Executive Protection Lessons From San Antonio
The recent decision to discontinue overnight residential protection for San Antonio Mayor Gina Ortiz Jones raises a question that comes up constantly in executive protection and residential security:
When should a protection posture change?
According to Axios San Antonio, Jones confirmed on September 28, 2026 that the overnight police security detail at her residence had ended. She did not publicly provide the reason for the change. Local reporting indicates the residential coverage had been added after threats against her and represented an unusual level of protection compared with what San Antonio mayors historically received.
There is not enough public information to assess the specific protective decision in Jones’ case, and I would not try to do that from the outside.
The people making that decision have information the public does not.
They may understand the current threat picture.
They may know whether previous subjects of concern remain active.
They may know what intelligence has changed.
They may know what physical security exists at the residence.
They may know what other protective resources remain available.
They may know things that should never become public.
For me, the more useful question is not whether one mayor should or should not have overnight protection.
The useful question is how a professional protection program should decide when to increase security, when to maintain it and when it is reasonable to reduce it.
That question applies directly to high-net-worth and ultra-high-net-worth families.
Threats change.
Public exposure changes.
Family circumstances change.
Properties change.
People move.
Security systems improve.
A subject who concerned us six months ago may disappear from the picture.
Another subject may suddenly emerge tomorrow.
A principal who lived quietly for years may become highly visible because of a business transaction, lawsuit, controversial public position, media attention or personal dispute.
Good protection should be able to move with that reality.
The goal is not maximum security at all times.
The goal is the right protection for the actual risk.
Key takeaways
- Protection levels should follow the current risk picture. A posture that was justified during an active threat may not remain necessary forever, but time passing by itself is not enough reason to reduce it.
- De-escalation should be deliberate. Before reducing protection, I want to know what changed and what capability remains after the visible measure disappears.
- Less visible security does not automatically mean less protection. Protective intelligence, detection, access control, communications, physical delay and response can support a discreet posture.
- The residence and mobile protection detail are one system. Arrivals, departures, vehicle movements, public appearances and the home environment cannot be assessed separately.
- Escalation criteria should be established before security is reduced. If threatening behavior resumes, the team should already know what will trigger additional coverage and who can authorize it.
- Threat silence is not automatically threat resolution. The team should understand why activity declined before concluding that the underlying concern disappeared.
- Operational security matters. Staffing schedules, guard positions, post orders, response procedures and vulnerabilities should be distributed only to people who need them.
- Protection should remain sustainable. Security that is unnecessarily intrusive, expensive or disruptive will eventually be challenged or bypassed.
What happened with the San Antonio mayor’s residential security
Gina Ortiz Jones won San Antonio’s 2025 mayoral runoff and took office on June 18, 2025.
Not long after she took office, San Antonio police investigated threatening communications involving the mayor.
In August 2025, police arrested Marcos Rene Olvera after investigators alleged he posted a statement saying the mayor should be killed in a social-media discussion concerning the city’s proposed sports and entertainment district. He was charged with retaliation. Prosecutors later dismissed that charge in March 2026, citing insufficient evidence.
That legal outcome is important.
An arrest is not a conviction.
An allegation is not a finding of guilt.
A protection team may still need to evaluate reported behavior while the legal system separately determines whether conduct can be proven beyond the standards required for prosecution.
Those are different functions.
Axios reported in September 2026 that Jones had faced at least three threats to her life during her first year in office. One reported incident involved an alleged threat to bomb her office.
After earlier threats, SAPD officers began providing additional after-hours protection at Jones’ residence. KSAT reported that the overnight residential component represented an unusual level of protection for a San Antonio mayor, while SAPD’s executive security support for the mayor during official city business was consistent with protection provided to prior mayors.
By September 28, 2026, Jones confirmed to Axios that the overnight portion of the residential detail had ended. She did not publicly explain why.
That is about as far as the public facts allow us to go.
Anything beyond that would be speculation.
The decision to reduce protection should begin with one question: what changed?
If I am reviewing an executive protection or residential security program and somebody proposes reducing coverage, the first thing I want to understand is what changed.
Did the threat change?
Did the principal’s exposure change?
Did the residence change?
Did the intelligence picture improve?
Was an individual of concern arrested, incarcerated, relocated or otherwise removed from the immediate picture?
Did concerning communications stop?
Did we identify the source of the behavior?
Did physical-security improvements reduce a vulnerability that previously required personnel?
