearsed.

Embus and debus are protective drills for moving a principal into and out of a vehicle. They cover positioning of operators, control of the door, observation of the surrounding environment, and the seconds of exposure when the principal is most vulnerable.

Personally identifiable information (PII) is data that can be used to identify a specific person, including name, address, phone number, date of birth, financial details, and location data. In executive protection, PII exposure is a primary input to threat assessments because it determines how easy a principal is to target.

A pre-operation brief is the structured meeting held before a detail begins, where operators review the principal, the threat assessment, the route, the venues, the contingencies, and the assignments. The brief ensures every operator on the detail has the same picture before the engagement starts.

An after action review (AAR) is the structured debrief held after an operation or detail to identify what worked, what did not, and what should change for the next engagement. AARs are a core practice in military and law enforcement units and are equally valuable in private executive protection.

Bodyguard is a colloquial term for a person hired to protect another individual from physical harm. In modern professional security, the term has largely been replaced by executive protection, close protection, or protective specialist, which describe the discipline more accurately and reflect the planning and intelligence work involved beyond physical presence.