Surveillance, Hostile Behavior, and Attack Recognition
Hostile Surveillance
Definition
Deliberate observation of the Principal, vehicle, team, route, or routine by adversaries preparing hostile action.
Hostile surveillance matters because it is often the bridge between target selection and attack execution. Attackers need information: when the Principal leaves, which vehicle is used, which route is predictable, where the vehicle slows, how the team reacts, and where the Principal is exposed.
Hostile surveillance may be patient and methodical. It can include dry runs, repeated presence along the route, photography, filming, following vehicles, observation of entrances, or testing the security team's reaction to minor provocations.
This page should explain that hostile surveillance detection is preventive. Detecting it early may allow the team to vary routes, change timing, alter profile, report the issue, or adjust protective posture before an attack becomes possible.
Common misconceptions to correct
- Hostile surveillance is not always dramatic.
- It may look like normal city activity.
- A security driver should not wait for certainty before reporting concerns.
- Confrontation is not always the correct response.
Where this concept is treated in the books
- Security Driving - Volume I: The Foundations of Security Driving - establishes the definition, professional identity, misconceptions, attacker mindset, European context, risk, liability, and legal framework.
- Security Driving - Volume III: Advanced Security Driving - applies the discipline through tactical driving, motorcade operations, protective intelligence, route analysis, surveillance detection, attack recognition, and immediate action drills.
- The Complete Handbook of Security Driving - brings the full trilogy together as a complete professional reference for long-term study, training preparation, research, and website cross-linking.
- Book pages: Volume I | Volume II | Volume III | Complete Handbook