Did the principal’s public visibility decrease?
Did temporary circumstances that justified increased coverage end?
Or are we simply tired of paying for security?
Those are very different answers.
Cost matters.
Intrusiveness matters.
Quality of life matters.
But I do not want the protection program drifting downward merely because an elevated posture has become inconvenient.
I want the change tied to a rational security reason.
Protection should scale up and down
I do not believe every principal needs the same amount of security every day for the rest of their life.
That is not realistic protection.
It is static protection applied to a dynamic problem.
A principal may normally operate with a light, highly discreet footprint.
Then something changes.
A concerning communication arrives.
A former employee begins repeatedly contacting the family.
A stalker appears.
A lawsuit creates unusual public attention.
A business transaction becomes controversial.
A family member becomes involved in a high-profile dispute.
An online fixation begins developing.
Someone attempts to approach the residence.
A vehicle repeatedly appears near the estate.
Now the protection posture may need to increase.
Additional residential personnel may be appropriate.
More mobile coverage may be appropriate.
Advance work may increase.
Protective intelligence may intensify.
Travel procedures may change.
Family movements may need more coordination.
Then six months later, the picture may look different.
If the behavior stopped, the circumstances changed and the protective team understands why, it may be completely reasonable to step some of those measures down.
That is not security failure.
That is security adapting.
One of the biggest mistakes is allowing emergency measures to become permanent by inertia
This happens more often than people think.
A threat occurs.
Everybody reacts.
Additional personnel are added.
More vehicles are assigned.
A security post is created.
New procedures are introduced.
More people receive information.
Months pass.
The original situation changes.
But nobody revisits the protection posture.
The temporary response becomes permanent simply because nobody wants to be the person who suggests reducing it.
That is not good risk management either.
Security has costs beyond money.
It affects privacy.
It affects family life.
It affects movement.
It affects household staff.
It can affect the principal psychologically.
It changes how a residence operates.
Professional protection should be able to justify why each major measure still exists.
If I cannot explain what risk a measure is addressing, I want to understand whether it still belongs in the program.
The opposite mistake is reducing security because nothing has happened lately
This is just as dangerous conceptually.
“Nothing happened for three months.”
That sounds reassuring.
It may be reassuring.
But it does not answer the important question.
Why did nothing happen?
Did the threat genuinely dissipate?
Did the subject lose interest?
Did circumstances change?
Was the person incarcerated?
Did law enforcement intervention alter the situation?
Did the protective posture itself suppress opportunity?
Did the concerning individual simply stop communicating?
Those are not equivalent.
A protection program should not confuse absence of observable activity with proof that a concern has disappeared.
Silence can mean different things
When someone who has been communicating repeatedly suddenly stops, I do not automatically interpret that as either good news or bad news.
I treat it as a change.
Then I want context.
Maybe the person lost interest.
Maybe they received a warning and complied.
Maybe another life event redirected their attention.
Maybe the behavior simply ended.
Or maybe the person stopped communicating publicly while continuing to think about the principal.
The protection team does not need to imagine the worst scenario.
It needs to avoid making assumptions without information.
This is where protective intelligence becomes important.
Protective intelligence should drive the protection posture
When I say that a protection program should be intelligence-led, I do not mean turning a family office into an intelligence agency.
I mean that decisions should follow information.
What do we actually know?
What behavior has occurred?
How recent is it?
Has it changed?
Is anyone attempting to obtain information about the principal?
Have there been unwanted approaches?
Has somebody appeared at the residence?
Have staff received unusual calls?
Has somebody contacted family members?
Have there been attempts to bypass assistants or gate personnel?
Has the principal’s public profile changed?
Have new adversarial relationships emerged?
Has an old concern resurfaced?
That picture should influence the level of protection.
Not fear.
Not complacency.
Not appearance.
Information.
Threat level and vulnerability are not the same thing
This distinction matters tremendously.
People often talk about risk as though the threat itself is the only variable.
It is not.
A family can experience the same threat while having very different vulnerability depending on the environment.
Consider two residences.
One has controlled vehicle access, good perimeter detection, a strong alarm system, reliable communications, appropriate lighting, secure transition areas and personnel nearby who know exactly how to respond.
The other has an open driveway, weak access control, poor visibility, no real alarm response, predictable family movements and very little situational awareness.
The external threat could be identical.
The risk is not.
