Special Services • SP-11
Human Risk
The most reliable way in is still the person.
Scope
What the engagement covers.
Social engineering targets people around the principal as much as the principal. This service measures and reduces that exposure across executives, assistants and household staff.
Included capabilities
- Targeted social engineering simulation against the protected group
- One-to-one executive security briefings tailored to actual exposure
- Assistant, driver and household staff protocols and training
- Insider risk assessment within the immediate circle
- Behavioural coaching on travel, disclosure and routine variation
Outputs and deliverables
- Human risk exposure assessment
- Simulation results with individual debriefs
- Staff and household security protocols
- Refresher and re-testing schedule
Workflow
How it is delivered, step by step.
Each step has an owner, an entry condition and an artefact that has to exist before the next step begins.
01AssessExposure of the principal and everyone with proximate access.
02SimulateControlled, consented social engineering against the group.
03BriefIndividual briefings using the simulation results as evidence.
04ProtocolWritten protocols for assistants, drivers and household staff.
05RefreshPeriodic re-testing and refresher briefing.
Use cases
Where this is typically applied.
Households with significant domestic staff turnover
Executives after a successful social engineering attempt
Delivery model
The operating pattern for Special Services.
The same delivery discipline applies across every capability in this line, so combined engagements stay coherent.
Assess
Threat picture, exposure, routine analysis and protective gap review.
Harden
Identity, device, communication, physical and information-domain controls.
Monitor
Continuous intelligence, exposure detection and early warning.
Respond
Containment, recovery, investigation and coordinated escalation.
Review
Post-incident learning, control adjustment and periodic reassessment.
Integration
- Client corporate security, legal counsel and communications functions.
- Existing IT and identity teams for account and device remediation.
- Insurers, local providers and law enforcement liaison where authorized.
- Family office and household staff protocols for the personal perimeter.
Engagement approach
Every mandate is scoped in writing with a named sponsor, defined coverage hours and a stated legal basis. Discretion applies to method and reporting channel, never to whether the work is lawful, authorized and recorded.
Related
Other capabilities in Special Services.
SP-01
Executive Digital Protection
Protect the person, not only the corporate perimeter.
SP-02VVIP Close Protection
Physical protection planned from intelligence, not from habit.
SP-03TSCM
Confirm the room is not listening.
SP-04Counter-Surveillance
Detect the people watching before they act.
SP-05Threat Intelligence
Early warning built from sources the principal cannot monitor alone.
SP-06Dark Web Monitoring
Find the exposure before it is used.
SP-07Identity & Reputation Protection
Defend the name as carefully as the person.
SP-08Private Investigation
Lawful fact-finding that stands up when it is challenged.
SP-09Strategic Communications
Control the narrative before it controls the outcome.
SP-10Incident Response
When it has already happened, speed and evidence both matter.
SP-12Clandestine Offensive Security
Adversary emulation run without warning the defenders.