Protective Detail Retainer

Protective Detail Retainer: Operational Service Playbook

Deliverable EP-013. Structure per cc02-standards/SERVICE-STANDARD.md. Every watch item binds a tripwire, a cadence, and an escalation route, or it is removed.

Document Control

Field	Value
Service Reference	[REF-YYYY-###]
Classification	internal
Version	0.1.0
Prepared By	[Operations Manager]
Effective Date	[YYYY-MM-DD]
Term	[12 Months]

Scope, Authorities & Limitations

This is a monitoring/operational service, not an investigation, a guarantee of detection, or legal advice. Collection is limited to lawful, authorized sources within the agreed scope; no unlawful access, intrusion, pretexting, or surveillance of non-consenting third parties is performed. Alerting is best-effort within the stated SLA and does not warrant prevention of any event.

Service Definition and Scope Boundaries

• Inclusions: Provision of executive protection operators, detail planning, local security advances, and vehicle transportation.
• Exclusions: Long-term static guard forces (unless added via riders), self-performed technical surveillance counter-measures (TSCM is available as a brokered inspection service under EP-031), and tactical firearms training for client staff.

Tier Structure

• Tier 1 (Business Hours): Single Operator, 8-hour daily coverage, business hours only.
• Tier 2 (Extended): Two Operators, 12-hour daily coverage, includes evening events.
• Tier 3 (Comprehensive 24-7): Dedicated Detail Team, 24-7 coverage, includes Detail Leader (DL), static security posts, and dedicated drivers.

Staffing and Qualification Standard

The operational hierarchy and qualifications are defined by role:

• Operator: Minimum [N] years EP experience; current CCW and First Aid/CPR certifications; regional licensing registry [LICENSE REF].
• Detail Leader (DL): Minimum [N] years EP experience; completed tactical leadership course; responsible for field operations and CP coordination.
• Operations Manager: Minimum [N] years operations management; oversees staffing, contracts, and vendor draws.

1. Scope & Watch Criteria / Tripwires

Watch Item	Indicator	Tripwire Threshold	Severity (L×I)	Escalation Route
Regional Threat Level	Consular warning level change	Threat score increases to 11 or higher	Elevated (11-15)	Notification to TL and Operations Manager
Operator Status	Check-in missed by operator	Delay exceeds [N] minutes past check-in time	High (16-20)	Alert to Detail Leader and CP
Local Protest / Event	Active protest near venue	Distance under [N] meters from principal	High (16-20)	Evacuation alert to DL and driver

2. Collection Cadence & Sources

Source/Lane	Collection Method	Cadence	Source Grade	Owner
Threat alert feed	ART-threat-alert-stream	Real-time push	B2	Detail Intelligence Officer
Team Location	GPS tracker check	Continuous	A1	Detail Leader
Regional News	Media scan	Every [N] hours	C3	Detail Intelligence Officer

3. Reporting Cadence & Product Format

Product	Trigger/Cadence	Format	Recipient	Channel
Shift Handover	End of shift	Shift Log Table	Operations Manager	Secure Portal
Daily Brief Digest	Daily at [07:00] / [18:00]	Markdown Brief	Detail Leader / Operator	Secure Chat
Monthly Review	Monthly	PDF Executive Summary	Client	Secure Email

4. Escalation & Notification Triggers

Severity Tier	Trigger Condition	Notify	Method	Acknowledgement Target
Low	Routine log entry	Operations Manager	Shift log update	24 Hours
Elevated	Alert score 11-15	Detail Leader, TL	Secure Chat	1 Hour
High / Critical	Check-in miss or direct threat	DL, Operations Manager, TL	Secure Call & Chat	5 Minutes

5. Service Levels (SLA)

Activation SLA

• Tier 1: From receipt of ART-engagement-order, boots-on-ground within [N] hours.
• Tier 2: Boots-on-ground within [N] hours.
• Tier 3: Boots-on-ground within [N] hours.
• Mobilization Checklist: Must verify licensing, insurance limits, local permits, and region packages per BIZ-003-mobilization-package before dispatch.

Key Performance Indicators (KPIs)

Metric	Target	Measurement	Reporting	Remedy/Credit
Response-Time Adherence	100% SLA compliance	Dispatch logs vs boots-on-ground	Monthly	Retraining of dispatch crew
Coverage-Hours Delivered	100% contracted hours	Roster hours vs contract	Monthly	Refund of missing hours prorated
Incident-Free Rate	100% (no principal injury)	Incident log	Continuous	Full service audit
Report Timeliness	95% within timeline	Log timestamps	Monthly	Staff review

Surge Model

• Surge staffing requests draw from the BIZ-006-pre-vetted-vendor-roster.
• Vetting floor: Surge personnel must hold active certifications and background clearances.
• Ratio cap: Surge staff shall not exceed [N]% of the total detail size.

6. Review & Renewal

• Service Review: Monthly operational review between client representative and Operations Manager.
• Change-Control: Any scope modifications require written addendums to ART-engagement-order.
• Termination: Retainer termination requires [N] days written notice. Stand-down fees are billed at [N]% of the standard rate.

7. Quality Assurance (QA) Gates

• Post-Orders Check: Reviewed and signed by DL every [N] days.
• Supervisor Inspection: Operations Manager conducts unannounced field inspections every [N] days.
• AAR Compliance: Every detail deployment triggers a mandatory After-Action Report within 24 hours of demobilization.

8. Service Risk Register

• Risk 1: Surge staff unavailability. Likelihood (2) × Impact (4) = 8 (Moderate). Mitigation: Maintain partnerships with three independent roster suppliers.
• Risk 2: Communication hardware blackout. Likelihood (3) × Impact (3) = 9 (Moderate). Mitigation: Mandatory secondary satellite trackers for all regional transit.

Annex A: Source & Watch-List Register (graded)

• Graded sources used for service delivery:
  • Local police advisory desk. Grade: A1.
  • Consular database. Grade: A2.

Annex B: Onboarding / Offboarding & Data-Handling Checklist

• Onboarding Checklist:
  • Verify contract signature.
  • Issue ART-engagement-order.
  • Pull [EP-005-residential-security-survey].
  • Check operator licensing.
• Offboarding Checklist:
  • De-provision security credentials.
  • Archive operational shift logs.
  • Conduct client exit debrief.
• Data-Handling: Store principal travel data on encrypted drives; destroy logs after [N] days.

END OF SERVICE PLAYBOOK

Model wiring

Generated from cell frontmatter at publish time.

• Inputs: EP-005, EP-009
• Requires: ART-vendor-roster (from BIZ-006), ART-engagement-order (from BIZ-003), ART-threat-alert-stream (from SYS-008)