This matters when considering whether dedicated residential staffing can be reduced.
The question is not simply whether the threatening behavior decreased.
The question is what protective capability remains without that person standing there.
If personnel are removed, something else must carry the load
A common mistake in security planning is treating personnel as an isolated line item.
“We have a guard.”
Or:
“We removed the guard.”
That tells me very little.
I want to know what function that protector was performing.
Were they controlling access?
Monitoring the perimeter?
Providing immediate response?
Receiving alarms?
Observing vehicle movements?
Providing communication with the principal?
Conducting protective intelligence?
Meeting emergency responders?
Managing visitors?
Providing medical capability?
If we remove that person, where does each function go?
Maybe technology carries some of it.
Maybe household procedures carry some of it.
Maybe the mobile executive protection detail carries some of it.
Maybe law-enforcement liaison remains.
Maybe a remote monitoring center handles alarms.
Maybe the residence itself has been hardened.
Maybe another layer has improved enough that permanent overnight staffing is no longer justified.
That can be a perfectly reasonable design.
But somebody has to deliberately make that design.
A camera does not replace a protector unless the response chain still works
This is where many residential programs get the analysis backward.
Someone says:
“We have cameras now, so we do not need a person.”
Maybe.
But the camera itself does not answer the important questions.
Who is watching it?
What produces an alert?
Who receives that alert at 2:14 in the morning?
How quickly?
Can they distinguish a person from an animal?
Can they determine whether the person belongs there?
Who calls the principal?
Who calls police?
Who verifies which part of the property is involved?
What does the family do while help is coming?
Who meets responding officers?
The same principle applies to alarms.
An alarm is useful.
An alarm is not the response.
A gate is useful.
A gate is not the response.
Physical security is a chain.
Detection.
Understanding.
Delay.
Communication.
Response.
If one part disappears when staffing is reduced, the protection program needs to account for it.
Less visible security can still be extremely capable
One of the misconceptions around executive protection is that stronger security must always be more visible.
It does not.
I have worked in environments where very capable protection looked almost invisible to people outside the program.
That is often ideal.
A family does not necessarily need a visibly imposing person standing at every doorway.
What they need is capability.
Can we identify a developing problem?
Can we control access?
Can we reach the principal?
Can we move the family?
Can we respond?
Can we bring in additional resources quickly?
Can we communicate with law enforcement?
Can we protect sensitive information?
Can we recognize when the risk picture is changing?
Visible manpower is one way of creating capability.
It is not the only way.
The residence and executive protection detail are one protective environment
This is particularly important when residential staffing changes.
I do not consider the front gate the dividing line between residential security and executive protection.
The principal does not experience risk that way.
The principal wakes up at the residence.
Moves through the home.
Walks to a vehicle.
Leaves the motor court.
Passes through the gate.
Enters public roads.
Arrives at an office.
Attends meetings.
Returns home.
That is one continuous movement.
If the residential team considers only what happens inside the property and the mobile team considers only what happens after the vehicle enters the street, the transition becomes a gap.
Arrivals and departures deserve special attention when coverage changes
Transition points are often among the most predictable moments in a principal’s routine.
A vehicle appears.
A garage opens.
The principal walks outside.
A driver waits.
A gate opens.
The vehicle stops before entering traffic.
The same sequence may happen almost every morning.
If overnight personnel are removed, I want to know whether early-morning departures or late-night arrivals are affected.
Who is aware that the principal is moving?
Does the residence have useful visibility?
Does the driver communicate before arrival?
Is the vehicle staged in a secure area?
Can the principal be observed from public space?
Does a gate remain open?
Does the mobile protection team assume responsibility before the principal leaves the residence or only after?
Those are practical issues.
Protection should be able to surge quickly
One of the most important things I want from a lower-profile program is the ability to scale rapidly.
A family may not need continuous residential security today.
That does not mean I want to start looking for resources after something changes.
I want to know:
Who can be activated?
How quickly?
Who makes the call?
What staffing level is available?
Who already understands the estate?
Who knows the principal?
What equipment is needed?
How are shifts structured?
Who receives the threat information?
Can additional executive protection accompany the principal immediately?
Can residential coverage be restored that night?
If the answer to all of those questions is “we will figure it out when it happens,” the program is not truly scalable.
Escalation criteria should be decided before security is reduced
I prefer to establish triggers while everybody is calm.
That removes emotion from the first stage of the decision.
