Who’s who in a protection detail.
Security proposals are full of abbreviations — PPO, SAP, RST, PES — and they are rarely explained, which makes it very hard to tell whether you are being sold something you need. Here is what each role actually does, in plain terms, and how many of them a private client usually requires.
The roles
- Detail leader (TL)
- Owns the plan and the decision. Sets the route and timings, briefs everyone, holds the relationship with the principal and their office, and is the one person accountable when something changes. On a small job this is also the officer standing next to you.
- Personal protection officer (PPO)
- The officer closest to the principal, responsible for the few feet around them. Reads rooms, manages introductions and interruptions, and moves the principal away from a developing problem long before it becomes one. On most private work, this is the whole detail.
- Personal escort section (PES)
- The team around the principal when a single officer cannot cover the angles — a red-carpet arrival, a crowded concourse, a hostile press pen. Formation work: each officer owns an arc, and nobody watches the principal.
- Security advance party (SAP)
- Goes ahead. Walks the venue, finds the second exit, agrees where the car waits, meets the house manager or head of security, confirms the lift works and the table is where it was promised. Most of what looks effortless on the day was done by the advance the day before.
- Residential security team (RST)
- Covers the house rather than the person — access control, deliveries, contractors, overnight presence, and the alarm response that actually involves someone walking the perimeter. Usually the least visible part of a detail and frequently the most useful.
- Security driver
- Not a chauffeur who has done a course. Plans and drives the route, keeps the vehicle in the right place at the right moment, never leaves it unattended, and understands that where a car waits is a security decision, not a parking one.
- Close protection medic
- A team member with trauma and pre-hospital training carried in addition to their protection role. Relevant for remote locations, large events, older principals and anywhere the ambulance is genuinely twenty minutes away — and irrelevant for a London dinner.
- Operations / control
- For larger or longer details: one person holding comms, timings and the changing plan from a fixed point, so the officers on the ground are not also trying to run the diary. On a two-officer job this is the team leader's phone.
How many of these do you actually need?
For most private clients: one or two. A single PPO who can also drive covers an enormous amount of ordinary life — evenings, travel, a period of unwanted attention. A second officer appears when the principal and the family separate, when a venue needs an advance, or when the day runs long enough that one person cannot stay sharp through all of it.
Full formations — escort sections, dedicated advance parties, medics, a control room — belong to touring artists, large public events, hostile environments and genuine sustained threat. If a proposal for a quiet family in a quiet county arrives with eight roles on it, the right question is which of them the family is being protected from.
The honest measure of a detail is not how many people are on it. It is whether the number can be justified by something specific.
What to ask when you see these titles
Ask which roles are actually being filled and by whom; whether the same officers return each time or the firm rotates whoever is free; whether every named person holds a current SIA close protection licence you can check on the public register; and what specifically changes if you remove one of the roles from the quote. A firm that can answer the last question clearly is pricing a plan. One that cannot is pricing a package.
Written by the founder, First Class Executive Security
30+ years in the security industry, 20+ in close protection