Most executive protection programs were not designed with chemical, biological, radiological, or nuclear threats in mind. This is not a criticism. The profession developed its doctrine, training standards, and operational frameworks in response to the threats that have historically been most prevalent — and those threats remain physical in nature for the vast majority of programs and principals.

But for programs that have identified, through honest threat assessment, that their principal's profile creates meaningful exposure to CBRN risk, the question becomes practical: how do you integrate CBRN awareness into an existing protective security program without disrupting operational tempo, overwhelming agents with an unfamiliar threat category, or creating a posture that is disproportionate to the actual risk?

The following framework is a starting point. It is not a comprehensive technical standard and is not intended to replace expert assessment for programs operating in the highest-risk environments. It is a structured approach to thinking through the problem and building in the most consequential protections first.

Step One: Conduct an Honest Threat Assessment
The first and most important step is an accurate characterization of the principal's CBRN risk profile. Not every individual with a security program needs CBRN integration. The investment should be proportionate to the threat.
The assessment should address several questions. What adversary categories are plausible given the principal's profile — their professional role, public visibility, industry, nationality, political affiliations, and any specific threat history? Do any of those adversary categories have demonstrated capability or intent to employ CBRN agents against individuals? What operating environments does the principal regularly occupy, and which of those environments create meaningful exposure pathways? What is the consequence of a successful CBRN attack on this specific individual — to them personally, and to the organizations and people who depend on them?
The answers to these questions determine the appropriate level of program investment. For some principals, a basic awareness integration is sufficient. For others, a more comprehensive assessment and program architecture is warranted.

Step Two: Map the Exposure Pathways
Once the threat assessment establishes that CBRN integration is warranted, the next step is a structured analysis of the specific pathways through which exposure could occur in the principal's actual operational environment.
This is not a generic CBRN hazard survey. It is a principal-specific analysis that asks: given this person's daily movements, recurring environments, travel patterns, and social and professional contacts, where are the credible points of vulnerability?
For most principals in elevated-risk categories, the relevant pathways concentrate in a manageable set of areas. Food and beverage, across all environments where the principal eats and drinks. Surfaces, particularly in environments — hotel rooms, vehicles, meeting spaces — that are accessible to unknown parties prior to the principal's arrival. Delivered items, including mail, packages, gifts, and promotional materials. Close-contact interactions with individuals whose access to the principal is not fully controlled.
Each pathway has distinct mitigation options. Mapping them before designing protocols ensures that the program addresses the actual exposure architecture rather than applying generic measures that may not fit the specific operational context.

Step Three: Build Proportionate Protocols
Protocol development should follow directly from the pathway analysis. The goal is not to create comprehensive CBRN response plans but to integrate specific, targeted measures into existing operations in ways that are sustainable and do not create operational friction that undermines compliance over time.
For food and beverage, this typically means establishing baseline control procedures for the principal's most frequent and highest-risk dining contexts — not comprehensive screening of every meal, but a clear set of standards for preparation environments, service chain, and the handling of items intended for the principal's consumption.
For surfaces and environments, this means extending advance work to include a basic environmental assessment of accommodations and meeting venues, with particular attention to areas that were accessible prior to the principal's arrival and that could serve as delivery points for contact agents.
For delivered items, this means a consistent verification protocol that applies to unexpected deliveries regardless of apparent source — with particular attention to items received in travel environments, where the verification chain is harder to maintain.
For medical planning, this means ensuring that the program's medical support architecture accounts for toxic exposure as well as physical trauma — that relevant medical personnel understand the presentation of common chemical and radiological exposures, that diagnostic escalation pathways are pre-identified, and that facilities capable of treating toxic and radiological exposures are mapped at each primary location.