Possible triggers might include:
- new threatening communications;
- repeated unwanted contact;
- an attempt to approach the principal;
- an unexpected appearance at the residence;
- evidence of surveillance;
- attempts to obtain travel or residential information;
- contact with family members or household employees;
- significant escalation in online fixation;
- credible information from law enforcement;
- an approaching high-profile event;
- major litigation or public controversy;
- or another material change in exposure.
Not every trigger automatically means full-time protection.
It means the situation gets reviewed.
Then the team determines what level of response makes sense.
Different triggers justify different protective responses
I do not want every concerning event producing the same response.
A hostile email from an anonymous account may require documentation and monitoring.
A repeated series of communications from an identified individual may require something more.
An attempt to physically approach the residence changes the picture further.
Evidence that somebody is conducting surveillance creates another level of concern.
Protective measures should match the behavior and the exposure.
That allows the program to remain proportionate.
De-escalation criteria matter just as much
If we can define when protection increases, we should also define what would allow it to decrease.
Maybe a temporary public event ends.
Maybe an identified subject no longer has access to the principal.
Maybe repeated communications stop and investigation provides additional context.
Maybe a residential vulnerability is corrected.
Maybe the principal’s schedule becomes less exposed.
Maybe the family relocates.
Maybe a legal matter is resolved.
The exact criteria will be different for every principal.
But I want the decision based on changes in the environment rather than fatigue.
Security reviews should have dates attached to them
If additional protection is introduced because of a specific event, I like the idea of scheduling the next review immediately.
Not necessarily an end date.
A review date.
Thirty days.
Sixty days.
Ninety days.
Whatever makes sense for the problem.
At that point, we ask:
What changed?
What stayed the same?
What new information exists?
What behavior continued?
What behavior stopped?
What vulnerabilities remain?
Does the protective posture still make sense?
This prevents temporary security from becoming permanent through inertia while also preventing arbitrary reductions.
Historical incidents should not disappear when coverage decreases
When a protection posture is reduced, the protective-intelligence record should remain.
The team should retain appropriate documentation of prior concerns.
Names.
Behavior.
Vehicles.
Communications.
Dates.
Locations.
Law-enforcement contacts.
Disposition of incidents.
Why?
Because old concerns can become relevant again.
A new protector should not encounter somebody at the gate without knowing that the same person generated repeated unwanted contact two years earlier.
Information continuity matters even when visible protection decreases.
Behavioral changes matter more than the volume of threats
I do not judge a protective situation simply by counting threatening messages.
A public figure may receive a large amount of hostile online speech with very little evidence that any sender is moving toward action.
Another principal may receive only a small number of communications from someone who is demonstrating increasing proximity, persistence and knowledge.
The second scenario may concern me much more.
I want to know what the person is doing.
Are they seeking information?
Are they identifying residences?
Are they contacting employees?
Are they appearing at events?
Are they attempting to get closer?
Has the communication become more specific?
Have barriers that previously limited access changed?
That is far more useful than simply saying the principal received ten threats last month and only two this month.
Protective intelligence also means understanding the principal’s exposure
The external subject is only half the picture.
I also look at the principal.
Is the principal becoming more visible?
Is there a new television appearance?
A controversial business announcement?
A major lawsuit?
An acquisition?
A public dispute?
A new political or philanthropic role?
A book tour?
A major event?
Is the principal posting more publicly?
Are family members increasing social-media exposure?
Has someone published the home address?
Are people discussing the family online in a way that did not exist six months ago?
The protection posture should reflect that changing exposure.
Residential security should not become dependent on one human being
If removing one overnight protector causes the entire residential security program to collapse, the program was too dependent on that single layer.
I want depth.
Controlled access.
Reliable locks.
Appropriate perimeter security.
Useful intrusion detection.
Surveillance that actually produces actionable information.
Communications.
Household procedures.
Emergency response.
Protective intelligence.
Trained personnel when the risk justifies them.
No single component should be expected to solve everything.
The family’s behavior remains part of the protective posture
If residential staffing is reduced, household behavior may become slightly more important.
That does not mean turning the family into security personnel.
It means ensuring basic procedures still work.
Who answers an unexpected gate call?
Who verifies a late-night vendor?
What happens when a family member arrives unexpectedly?
What does staff do when an alarm activates?
Who calls 911?
Where does the family move if remaining inside is safer?
