Scroll to top
How to Choose an Executive Protection Company

Security Intelligence

How to Choose an Executive Protection Company: A Buyer's Checklist

Know what to demand from any executive protection provider before you commit. Vetting standards, red flags, contract terms, and what a professional brief looks like.

Security Intelligence 7 min read 23 Apr 2026

Written by James Whitfield — Senior Security Consultant

The executive protection industry has no shortage of providers. The range of quality is correspondingly wide. Some firms operate to a documented professional standard with trained officers, proper legal frameworks, and accountability structures. Others are built on marketing materials and military backgrounds with nothing systematic behind them.

This guide sets out what a professionally run provider should be able to demonstrate, written for anyone who has not commissioned this type of service before and wants to make the selection on substance rather than presentation.

What to Ask About Vetting Standards

The single most important indicator of a provider’s quality is how they vet the operators they deploy.

Ask specifically: what certification do your officers hold? The SIA Close Protection licence is the legal minimum for UK operators. For international deployments, CPO certification from ASIS International or an equivalent national regulatory authority is the professional benchmark. Ask for the specific licence number and issuing body for the officer being proposed for your engagement. Not a general statement about company-wide standards. The specific person.

Ask: what background checks are conducted on operators? Criminal record checks, right-to-work verification, reference checks from previous clients or employers, and verification of all claimed qualifications should all be standard. Ask for the procedure in writing. A professional firm has one. They can share it.

Ask: what is the operator’s experience in the specific country you are visiting? This matters more than total years of service. A CP officer with 15 years of UK experience but no operational history in Bogota is not the right person for a Bogota engagement. Local knowledge of terrain, current threat patterns, police relationships, hospital locations, and emergency procedures is acquired through in-country work. It cannot be substituted with general competence.

Red Flags That Indicate a Problematic Provider

No named operators. If a provider cannot or will not tell you the name and credentials of the officer being deployed until arrival, do not proceed. You cannot vet someone you have not been told about.

No documentation of vetting. Professional firms have documented procedures and can produce evidence of checks conducted. A verbal assurance that “all our operators are thoroughly vetted” without supporting documentation is not adequate for a service with this level of responsibility.

Offshore registration with no local presence. A firm registered in a jurisdiction with minimal regulatory oversight, citing no in-country office or local liaison capability, operates without meaningful accountability. When something goes wrong, there is no framework for recourse.

Pricing significantly below market rate. The indicative bodyguard cost breakdown on this site gives you a baseline for different cities and risk tiers. Quotes significantly below those figures reflect reduced quality somewhere: less experienced officers, no genuine vetting, inadequate insurance, or all three simultaneously. Low price in this context is not a value proposition.

No written threat assessment. A professional EP firm should conduct or commission a written threat assessment before specifying the detail. A firm that skips this step and goes straight to pricing has not done the professional work the engagement requires. The specification should follow the threat analysis, not precede it.

What a Professional Brief Looks Like

When you commission a professional provider, you should receive before deployment:

A written confirmation of the operator’s identity, licence number, and issuing authority. A schedule of charges covering all costs including vehicle, per-diem, and any advance work. The communication plan for your engagement: check-in frequencies, emergency contact hierarchy, and what happens if contact is lost. The operator’s protocol for specific scenarios relevant to your destination, such as medical emergency, threat escalation, and evacuation procedures.

This does not have to be a lengthy document. A competent provider produces all of this in a structured brief within 24 hours of engagement. If you receive a single-page PDF with a daily rate and a company logo, you have not received a professional brief. You have received a price sheet.

Contract Terms to Review

The engagement contract should specify: the scope of service clearly, what is and is not included in the daily rate, the cancellation policy, liability and insurance terms, and confidentiality obligations on both sides.

Pay particular attention to the liability clause. A professional provider carries professional indemnity cover. If something goes wrong on an engagement, that cover should respond to a legitimate claim. If the contract includes a blanket liability waiver that removes all recourse, that is a problem to address before signing, not after an incident.

The Trial Engagement

For a new provider relationship that you expect to be ongoing, a trial engagement on a lower-stakes visit is sensible practice. Commission the provider for a domestic or moderate-risk trip before deploying them for a high-risk engagement. Assess their communications, punctuality, advance work quality, how their officer presents and behaves with the principal, and whether the brief they provided matched what was delivered.

A single properly observed engagement tells you more than any amount of marketing material, testimonials, or credentials documentation.

For executive protection arrangements, see our executive protection service. For single-officer CP arrangements in moderate-risk environments, see bodyguard hire. If you want guidance on evaluating a specific provider’s credentials for a particular engagement, our team can advise before you commit.

Summary

Key takeaways

1
1
Vetting standards are non-negotiable

Ask for the specific licence number and issuing body for each officer. Ask for the vetting procedure in writing. If a provider cannot produce either, do not proceed with the engagement.

2
2
Red flags are meaningful signals, not negotiating positions

No named operators, no documented vetting, offshore registration with no local presence, pricing well below market, and no written threat assessment are all signals that something substantive is missing.

3
3
A professional brief precedes every engagement

Operator identity, schedule of charges, communication plan, and scenario protocols should be in writing before deployment begins. A round-number quote with a logo is not a professional brief.

FAQ

Frequently Asked Questions

At minimum, officers should hold the SIA Close Protection licence (UK) or an equivalent national regulatory certification. For international deployments, CPO certification from ASIS International or an equivalent recognised body is the professional standard. Ask for the specific licence number and issuing authority for the officer being deployed, not a general statement about the company’s standards.

Ask for the vetting procedure in writing. A professional firm can document: criminal record check methodology, right-to-work verification, reference check process, and qualification verification. If the answer is a verbal assurance without supporting documentation, that is not adequate for a service with this level of liability.

Yes. You should know the name, licence number, and relevant operational experience of the officer being deployed before you agree to the engagement. A provider who cannot or will not disclose this until arrival has not demonstrated adequate transparency.

At minimum: the operator’s identity and licence details, a schedule of all charges, the communication plan for the engagement including check-in frequencies, and the protocol for specific scenarios relevant to your destination. A professional provider produces this within 24 hours of engagement.

Yes, and for a new provider relationship that you expect to continue, it is sensible practice. Commission the provider for a domestic or moderate-risk visit before deploying them for a high-risk engagement. A single engagement tells you more about operational quality than any amount of marketing material.
Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.

Confidential. Your details are never shared with third parties.