Step Four: Train for Recognition, Not Response
The training objective for protection agents in a CBRN-integrated program is not to develop them into CBRN technicians or hazmat responders. It is recognition — the ability to identify indicators that warrant escalation and to act on those indicators before a situation becomes unmanageable.
This is a narrower and more achievable training objective than it might initially appear. Agents need to understand the most common exposure pathways in the individual targeting context, recognize the early-stage symptom presentations that should trigger medical escalation regardless of apparent cause, know the protocols for requesting specialized assessment when an exposure is suspected, and be familiar enough with the threat landscape to raise the possibility of CBRN exposure when a principal presents with unexplained illness following a high-risk event or environment.
They do not need to be able to identify specific agents, operate detection equipment in operational settings, or manage a contaminated casualty. Those capabilities belong to specialized response resources that should be pre-identified in the program's medical and incident response planning.
​
Step Five: Build In Review and Adaptation
CBRN integration is not a one-time exercise. The threat environment evolves, the principal's profile and risk factors change, and operational experience generates lessons that should be incorporated into protocols.
Programs that build CBRN awareness in and then leave it static tend to see compliance erode over time as agents who do not regularly encounter the threat category deprioritize the associated protocols. A structured review cadence — at minimum annually, and following any significant change in the principal's profile or threat environment — maintains the program's effectiveness and keeps the threat category in agents' operational awareness.
A Note on Expert Assessment
This framework is designed to help programs begin thinking through CBRN integration in a structured way. For principals at the higher end of the risk spectrum, and particularly for programs operating in environments where state-level adversaries or sophisticated non-state actors are plausible threats, the framework is a starting point — not a substitute for assessment by advisors with direct operational experience in this threat category.
The distinction matters. A program built on generic CBRN awareness, without the benefit of expert assessment tailored to the specific principal and threat environment, will address the most visible gaps but may miss the exposure pathways and adversary methodologies that are most relevant to the actual risk. For principals whose profile warrants serious CBRN consideration, that gap can be consequential.

Public discourse about radiological threats tends to focus on large-scale scenarios — a radiological dispersal device detonated in a city center, contamination of a water supply, or the theft of radioactive material from a medical or industrial facility. These scenarios are legitimate planning concerns for public safety and homeland security programs. But they represent a different threat category than the one most relevant to executive protection and private security.
The radiological threat to high-profile individuals is small, targeted, and personal. It does not require the acquisition of large quantities of material, the construction of a device, or the operational complexity of a mass-casualty attack. It requires access to a radioactive source, a delivery method, and proximity to a specific person. All three have been demonstrated in at least one documented case with global implications.
The Litvinenko Case as an Operational Reference Point
The 2006 poisoning of Alexander Litvinenko in London remains the most thoroughly documented case of deliberate radiological exposure targeting a specific individual. The agent used was polonium-210, an alpha-emitting radioactive isotope that is extremely difficult to detect without specialized equipment, produces no immediate visible symptoms upon exposure, and causes progressive radiation sickness that is typically fatal without very early intervention.
The operational details of the Litvinenko case are instructive for protective security planning. The poisoning occurred during a meeting at a London hotel — a controlled, seemingly secure environment. The polonium was administered in a cup of tea. Litvinenko experienced initial symptoms consistent with illness and was not initially assessed as a radiation exposure case. By the time the correct diagnosis was made, the exposure was weeks old and had progressed beyond the point where effective treatment was possible. He died 23 days after the meeting.
The 2018 Salisbury attack involving Novichok nerve agent demonstrated a related principle through a different mechanism: that a toxic agent can be delivered to a specific individual through a surface contact method — in that case, a door handle — that requires no direct interaction between the attacker and the target.
What This Means for Protective Programs
The radiological threat in the individual targeting context has several characteristics that distinguish it from physical threat categories and that have direct implications for protective security planning.
Invisibility at the time of exposure is the most significant. Unlike a firearm, an explosive device, or a physical altercation, a radiological exposure produces no immediate, observable event. There is no moment of attack that agents can detect, react to, or intervene in. The exposure is already complete by the time any awareness is possible.
Delayed symptom onset compounds this. Alpha and beta emitters — the isotopes most plausible for individual targeting given their availability and the operational requirements of covert delivery — typically produce symptoms over a period of hours to days. The window between exposure and symptom onset is a window in which the source environment can be left, the delivery mechanism can be removed, and the operational trail can go cold.
Non-specific early presentation means that early symptoms of radiation exposure — fatigue, nausea, gastrointestinal distress — are clinically indistinguishable from common illness without specific diagnostic testing. Medical personnel who are not considering radiation exposure as a differential diagnosis are unlikely to order the tests that would identify it.
Planning Implications
For protective programs operating in environments where the radiological threat to the principal is a credible concern, several planning considerations are relevant.
Medical planning should explicitly include radiological exposure as a contingency. This means identifying, in advance, medical facilities with the diagnostic and treatment capability to manage acute radiation syndrome — not simply the nearest emergency department. It also means ensuring that medical support personnel within the program are aware of radiological exposure presentations and know to raise the possibility when a principal presents with unexplained illness following travel or meetings in elevated-risk environments.
Advance work in high-risk environments can incorporate basic radiological awareness without requiring agents to become radiation safety professionals. Understanding where and how radioactive sources are plausibly accessible, recognizing the environments in which covert delivery is most feasible, and knowing the indicators that might suggest a compromised environment are all trainable skills that extend the program's protective reach into this threat category.
Post-incident environment assessment — the systematic evaluation of spaces a principal has occupied when an unexplained illness occurs — is a capability that programs serving elevated-risk principals should have pre-planned rather than improvised.
Radiological threats to individuals are rare. That rarity should not be confused with impossibility, particularly for principals whose profile places them within the range of adversaries who have demonstrated both the intent and the capability to employ this methodology.