Who communicates with the executive protection team?
Who receives alerts?
A residential program should not depend on everyone improvising.
Children should not carry the burden of a reduced security posture
For UHNW families, this is particularly important.
If professional coverage changes, I do not want the answer to be telling children they now have to watch for suspicious people.
That is not their responsibility.
The adults and professional protection team should build the security around the way children actually live.
School.
Sports.
Friends.
Drivers.
Nannies.
Activities.
The family’s protective posture should quietly account for those movements without transferring anxiety to the children.
Police liaison can remain important even when dedicated coverage decreases
For private clients, the relationship with local law enforcement can be an important layer.
That does not mean expecting police to become private security.
It means understanding who has jurisdiction, how to communicate relevant information and what emergency response realistically looks like.
If there has been a specific threat or pattern of unwanted behavior, law-enforcement reporting and documentation may already exist.
That continuity should not disappear simply because private staffing changes.
The San Antonio security leak raises a second issue: protect the protection plan
The Jones case is relevant for another reason.
Details of her residential protection were disclosed publicly, prompting an internal SAPD investigation.
KSAT reported on October 1, 2026 that the department had closed the internal-affairs investigation and no officers were disciplined. SAPD declined to discuss current protective arrangements, citing the sensitivity of security procedures.
That last part is important from an operational perspective.
A protection plan itself can be sensitive information.
Who works?
When?
Where are they positioned?
When does a shift end?
Which areas are covered?
Who responds to what?
Which gate is used?
What happens overnight?
Which systems are monitored?
Those details can help somebody understand where the protection is strong and where it may be weaker.
I do not want that information circulated any more broadly than necessary.
Operational security applies to private families too
UHNW households often have more people exposed to protective information than they realize.
The principal.
Spouse.
Executive assistant.
Chief of staff.
Estate manager.
Household employees.
Drivers.
Security personnel.
IT personnel.
Vendors.
Sometimes property managers.
Sometimes outside staffing agencies.
Sometimes attorneys.
Sometimes insurance personnel.
Not every person needs the entire security plan.
The estate housekeeper may need to know how to report a suspicious visitor.
She probably does not need the overnight security schedule.
A driver needs movement information.
He may not need camera-system architecture.
A gate technician needs access to the gate equipment.
He does not need the principal’s travel calendar.
Protective information should follow need.
Shift schedules should be treated as sensitive
If somebody knows exactly when security arrives and leaves, that information has value.
The same applies to breaks.
Vehicle assignments.
Routine patrol times.
Post locations.
Known staffing gaps.
I do not want protection teams becoming so predictable that an outside observer can build the entire schedule.
Some routine is unavoidable.
Professional security still has to operate efficiently.
But unnecessary disclosure makes predictability worse.
Information leakage does not require malicious intent
This is important.
Protective information can leak through casual behavior.
A staff member discusses the schedule with a friend.
A contractor sees a post-order document.
Someone leaves a printed roster on a desk.
A protector posts something online.
A family member mentions that security leaves at a particular time.
A vendor receives a broader email distribution than necessary.
None of those people necessarily intend harm.
The result can still create exposure.
Security posture should be understandable internally and opaque externally
This is the balance I prefer.
The people responsible for protection should understand exactly why the program looks the way it does.
They should understand escalation criteria.
De-escalation criteria.
Response.
Roles.
Communication.
Authority.
Outside that need-to-know group, there is very little reason to explain the details.
The principal’s security does not become better because more people know how it works.
Cost is a legitimate part of protective planning
Private security costs money.
That should not be taboo to acknowledge.
A 24/7 residential program can require multiple full-time employees.
Executive protection can involve vehicles, travel, overtime, benefits, management, communications, training and equipment.
Families have every right to ask whether the program is proportionate to the risk.
That is one reason I want security decisions to be defensible.
If an expensive temporary posture remains in place indefinitely without anyone being able to explain why, that is not good management.
But cost should be evaluated alongside risk, not instead of it.
The cheapest security program is not necessarily efficient.
The most expensive security program is not necessarily good.
Capability matters.
Protection fatigue is real
Principals can become tired of intensive security.
Families can become tired of it.
Household staff can become tired of it.
The team itself can become tired.
That matters because a protective measure that people resent constantly may eventually be bypassed.
If a temporary heightened posture remains necessary, the team should continue finding ways to make it sustainable.
Can the footprint become less intrusive?
