Security Intelligence

What Is Advance Work in Close Protection? A Guide to the Pre-Arrival Process

Q: "What does an advance operative actually do?"

"An advance operative arrives at a location before the principal to assess and prepare the environment. This involves a physical survey of the venue or property (entrances, exits, areas of vulnerability), route surveys from the arrival point to the venue, liaison with venue security and management, identification of a medical facility and emergency contact numbers, identification of a safe area within the venue where the principal can be taken if an incident occurs, and preparation of a written brief for the protection team. The advance operative then remains at the venue or returns to accompany the principal from the arrival point."

Q: "Is advance work only for high-profile clients?"

"No. Advance work is appropriate for any principal whose threat assessment identifies specific risks at known locations, or for any engagement where the detail needs to operate in an unfamiliar environment. A one-day visit to a city the team has not operated in previously warrants advance work. A conference keynote by an executive with a public profile warrants advance work. The level of advance work scales with the risk and complexity of the engagement, but the principle applies broadly."

Q: "What is the difference between an advance survey and a security assessment?"

"A security assessment is a broad evaluation of threat and risk in a given environment, typically producing a written report with recommendations. An advance survey is an operational preparation activity: the advance operative surveys a specific location for a specific visit on a specific date and prepares a site brief for the protection team. A security assessment informs whether a trip should happen and at what security level. An advance survey prepares the team to execute the trip professionally."

Q: "What is a safe room in the context of advance work?"

"In advance work, a safe room is a pre-identified location within a venue where the principal can be taken if a threat emerges. It is typically a room that can be locked, is away from public access areas, has a telephone or alternative communication, and is known to the protection team and venue management before the visit. The safe room is identified during the advance survey and noted in the site brief."

Q: "Do advance operatives need different training from CP officers?"

"Advance work is a specialist discipline within close protection, not a separate profession. Experienced CP officers develop advance skills as part of their career progression. Dedicated advance training courses teach survey methodology, route assessment, liaison protocols, and site brief preparation. In larger protection details, a lead advance operative is a designated role rather than a secondary duty of a general team member."

Advance work is what separates reactive security from professional close protection. This guide explains what an advance operative does before the principal arrives anywhere.

Security Intelligence 6 min read 29 Apr 2026

Written by James Whitfield — Senior Security Consultant

Speak to the Team

Reactive security is when a close protection officer responds to a threat as it develops. Professional close protection makes reactive security the exception rather than the rule. The mechanism that achieves this is advance work.

An advance operative arrives at a location before the principal. Their job is to evaluate the environment, remove controllable hazards, establish local contacts, and prepare a brief that allows the rest of the protection team to enter that environment with full situational awareness rather than improvised responses.

The Purpose of Advance Work

The advance process is based on a straightforward principle: the more that is known about an environment before the principal enters it, the less that can go wrong.

Most security incidents involving public figures, executives, and high-profile individuals at venues occur in one of two ways. Either the threat was present in the environment and was not identified before the principal arrived, or a foreseeable situation developed that the protection team was not prepared to handle because they were unfamiliar with the layout.

Both are addressed by a competent advance.

What an Advance Survey Covers

An advance operative conducting a venue survey works through a systematic checklist. The specific items vary with the type of venue, but the core elements are consistent.

Arrival point and approach. Where will the principal’s vehicle arrive? Is the drop-off point visible from a public street? Is there a private entrance that avoids the main public area? What is the distance from the vehicle to the first interior space, and what exposure exists during that transition? The arrival point is one of the highest-risk moments in any movement.

Internal layout. The advance operative walks the venue from the perspective of the principal’s programme. Where will they enter? Where will they sit, stand, or speak? What is the route to that location? What is the route out in an emergency? Where are the stairwells, secondary exits, and service corridors? These questions cannot be answered from a floor plan. They require physical presence.

Safe area. A pre-identified room or space that can serve as a temporary refuge if a threat develops inside the venue. Requirements: lockable, away from public access, with communication capability. Identified during the survey and noted in the site brief. Venue management must know where it is and agree to its use.

Venue security. Who is the venue security manager? What is their communication channel during the event? What is their capacity to respond to an incident? What protocol exists if the protection team needs support? These questions are answered face to face during the advance, not by phone on the day.

Medical. Where is the nearest hospital with emergency capability? What is the travel time? Is there a defibrillator at the venue? Who is the designated first aid contact? In cities where ambulance response times are long or unreliable, the medical plan is part of the protection plan, not a separate consideration.

Threat-specific hazards. For principals with specific documented threats, the advance includes checks specific to that threat profile. For principals who are the subject of activist attention, the advance includes confirmation of the venue’s screening process for event attendees and identification of entry points that could be exploited by uninvited individuals.