​There is a reasonable explanation for why most executive protection programs do not address chemical, biological, radiological, and nuclear threats in any systematic way. The threat distribution across the full population of protected principals simply does not support the investment. Physical threats — firearms, edged weapons, vehicle attacks, improvised explosive devices — account for the overwhelming majority of incidents. Building a program around the most probable threats is rational resource allocation.
The problem is not the general logic. The problem is its uncritical application to a specific subset of principals for whom the threat calculus looks genuinely different.
For individuals in that subset — senior political figures, executives in sensitive industries, dissidents, individuals involved in high-stakes litigation or financial disputes, and others who have attracted the attention of state-level or well-resourced non-state adversaries — CBRN exposure is not a remote theoretical concern. It is a documented, recurring attack methodology. And it is one that conventional protection programs are structurally unprepared to detect, prevent, or respond to.
Why CBRN Works Against Conventional Programs
Targeted chemical and radiological attacks are not chosen because they are the easiest option. They are chosen because they are effective against targets with protective security in place.
Physical security measures — advance work, access control, close protection agents, secure transportation — create barriers to direct attack. A motivated adversary with the capability to employ toxic or radiological agents can often circumvent those barriers entirely. The exposure occurs before the principal arrives at a venue, through a trusted intermediary, in a controlled environment, or via an item that was never flagged as a threat. By the time symptoms appear, the exposure is complete, the source may be untraceable, and the window for effective medical intervention may have already closed.
This is not speculation. It is the pattern that appears in documented cases spanning more than two decades. The Litvinenko poisoning in 2006 involved polonium-210 administered in a cup of tea during what appeared to be a routine meeting. The Salisbury attack in 2018 involved Novichok applied to a door handle of a private residence. The Navalny poisoning in 2020 involved a nerve agent applied to clothing. In each case, the attack succeeded not because the protective environment failed in a conventional sense, but because the threat category was outside the operational frame of reference.
The Recognition Gap
One of the most consequential gaps in conventional EP programs is not procedural — it is perceptual. Protection agents who are not trained to consider toxic exposure as a threat vector will not recognize the early indicators of an exposure event. An agent who notices that a principal appears unusually fatigued or nauseated following a meal is likely to attribute it to illness, travel fatigue, or dietary reaction. The possibility that it represents early-stage toxic exposure, and that immediate medical intervention could be decisive, simply does not enter the operational calculus.
This recognition gap cannot be closed by equipment alone. Detection technology has a role in higher-risk environments and for specific threat categories, but the first and most important layer of protection is trained human awareness — agents who understand what they are looking for and have protocols in place to act when they see it.
Matching Program Investment to Principal Risk Profile
Not every protected principal requires CBRN integration in their security program. The investment should follow an honest threat assessment that asks: Who is this person? What adversary categories are plausible given their profile, activities, and operating environments? What is the consequence of a successful attack?
For principals whose honest threat assessment places them in elevated-risk categories, the cost of basic CBRN integration is modest relative to the gap it closes. Food and beverage protocols, surface awareness in advance work, medical planning that accounts for toxic exposure, and agent training in recognition and early response do not require specialized equipment or a fundamental restructuring of the program. They require awareness, planning, and the willingness to extend the threat frame beyond the familiar.
For principals at the higher end of the risk spectrum — those operating in environments where state-level adversaries are a credible concern — a more comprehensive assessment of CBRN vulnerability, conducted by advisors with direct operational experience in this threat category, is a reasonable and proportionate step.
The firms and programs that take this seriously do so quietly. That is, in itself, part of the protective posture.