Can some functions move farther from the principal?
Can technology reduce unnecessary friction?
Can access procedures be simplified without weakening them?
The answer should not automatically be removing protection.
Sometimes the better answer is redesigning it.
Visibility should not be confused with capability
A visible officer outside a residence is easy to understand.
People see the officer and conclude that security exists.
A discreet program is harder to evaluate from the outside.
That is fine.
The public does not need to understand the complete capability.
A good protection program may include layers nobody notices:
- protective intelligence;
- access-control procedures;
- remote surveillance;
- duress communications;
- secure transportation procedures;
- trained household staff;
- police liaison;
- backup personnel;
- route planning;
- medical readiness;
- and rapid escalation capability.
The principal needs protection.
The principal does not necessarily need the appearance of protection.
How I would review a proposed reduction in protection
If somebody asked me whether a residential or executive protection posture could be reduced, I would walk through several areas.
1. What created the elevated posture?
What happened originally?
A direct threat?
Stalking?
Repeated unwanted contact?
A contentious termination?
Public exposure?
A family dispute?
A criminal incident?
Business controversy?
A short-term event?
2. What do we know now that we did not know then?
Has the source been identified?
Did law enforcement investigate?
Did the behavior change?
Is the individual still active?
Has the principal’s exposure changed?
3. What vulnerabilities remain?
Can someone approach the residence unnoticed?
Are arrivals predictable?
Are children exposed?
Is personal information public?
Are there uncontrolled access points?
4. What protection remains after the reduction?
Detection?
Alarm response?
Access control?
Residential procedures?
Mobile EP?
Protective intelligence?
Law-enforcement coordination?
5. What triggers escalation again?
This should be answered before the reduction occurs.
6. How quickly can we restore capability?
Hours?
A day?
A week?
If the threat picture changes tonight, can we respond tonight?
7. Who has decision authority?
The principal?
Security director?
Chief of staff?
Family office?
Several people jointly?
Do not wait for a crisis to discover nobody knows who can approve additional coverage.
A professional security assessment should evaluate the complete response chain
This is why a security assessment should not just produce a list of equipment recommendations.
I want to understand the entire protection sequence.
How does somebody approach?
When are they detected?
Who evaluates the activity?
What barrier exists?
How much time does that barrier create?
Who is notified?
What does the principal do?
Who responds?
How long does that realistically take?
What happens if power fails?
What happens if cellular service fails?
What happens if the principal is not home?
What happens if children are home?
What happens if the threat occurs while the executive protection team is away with the principal?
Once I understand that sequence, I can make a much more informed decision about whether personnel are necessary and where.
What HNW and UHNW families can review right now
Ask why each major security measure exists
Start with the current program.
Why is this person here?
Why is this gate procedure in place?
Why does this camera generate this alert?
Why is the principal using this movement procedure?
What risk is each measure addressing?
If nobody can answer, the program may have accumulated without being managed.
Review old threat files
What prior concerns existed?
Are the records organized?
Would a new security manager understand them?
Is anything still relevant?
Define escalation thresholds
Decide which events trigger review and which events trigger immediate additional protection.
Write those responsibilities down internally.
Define de-escalation thresholds
Determine what information would justify returning to the normal posture.
Do not make temporary elevated coverage permanent simply because nobody scheduled a reassessment.
Test the system without the person you are considering removing
If overnight coverage is being reduced, test what happens without it.
Who receives an alarm?
Who sees a perimeter alert?
Can the family communicate?
Can law enforcement enter?
Does the mobile team know what is happening?
Review arrivals and departures
Look particularly at predictable transition points before reducing residential personnel.
Protect the protective plan
Review who receives schedules, post orders, access information and response procedures.
Remove people who no longer need access.
Make sure you can surge
Know where additional trained personnel would come from before you need them.
How MSB Protection approaches changing threat levels
At MSB Protection, we approach executive and residential security as an intelligence-led, risk-based process.
Intelligence first.
Risk second.
Measures third.
That order matters.
I do not want to begin with:
“How many protectors should we put here?”
I want to begin with:
“What are we protecting against, what are we exposed to and what capability do we need?”
Depending on the answer, that may involve executive protection, residential security, protective intelligence, security assessment, travel security or a combination of those elements.
Sometimes the correct answer is more protection.
Sometimes it is better protection.
Sometimes it is different protection.
