Threat Assessment Flashcards

What is the difference between a 'threat' and a 'risk' in close protection?

Answer: A threat is a potential danger; risk is the likelihood and impact of that threat materialising

A threat is a potential source of harm (e.g., a stalker). Risk is the combination of the likelihood of that threat materialising and the potential impact if it does. Risk = Threat × Vulnerability × Impact.

Which factor is NOT typically considered in a close protection threat assessment?

Answer: The principal's favourite colour

A threat assessment considers the principal's profile, known threats, the political/security environment, and operational factors. Personal preferences like favourite colour are irrelevant to security planning.

What is 'OSINT' and how is it used in threat assessment?

Answer: Open Source Intelligence — publicly available information used to assess threats

OSINT (Open Source Intelligence) is intelligence gathered from publicly available sources such as social media, news reports, and public records. It is used to identify potential threats and assess the security environment.

What is 'counter-surveillance' in close protection?

Answer: Techniques used to detect if the principal or team is being watched or followed

Counter-surveillance involves specific techniques and procedures to detect, identify, and neutralise hostile surveillance of the principal or close protection team.

In threat assessment, what does 'capability' refer to?

Answer: Whether a potential adversary has the means, resources, and skills to carry out an attack

Capability refers to whether a threat actor possesses the necessary means, resources, skills, and opportunity to carry out an attack. Along with intent, it determines the credibility of a threat.

What is a 'vulnerability assessment' in close protection?

Answer: An evaluation of weaknesses in the security arrangements that could be exploited by a threat

A vulnerability assessment identifies weaknesses or gaps in the security arrangements around the principal that could be exploited by a threat actor. It helps prioritise where security measures need to be strengthened.