Protocol Intelligence
Understand the threat environment.
Protocol Intelligence is where Protocol writes in the open. The register is analytical: each piece argues a position and shows the reasoning, rather than citing figures Protocol has no source for.
Featured
Start here.

The Convergence of Physical and Digital Security
The separation between physical and digital security is an artifact of how the industry organized itself, not of how risk actually behaves. A look at where the two meet and what it costs to keep treating them separately.
Everything here is published in the open. Nothing is gated.

The register
Each piece argues a position and shows the reasoning behind it. Protocol publishes no statistics, no incident narratives, and no vendor comparisons, because it has no source it could cite for them.
All pieces
The full index.
Topic
6 of 6 pieces
- InsightsPR-2601
The Convergence of Physical and Digital Security
The separation between physical and digital security is an artifact of how the industry organized itself, not of how risk actually behaves. A look at where the two meet and what it costs to keep treating them separately.
7 min read - GuidesPR-2602
Building a Modern Family Security Program
What a family security program contains, who owns it, and why the sequence matters more than the equipment. A structural guide for principals and the family offices that support them.
9 min read - GuidesPR-2603
Security Across Multiple Residences
Several properties, several installers, several standards, and no shared record. How to establish one baseline across residences that were never designed to be managed together.
8 min read - ResearchPR-2604
How Artificial Intelligence Is Changing the Threat Environment
Machine capability changes the economics of reconnaissance, impersonation, and scale. An assessment of which parts of the threat environment are genuinely different and which are the same problem described in new language.
10 min read - InsightsPR-2605
From Products to Systems: The Future of Integrated Security
Security is bought as products and fails as a system. On why integration is the discipline that determines outcomes, and what changes when it is designed rather than assumed.
8 min read - InsightsPR-2606
Building Security Readiness Before a Crisis
Readiness is decided long before the event. What can usefully be established in advance, what cannot, and how to tell the difference between a plan and a document.
7 min read
Protocol Intelligence
Read the next one.
Analysis and briefings for family offices, security leaders, and program managers — sent when there is something worth reading.
Protocol publishes when there is something worth reading rather than on a schedule. The address is used for briefings only, and every one carries a link to remove it.
By topic
What Protocol writes about.
Each topic carries the questions it exists to work through, whether or not anything is filed under it yet.
- ResearchLonger work on problems that do not resolve inside a single engagement.
- ReportsStructured assessments of a defined subject, written to be read once and referred back to.
- InsightsShorter arguments about how the security field is organized and where that organization produces failure.
- GuidesPractical structure for people who have to build or inherit a security program.
- CybersecurityIdentity, access, endpoints, monitoring, and the seams between them.
- Physical SecurityAccess control, surveillance, alarm response, and the design of controlled space.
- Private SecuritySecurity for principals, families, and the offices that support them.
- GovernmentHow public-sector security work is scoped, procured, and evaluated, and what that structure does to the programs it produces.
- DefenseThe engineering and organizational problems of defense-oriented systems, considered at the level of architecture rather than platform.
- Artificial IntelligenceWhat machine capability changes about reconnaissance, impersonation, and scale — and, as importantly, what it does not change.
- PrivacyExposure that is created by ordinary record-keeping rather than by attack: what is collected, who holds it, how long it persists, and what it enables..
- Critical InfrastructureFacilities and networks whose failure is felt outside their own operation.
Request tailored briefings.
Protocol produces periodic briefings written for a specific family office, executive team, or program. Those are engaged as work rather than published here.