And sometimes a temporary measure can appropriately be removed because the conditions that justified it no longer exist.
The decision should come from the risk picture.
The objective is not the largest security footprint
I do not measure a protection program by how many people the principal can see.
I measure it by what the program can do.
Can it recognize a developing problem?
Can it keep unwanted people away from the principal?
Can it manage information?
Can it respond when something changes?
Can it move the family?
Can it coordinate?
Can it scale?
Can it operate without unnecessarily interfering with the principal’s life?
For families in Beverly Hills, Malibu, Los Angeles, Westlake Village, Thousand Oaks, Montecito, Santa Barbara and throughout Southern California, that is the standard I apply.
The right amount of protection is not always more.
It is the amount that addresses the actual risk while preserving the family’s ability to live normally.
Frequently asked questions about reducing executive protection
When should executive protection coverage be reduced?
There is no universal timeline. I would reduce protection after reviewing the current threat picture, the principal’s exposure, vulnerabilities and the capabilities that remain. Time passing by itself is not sufficient.
Does the end of threatening communication mean security can be reduced?
Not automatically. I want to understand why the behavior stopped and whether anything else changed. Silence is information, but it is not by itself proof that the concern has been resolved.
Can residential security work without a full-time guard?
Yes. Depending on the risk, a residence may have strong protection through controlled access, intrusion detection, surveillance, physical delay, communications, protective intelligence and a defined response plan. Higher-risk environments may still justify continuous personnel.
Is an alarm system enough to replace residential security personnel?
Not by itself. The important question is what happens when the alarm activates. Somebody has to receive it, understand it and initiate an appropriate response.
Can cameras replace residential security personnel?
Sometimes cameras can take over part of the detection function, but they do not automatically replace access control, judgment, communication or response. The entire chain has to be evaluated.
What should trigger an increase in executive protection?
Examples include new threatening communications, repeated unwanted contact, stalking behavior, attempts to approach the principal, suspicious surveillance, attempts to obtain private information, significant increases in public exposure or credible information from law enforcement.
Should every threat result in more protection?
No. Threats vary substantially in context and behavior. A professional program should evaluate what occurred and what the person is doing rather than automatically applying the same response to every hostile communication.
What is protective intelligence?
In a private-protection environment, protective intelligence is the organized collection and evaluation of information that may affect the safety of the principal or family. Its purpose is to help the protection team recognize developing problems and make better decisions about protective posture.
Why are arrivals and departures important?
They are predictable transitions between the residence and transportation. If residential staffing changes, the team should ensure those transition points remain appropriately protected.
Should a family change all routines after receiving a threat?
Not necessarily. I prefer targeted changes that address real vulnerabilities. Creating constant disruption without a specific reason is difficult to sustain and can make the security program less effective.
What does scalable executive protection mean?
A scalable program can increase or decrease capability as the risk changes. The family should know where additional personnel and resources would come from and how quickly they could be deployed.
How quickly should extra security be available?
That depends on the principal and threat environment. If the risk can change rapidly, the ability to increase coverage should also be rapid. The important point is to establish that capability before it is needed.
Who should decide whether executive protection is increased?
The decision structure should be established internally. Depending on the family, authority may rest with the principal, security director, chief of staff or family-office leadership. Everyone involved should know who can authorize a change.
How often should a protection posture be reviewed?
Periodically and whenever something significant changes. Elevated temporary protection should also have scheduled review dates so the team can determine whether the circumstances that justified it still exist.
What should happen to old threat information when coverage is reduced?
Relevant records should be preserved appropriately. A lower current threat posture does not mean historical information should disappear. Old information can become important if behavior resumes later.
Why should security staffing information remain private?
Schedules, guard positions, patrol patterns and response procedures can reveal how a protective system operates. Unnecessary disclosure can make the program easier to predict.
What happened with the investigation into the San Antonio mayor’s leaked security information?
KSAT reported on October 1, 2026 that SAPD had closed its internal-affairs investigation into the disclosure of details about Mayor Gina Ortiz Jones’ residential security arrangements. No officers were disciplined. SAPD declined to discuss current protection details, citing sensitive security procedures.
Does Mayor Gina Ortiz Jones still receive security?
According to KSAT’s October 1 reporting, SAPD continues to maintain an executive security detail connected to Jones’ official city duties. The overnight residential component that had been added after threats was no longer being provided.
Was the overnight protection normal for San Antonio mayors?