The Site Brief

The advance operative’s output is a written site brief. This is the document that the rest of the protection team reads before entering the venue. A site brief that is not written down is a verbal account that will be partially retained and partially forgotten. The written brief is the professional standard.

A site brief covers:

Venue name, address, and physical description
Approach and arrival point: map coordinates, vehicle drop-off instructions
Internal route: from arrival to principal’s programme locations
Safe area: location, access, communication
Emergency exits: all relevant exits and their locations relative to principal’s programme
Venue security contact: name, radio channel, mobile number
Medical: nearest emergency facility, travel time, defibrillator location
Known hazards: anything identified during the survey that the team needs to know
Local emergency numbers: police, ambulance, fire for that specific jurisdiction

The brief is distributed to the full protection team before the principal’s arrival and is referred to during any handover between team members.

Multi-Location Engagements

For a principal with an itinerary across multiple venues in a single day, the advance operative may survey all locations in advance of the visit, or a two-person advance team may split between locations. The principle is that no venue on the principal’s programme is entered for the first time by the principal. Every location has been surveyed, a brief has been prepared, and the team is moving through a prepared environment.

For international travel across multiple days, the advance can involve separate operatives in each city, with the site briefs consolidated into a travel security document that covers the full itinerary. This is standard operating procedure for protection details supporting executives on international business travel. Our executive protection services describes what this looks like operationally.

Advance Work for Corporate Events

When the principal is attending an event as a speaker or keynote presenter, the advance extends to the event security operation. The advance operative liaises with event security management, confirms the VIP access arrangements, surveys the stage approach and any backstage areas, and identifies the event team’s communication protocol. For large events, the advance may take place on the day before the event, not just hours before the principal’s arrival.

For a fuller picture of how advance work integrates with event security, see our event security planning guide. For the airport and transit environment specifically – where advance work is required at arrivals, departures, and kerbside transfer points – see our airport and transit hub security guide.

Summary

Key takeaways

Advance work is where most security incidents are prevented

An attack, harassment incident, or serious embarrassment that happens to a principal in a venue that was properly advanced is rare. The advance process identifies threats, removes hazards, and prepares the team to respond to any residual risk before the principal is ever present. Reactive security, by contrast, addresses threats after they materialise.

A site brief is the advance operative's deliverable

The advance survey produces a written site brief for the protection team. It covers: approach routes, parking and drop-off point, venue layout and access routes to key areas, location of safe room, medical facility contact, venue security point of contact, and any identified hazards. Without a site brief, the protection team is improvising at the venue rather than executing a prepared plan.

Liaison with venue security is part of the advance, not an optional extra

The advance operative introduces the protection team to the venue security manager before the principal arrives. This establishes the communication channel, identifies who is in command of venue security, and confirms protocols if an incident occurs. A protection team operating in a venue where no liaison has been made is operating without a key layer of support.

FAQ

Frequently Asked Questions

An advance operative arrives at a location before the principal to assess and prepare the environment. This involves a physical survey of the venue or property (entrances, exits, areas of vulnerability), route surveys from the arrival point to the venue, liaison with venue security and management, identification of a medical facility and emergency contact numbers, identification of a safe area within the venue where the principal can be taken if an incident occurs, and preparation of a written brief for the protection team. The advance operative then remains at the venue or returns to accompany the principal from the arrival point.

No. Advance work is appropriate for any principal whose threat assessment identifies specific risks at known locations, or for any engagement where the detail needs to operate in an unfamiliar environment. A one-day visit to a city the team has not operated in previously warrants advance work. A conference keynote by an executive with a public profile warrants advance work. The level of advance work scales with the risk and complexity of the engagement, but the principle applies broadly.

A security assessment is a broad evaluation of threat and risk in a given environment, typically producing a written report with recommendations. An advance survey is an operational preparation activity: the advance operative surveys a specific location for a specific visit on a specific date and prepares a site brief for the protection team. A security assessment informs whether a trip should happen and at what security level. An advance survey prepares the team to execute the trip professionally.

In advance work, a safe room is a pre-identified location within a venue where the principal can be taken if a threat emerges. It is typically a room that can be locked, is away from public access areas, has a telephone or alternative communication, and is known to the protection team and venue management before the visit. The safe room is identified during the advance survey and noted in the site brief.

Advance work is a specialist discipline within close protection, not a separate profession. Experienced CP officers develop advance skills as part of their career progression. Dedicated advance training courses teach survey methodology, route assessment, liaison protocols, and site brief preparation. In larger protection details, a lead advance operative is a designated role rather than a secondary duty of a general team member.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.