Frequently Asked Questions
Common questions from CEOs, founders, and board members about executive security and risk management.
What is executive risk triage?
Executive risk triage is a rapid, confidential advisory session (typically 60-90 minutes) designed to answer one critical question: "Do I need to do something about this threat or not?" Unlike traditional security assessments that can take weeks, executive risk triage provides immediate clarity on emerging threats, reputational exposure, or security signals. It includes threat signal review, visibility and context evaluation, proportionate guidance, and clear next-step decisions. This service is ideal for executives facing time-sensitive situations like sudden media attention, activism targeting, digital exposure concerns, or credible threat indicators.
How do I know if my company needs a security assessment?
Your company likely needs a security assessment if you cannot confidently answer these questions: Do we have a clear understanding of our top three enterprise security risks? Who owns executive protection and crisis response at the leadership level? When was our last independent security risk assessment conducted? Can we demonstrate board-level visibility into physical security and executive risk exposure? Other indicators include: recent funding rounds or IPO that increased public visibility, executive travel to high-risk destinations, workplace violence concerns or threats, regulatory compliance requirements (such as California SB 553), leadership transitions, or if your last assessment was more than 18 months ago. Security assessments provide independent validation of your current posture and identify gaps before they become incidents.
What does California SB 553 require from employers?
California Senate Bill 553, effective July 1, 2024, requires nearly all California employers to establish, implement, and maintain a Workplace Violence Prevention Plan. Key requirements include: conducting workplace violence hazard assessments, implementing violence prevention measures, providing employee training on workplace violence prevention, establishing procedures for reporting and responding to workplace violence incidents, maintaining records of violent incidents and training, and ensuring the plan is accessible to employees and Cal/OSHA representatives. The law defines workplace violence broadly to include threats, physical attacks, and behavior causing reasonable fear of injury. Employers must involve employees in developing and implementing the plan. Non-compliance can result in Cal/OSHA citations and penalties. Ken Carrasco Solutions Group helps organizations achieve SB 553 compliance through threat assessment program development, policy creation, training implementation, and ongoing program governance.
What's the difference between executive protection and executive risk advisory?
Executive protection focuses on the operational delivery of physical security—close protection agents, advance work, secure transportation, and tactical threat mitigation. Executive risk advisory operates at the strategic level—helping executives and boards understand their risk exposure, make informed decisions about security investments, and develop proportionate response frameworks. Executive risk advisory answers questions like: Is our security posture aligned with our growth stage and public profile? Do we have governance structures to manage executive risk? What level of protection is appropriate given our threat landscape? Should we respond to this emerging situation or monitor it? Executive protection is tactical execution; executive risk advisory is strategic decision support. Many executives need advisory services before, or instead of, full protection programs. Ken Carrasco Solutions Group provides both strategic advisory for decision-makers and can coordinate operational protection when needed.
When should a CEO hire a security consultant?
CEOs should consider hiring a security consultant during these key inflection points: Pre-IPO or major funding rounds when public visibility increases dramatically. Following activist targeting, negative media coverage, or online harassment campaigns. Before international expansion or executive travel to unfamiliar or high-risk regions. After receiving credible threats or experiencing concerning incidents. During leadership transitions when new executives need risk orientation. When board members request independent security assessment or validation. If your organization lacks in-house security expertise or leadership. Before high-visibility events, product launches, or public announcements. When implementing workplace violence prevention programs or ensuring regulatory compliance (like California SB 553). If you're experiencing rapid growth and security hasn't kept pace with your profile. The best time to engage a consultant is before an incident occurs—proactive advisory relationships provide faster response and better outcomes than crisis-driven engagements. Ken Carrasco Solutions Group offers flexible engagement models including one-time assessments, project-based work, and ongoing fractional advisory relationships.
Discuss Your Security Questions