Executive protection programs are built around the assessment and management of physical threats. The training curricula, standard operating procedures, and advance work protocols of the profession evolved in response to firearms, explosive devices, and vehicle-based attacks — threat categories that remain the dominant risk for most protected principals.
But well-documented historical cases demonstrate that this orientation carries a blind spot. Targeted poisoning and deliberate radiological exposure have been used against political figures, journalists, corporate executives, and dissidents in incidents that bypassed conventional protective measures entirely. In each case, the exposure occurred in environments that advance teams had cleared, through vectors that standard security protocols did not address.
For protection programs serving principals with elevated threat profiles, CBRN awareness is not an exotic add-on. It is a gap that responsible programs can no longer afford to leave unaddressed.
Potential Exposure Pathways
Targeted CBRN incidents directed at individuals most often occur through indirect and covert exposure rather than overt attack. Understanding the most common delivery vectors is the starting point for any protective mitigation effort.
Food and beverage contamination remains the most historically documented method in individual poisoning cases. The controlled environment of a restaurant, private dining room, or hotel service creates multiple points of potential access — from kitchen preparation to tableside service — that are difficult to monitor comprehensively without specific protocols in place.
Surface contact is a second significant vector. Chemical and radiological materials can be applied to door handles, vehicle interiors, hotel room surfaces, and personal items. Exposure in these cases is often delayed, with symptoms appearing hours or days after contact, making source identification difficult.
Mail, packages, and delivered items present a third pathway, particularly for principals who receive high volumes of correspondence or gifts. Items that arrive through normal channels without verification create a persistent low-level exposure risk that is easily overlooked.
Environmental and venue-based hazards — industrial chemicals, compromised HVAC systems, or deliberate introduction of agents into enclosed spaces — represent a lower-probability but higher-consequence category that warrants consideration for high-risk travel environments.
Planning Considerations
CBRN awareness can be integrated into executive protection programs without significant operational disruption. The objective is not to transform protection agents into CBRN technicians, but to build recognition and response capability into existing protocols.
Protection teams should consider the following baseline measures:
Establishing food and beverage control procedures during travel, particularly in high-risk environments or when the principal's itinerary is not closely held. This does not require comprehensive screening of every meal, but should include awareness of preparation environments and chain-of-custody for items served to the principal.
Developing a package and mail verification protocol that applies consistent screening to unexpected deliveries, regardless of apparent sender. Gifts, promotional items, and correspondence received in travel environments warrant particular attention.
Incorporating surface awareness into advance work, especially for hotel accommodations, meeting venues, and vehicles. Advance teams that are trained to recognize environmental indicators of potential contamination can serve as a meaningful first line of awareness without specialized equipment.
Identifying, in advance, medical facilities capable of treating toxic chemical and radiological exposures at each primary travel location. Most advance work identifies trauma centers; fewer programs identify facilities with toxicological treatment capability. In the event of a suspected exposure, speed of appropriate medical intervention is critical.
Briefing the principal on recognition and reporting. Principals who understand early symptom presentations — and who are conditioned to report unusual sensations, tastes, or exposures immediately — substantially improve the program's ability to respond before an exposure becomes a serious medical event.
Further Reading
For those seeking to understand the documented historical record of targeted CBRN use against individuals, the following public-source materials provide substantive background:

• The Litvinenko Inquiry (UK Public Inquiry, 2016) — the full public report on the polonium-210 poisoning of Alexander Litvinenko in London
• BBC News coverage of the investigation into the poisoning of Alexei Navalny with a Novichok nerve agent
• Reuters and international reporting on the use of VX nerve agent in the assassination of Kim Jong-nam in Kuala Lumpur