The corporate governance environment for executive protection has shifted in a specific direction over the past 18 months, and if you’re a Boca Raton corporate executive or family office principal, you’re operating in that shifted environment whether you’ve engaged with it explicitly or not.
I’ll tell you what boards, insurers, and institutional investors actually expect now.
Our coverage on why boards must prioritize CEO protection covers the governance framework specifically. Related coverage on executive protection in Boca Raton addresses the specific Boca architecture.
What actually changed after Thompson
Brian Thompson’s murder on December 4, 2024 changed the governance conversation about executive protection in a way no incident in recent memory had done. The October 2025 World Security Report from Allied Universal documented the shift specifically.
97 percent of global institutional investors say companies should invest in security for their executives. 42 percent of corporate security chiefs reported significant increases in threats against executives by late 2025. 44 percent are actively monitoring online threats against leadership. 35 percent provide close protection personnel to executives.
The specific thing that changed is not the underlying threat environment. The threats existed before December 2024. What changed is that boards, D&O insurers, institutional investors, and regulators started treating executive protection as a documented risk management category rather than as a discretionary perk that the executive team handled privately.
If your current EP arrangement is informal, unmethodical, or under-documented, the governance question about it will be raised at the next material risk review whether you initiate the conversation or not.
What boards actually want to see
The specific documentation and framework I’ve seen boards ask for consistently now includes several elements.
A documented threat assessment methodology. Not “we did an assessment once.” A structured, ongoing methodology that produces threat assessments on defined intervals and updates them when relevant. The assessment establishes the basis for the protection program.
A documented protection architecture. Which principals are covered. What coverage. What operational protocols. What thresholds trigger escalation. This gets reviewed by risk committees, D&O insurers, and sometimes external audit.
Reporting frameworks. Ongoing metrics that demonstrate the program is functioning as intended. Incident reports when incidents occur. Detail activity logs. Training records for protective personnel. Insurance-ready documentation for eventual claims scenarios.
Cost management and governance discipline. The program has to demonstrate value and accountability with the same rigor applied to other material corporate spending.
Alignment with corporate governance framework. The EP program has to fit into the broader corporate risk management architecture rather than operating as a private arrangement that lives outside governance visibility.
The family office parallel
For principals whose profile includes family office operations alongside corporate roles, the governance parallels apply directly.
Family offices are increasingly targeted by AI-enabled social engineering that exploits the trust patterns typical in family office operations. Voice cloning against wire transfer authorization. Deepfake video from purported principals. BEC attacks that manipulate vendor payment routing.
Our detailed coverage on family office security blind spots in 2026 covers the specific vulnerability categories.
The 2026 Verizon Data Breach Investigations Report documented that third-party involvement in breaches has reached 48 percent — up 60 percent year-over-year. That enterprise statistic applies directly to family office operations where vendor and advisor relationships are extensive and often operate on relatively informal authentication protocols.
Family office insurance carriers and family office boards now expect the same documentation and governance discipline that Fortune 500 boards expect for EP.
The specific Boca profile
Boca Raton’s operational profile combines corporate concentration with UHNW residential density. The Boca Raton Resort & Club, Royal Palm Yacht & Country Club, and St. Andrews Country Club anchor residential luxury. The corporate corridor along Federal Highway and around the airport concentrates executive presence.
For Boca principals whose profile combines corporate visibility with residential exposure, the security architecture has to satisfy both dimensions simultaneously. Personal security at the residence. Executive protection during business operations. Transition security between them. Family member protection if the profile requires it.
Rachelle Blair-Frasier’s ongoing coverage at Security Magazine has documented the corporate security industry’s adaptation post-Thompson. If you want to understand what the current expectations look like from the industry perspective, that’s the source I’d read.
What corporate governance now expects
The specific things I’ve seen become standard governance expectations over the past 12 months:
– Formal threat assessments updated annually or when material changes occur – Documented protection architecture with clear scope, protocols, and escalation criteria – Detail activity logs and incident reports – Training and qualification documentation for all protective personnel – Insurance coordination and claim-ready documentation – Cost management framework with governance visibility – Alignment with broader corporate risk management architecture
If your current arrangement doesn’t produce all of these, you have a gap that will be raised the next time your board reviews material risks — which for most Fortune 500 companies is a quarterly or semi-annual conversation.
What I'd recommend
If you’re a Boca corporate executive or family office principal, three practical priorities.
Assess whether your current EP architecture matches the post-Thompson governance environment. If your arrangement predates December 2024, it’s probably informal in ways the current environment doesn’t accept.
Get the documentation dimension right. This is what boards, insurers, and investors ask about specifically.
Integrate your personal, family, and corporate security architecture rather than running them as separate arrangements. Fragmentation is where the governance questions concentrate.
Where to Go From Here
Start with the Board-Level Risk & Continuity Oversight Checklist — the 15-point framework designed specifically for board-level review of executive protection.
If you’re ready for a confidential conversation, request an audit here. We assess architecture against the governance environment your board actually operates in.
For the residential architecture alongside executive protection, read our estate security coverage for Boca Raton.
I’m John Hamilton, HKDS founder. We provide executive protection, corporate security integration, and residential security for Boca Raton corporate executives and family offices. Licensed Florida Class B (B 3500148), D, and G. Contact us.