What Executive Protection Teams Get Wrong About CBRN Threats

​There is a reasonable explanation for why most executive protection programs do not address chemical, biological, radiological, and nuclear threats in any systematic way. The threat distribution across the full population of protected principals simply does not support the investment. Physical threats — firearms, edged weapons, vehicle attacks, improvised explosive devices — account for the overwhelming majority of incidents. Building a program around the most probable threats is rational resource allocation.
The problem is not the general logic. The problem is its uncritical application to a specific subset of principals for whom the threat calculus looks genuinely different.
For individuals in that subset — senior political figures, executives in sensitive industries, dissidents, individuals involved in high-stakes litigation or financial disputes, and others who have attracted the attention of state-level or well-resourced non-state adversaries — CBRN exposure is not a remote theoretical concern. It is a documented, recurring attack methodology. And it is one that conventional protection programs are structurally unprepared to detect, prevent, or respond to.
Why CBRN Works Against Conventional Programs
Targeted chemical and radiological attacks are not chosen because they are the easiest option. They are chosen because they are effective against targets with protective security in place.
Physical security measures — advance work, access control, close protection agents, secure transportation — create barriers to direct attack. A motivated adversary with the capability to employ toxic or radiological agents can often circumvent those barriers entirely. The exposure occurs before the principal arrives at a venue, through a trusted intermediary, in a controlled environment, or via an item that was never flagged as a threat. By the time symptoms appear, the exposure is complete, the source may be untraceable, and the window for effective medical intervention may have already closed.
This is not speculation. It is the pattern that appears in documented cases spanning more than two decades. The Litvinenko poisoning in 2006 involved polonium-210 administered in a cup of tea during what appeared to be a routine meeting. The Salisbury attack in 2018 involved Novichok applied to a door handle of a private residence. The Navalny poisoning in 2020 involved a nerve agent applied to clothing. In each case, the attack succeeded not because the protective environment failed in a conventional sense, but because the threat category was outside the operational frame of reference.
The Recognition Gap
One of the most consequential gaps in conventional EP programs is not procedural — it is perceptual. Protection agents who are not trained to consider toxic exposure as a threat vector will not recognize the early indicators of an exposure event. An agent who notices that a principal appears unusually fatigued or nauseated following a meal is likely to attribute it to illness, travel fatigue, or dietary reaction. The possibility that it represents early-stage toxic exposure, and that immediate medical intervention could be decisive, simply does not enter the operational calculus.
This recognition gap cannot be closed by equipment alone. Detection technology has a role in higher-risk environments and for specific threat categories, but the first and most important layer of protection is trained human awareness — agents who understand what they are looking for and have protocols in place to act when they see it.
Matching Program Investment to Principal Risk Profile
Not every protected principal requires CBRN integration in their security program. The investment should follow an honest threat assessment that asks: Who is this person? What adversary categories are plausible given their profile, activities, and operating environments? What is the consequence of a successful attack?
For principals whose honest threat assessment places them in elevated-risk categories, the cost of basic CBRN integration is modest relative to the gap it closes. Food and beverage protocols, surface awareness in advance work, medical planning that accounts for toxic exposure, and agent training in recognition and early response do not require specialized equipment or a fundamental restructuring of the program. They require awareness, planning, and the willingness to extend the threat frame beyond the familiar.
For principals at the higher end of the risk spectrum — those operating in environments where state-level adversaries are a credible concern — a more comprehensive assessment of CBRN vulnerability, conducted by advisors with direct operational experience in this threat category, is a reasonable and proportionate step.
The firms and programs that take this seriously do so quietly. That is, in itself, part of the protective posture.