KSAT reported that an overnight SAPD detail at the mayor’s residence represented an unusual level of protection compared with prior San Antonio mayors, while executive-security coverage during official duties was consistent with prior practice.
Did someone get convicted for threatening Mayor Jones?
One widely reported 2025 case involved Marcos Rene Olvera, who was arrested and charged with retaliation after investigators alleged he posted a threat against Jones. Prosecutors dismissed that charge in March 2026 for insufficient evidence. The dismissal is important and should not be described as a conviction or proven criminal threat.
Why can a low-profile security program still be effective?
Because protective capability can come from intelligence, access control, detection, communication, physical security, trained people and a rapid response capability. Visibility and capability are not the same thing.
How does residential security connect to executive protection?
The principal moves continuously between the home, vehicle and public environment. Residential and mobile protection should therefore share relevant information, coordinate transitions and understand who has responsibility at each point.
How do you know whether a security measure is still necessary?
I ask what risk the measure was designed to address and whether that risk still exists in the same form. If nobody can explain the purpose of a major measure, it is time to review it.
Can a family reduce security because it is expensive?
Cost is a legitimate management consideration, but it should be considered alongside the threat and consequences. A better question is whether the program can meet the necessary protective objective more efficiently without leaving an unacceptable gap.
What should a family do before eliminating overnight residential protection?
Review the threat picture, test the remaining detection and response systems, examine arrivals and departures, confirm emergency procedures, define escalation criteria and make sure additional coverage can be restored quickly if conditions change.
Final thoughts: good protection changes when the risk changes
The decision to reduce overnight protection for San Antonio Mayor Gina Ortiz Jones is interesting from an executive-protection perspective precisely because the public does not know the complete reasoning behind it.
And it probably should not.
Protection decisions involve information that often needs to remain inside the protective program.
What the public can see is that an elevated residential security posture was introduced after reported threats, and the overnight component was later discontinued while official-duty security continued.
That creates a useful discussion for private protection.
Security should not be static.
The threat is not static.
The principal is not static.
The family is not static.
The residence is not static.
The world around them is not static.
A professional protection program should be capable of increasing coverage when circumstances require it and reducing unnecessary measures when the risk picture genuinely changes.
But both decisions need discipline.
I do not want to increase protection because everybody is afraid.
I want to know what happened.
I do not want to reduce protection because everybody is tired of it.
I want to know what changed.
I do not want to keep a guard simply because the guard has always been there.
I want to know what function that person performs.
And I do not want to remove the person until I understand who or what will perform that function afterward.
That is how I think about executive protection and residential security for high-net-worth and ultra-high-net-worth families.
Intelligence first.
Risk second.
Measures third.
The objective is not the largest security footprint we can build.
The objective is a protection program capable of recognizing what is changing around the principal and changing with it.
Sources
About Michael Braun
Michael Braun is a former Special Unit Operator, former Manager at Gavin de Becker & Associates, and Founder & CEO of MSB Protection, an executive protection and residential security firm serving high-net-worth and ultra-high-net-worth clients.
Braun has built his career at the intersection of specialized protective operations, executive protection, residential security, protective intelligence, and security risk management. His experience spans special-unit operations, leadership within Gavin de Becker & Associates, and the development and oversight of private protection programs within demanding UHNW environments.
He has been recognized by The Top 100 Magazine as a leading CEO in the private security field and is the subject of an upcoming Marquis Who’s Who feature highlighting his leadership and contributions to the profession.
Today, Braun is recognized for his work in executive protection, UHNW estate security, residential protection, protective intelligence, adversarial security assessments, and security auditing throughout Beverly Hills and Southern California.
His work focuses on moving private security beyond simply “providing a body” and toward intelligence-led, risk-based protection programs designed to identify vulnerabilities before an adversary can exploit them.
Looking for Executive Protection or Residential Security Services?
If you are a high-net-worth or ultra-high-net-worth individual, family office, estate manager, chief of staff, or executive in Beverly Hills, Los Angeles, Malibu or Southern California, MSB Protection provides executive protection, residential security, 24/7 protection, protective intelligence, medical-readiness planning, and security risk management.
We evaluate the complete security environment, from threat exposure and residential vulnerabilities to personnel, technology, procedures, protective intelligence, and emergency response, and build a program around the risks that actually exist.
Contact us for a confidential consultation or message us at +1 (805) 285-2807.