Company
Mission and operating principles.
To protect people, organizations, and governments by bringing technology, intelligence, systems, and operations together.
Vision
Where this is going.
To build the world's most trusted integrated security company.
Trust of that kind is earned through delivered work, and Protocol has not yet delivered it. The vision is stated as an objective the company is being built toward, not as a description of its current standing.
Held to a standard
A principle that cannot be violated is not a principle. Each of the eight below names a specific failure Protocol has decided not to commit, which is the only form a commitment can take before there is delivered work to point at.
Protocol would rather publish the weaker sentence than the one it cannot defend.
Operating principles
Eight commitments.
Each principle exists because its opposite is a common and expensive failure. They are the standards an engagement can be measured against.
01
Integration over fragmentation
Security fails between systems more often than within them.
02
Discretion by default
The work is not discussed, displayed, or attributed.
03
Intelligence before action
Decisions are made against a described environment, not an assumption.
04
Technology with accountability
Every automated output is attributable and subject to human review.
05
Precision in execution
Specificity is the difference between a program and a purchase.
06
Long-term trust
The relationship outlasts any individual engagement.
07
Readiness over reaction
The work that matters happens before the event.
08
Security without compromise
No layer is left weak because it was inconvenient to address.
Operating model
The method, in four stages.
Every engagement runs on the same four stages. What changes between clients is the environment being assessed and the architecture that follows from it.
01
Assess
Understand the environment, assets, exposure, vulnerabilities, and objectives.
02
Design
Create an integrated security architecture across physical, digital, human, and operational systems.
03
Integrate
Coordinate technology, products, specialists, vendors, internal teams, and procedures.
04
Manage
Monitor, review, improve, document, and support the environment over time.
Hold Protocol to this.
Speak with Protocol about a security requirement, an assessment, or a program that has grown past the arrangements holding it together.