Define a narrow, approved personal-exposure scope
Executive Protection is a specialised external-risk enquiry, not permission to gather unrestricted information about an individual. Begin with the organisation's approved purpose, the people who are legitimately in scope and the categories of exposure the service is expected to address. The responsible executive or authorised organisational process should establish those boundaries.
Distinguish professional impersonation and business exposure from private activity outside the agreed remit. A public match to a name may refer to another person or unrelated context. Findings need careful attribution, restricted access and a reviewer who can evaluate the business significance without overstating certainty.
Keep escalation and external action accountable
Confirm current Fortra service coverage and what information the customer must provide. Establish secure reporting, evidence retention and who may see individual findings. A demonstration should use approved examples and should not require collecting unnecessary private details.
Define the approval path for a response involving security, communications or legal advisers. External platform reports or other interventions need the appropriate authority and evidence; monitoring alone does not authorise action on someone's behalf. Handover should contain the agreed scope, identity-disambiguation process, escalation contacts and review triggers when an executive changes role. Avoid guaranteeing personal safety, complete exposure discovery or removal of all unwanted content. The proposal should state exactly which service activities are contracted.
Evidence to request for this scope
- Approve the named scope, identifiers and business-purpose boundaries through the authorised process.
- Validate attribution and false-match correction using controlled examples.
- Restrict individual evidence access and document approval for any external response.