UHNW Travel Security Lessons From FlyDubai
The attack aboard FlyDubai Flight 1073 is a reminder of something I think high-net-worth families and family offices sometimes overlook when they think about travel security:
The threat does not always exist at the destination.
Sometimes it sits inside a system the principal already trusts.
The pilot.
The driver.
The aviation provider.
The ground handler.
The executive assistant.
The hotel.
The transportation company.
The protection team itself.
Most of the time those people and systems work exactly as intended. UHNW travel would not function without trust.
But professional protection cannot confuse trust with the absence of vulnerability.
On September 30, 2026, FlyDubai Flight FZ1073 departed Dubai International Airport for Tel Aviv. During the flight, the co-pilot attacked Captain Smit Machchhar inside the cockpit with an emergency crash axe and attempted to seize control of the aircraft, according to the UAE Attorney-General. The aircraft entered a severe descent before the captain, despite serious injuries, managed to open the cockpit door and allow others to intervene. Crew members and passengers subdued the co-pilot, and qualified pilots who were traveling aboard the aircraft ultimately helped bring the aircraft safely into Tabuk, Saudi Arabia.
The incident is now officially being treated by UAE authorities as an attempted terrorist act. That is an important factual update from the initial reporting, when motive had not yet been established. The UAE Attorney-General said on October 3 that investigators had determined the co-pilot attempted to carry out a terrorist act, while also making clear that the investigation continues into the full circumstances, motive, planning and any possible connections.
I would not go beyond that.
There has already been substantial political speculation about who may have influenced or directed the attacker. Some public officials have suggested broader connections. Investigators have not publicly established those connections.
From a protection standpoint, we do not need speculation.
The confirmed facts already give us plenty to learn from.
A trusted crew member had legitimate access to the cockpit.
The captain became seriously injured and temporarily unable to perform his normal role.
The original flight plan ceased to matter.
Other people had to step into critical roles.
The aircraft diverted to an unplanned destination.
Passengers suddenly found themselves in a country and airport they were never expecting to enter.
And the entire travel system had to reorganize around an event nobody had planned to happen.
That is why I see this as much more than an aviation story.
It is a travel-security case study.
Key takeaways for UHNW travel security
- Trusted insiders can create disproportionate risk. Insiders begin with access, familiarity and credibility that an outsider would have to work to obtain.
- Vetting reduces uncertainty; it does not eliminate risk. Background screening tells you what is known at a particular point in time. It cannot guarantee future behavior.
- Information sharing matters. New reporting indicates the FlyDubai co-pilot had previously been barred from flying by Oman Air over security concerns. Whether and how that information moved between organizations is now an important part of the broader discussion.
- Travel plans need redundancy. If one pilot, driver, protector, medic or coordinator becomes unavailable, the entire protection plan should not collapse.
- A diversion is a security event, not just an aviation inconvenience. The principal may suddenly arrive at an airport, country or city that was never advanced.
- Family offices should understand the whole journey. Aviation, vehicles, hotels, immigration, medical support, communications and protective coverage are one travel chain.
- Reporting culture matters. People working around the principal need an easy way to raise concerns before they become emergencies.
- Travel information should remain need-to-know. Passenger names, itineraries, hotels, aircraft, departure times and ground movements are all valuable information.
- Contingency planning preserves options. The objective is not to predict every emergency. It is to make sure the organization can keep functioning when the original plan disappears.
What happened aboard FlyDubai Flight 1073
Flight FZ1073 departed Dubai for Tel Aviv on September 30 with more than 170 passengers and crew aboard.
While the aircraft was in Saudi airspace, the co-pilot attacked Captain Smit Machchhar inside the cockpit. The UAE Attorney-General later confirmed that the weapon was the cockpit’s emergency crash axe, a safety tool already aboard the aircraft rather than something carried through passenger screening. Investigators say the co-pilot then attempted to take control of the aircraft.
Reuters reported that the aircraft experienced two rapid descents, dropping more than 16,000 feet in a short period. Despite suffering serious injuries, the captain managed to unlock the cockpit door. Passengers and crew then intervened and restrained the attacker.
Passenger accounts described an extraordinary scene inside the cabin. CBS News reported that one passenger briefly helped stabilize the aircraft before trained pilots traveling aboard the flight took control. Two off-duty pilots were ultimately involved in bringing the situation under control and getting the aircraft safely to Tabuk.
The captain was hospitalized with serious injuries. Saudi authorities reported that two crew members were hospitalized. The passengers were ultimately transferred onward. FlyDubai said all passengers were safe and accounted for.
What initially appeared in the first hours as an unexplained cockpit altercation has since become clearer.
On October 3, UAE Attorney-General Hamad Saif Al Shamsi said the investigation had established that the co-pilot had attempted to carry out a terrorist act. He said investigators were continuing to examine the circumstances, motive, planning, associated links and both physical and digital evidence.
That is where the responsible factual line should remain for now.
The new vetting question is particularly important
The story became even more significant on October 2 and October 3 when multiple outlets reported that the suspected attacker had previously been identified as a security concern in Oman.
ABC News reported, citing senior intelligence and law-enforcement officials, that the co-pilot had previously worked as a trainee with Oman Air and had been suspended from flying after being identified as a security risk. Sources told ABC that he had been found in possession of extremist material and was moved into an administrative role.
The Associated Press subsequently reported that officials said he had been barred from flying by Oman Air over concerns about extremist views and was later hired by FlyDubai. AP reported that it was not immediately clear how extensively that previous concern was shared or considered during the later hiring process.
I would be careful here.
We do not currently know enough to say that FlyDubai ignored a known warning.
We do not know exactly what information was shared.
We do not know what databases were available.
We do not know what the hiring process showed.
We do not know how previous concerns were documented or whether they were legally transferable.
Those questions belong to the aviation investigation.
But from a protective-security perspective, the case highlights something I deal with constantly:
A background check is only as good as the information it can see.
Vetting is a snapshot, not a guarantee
People often speak about vetting as though it produces a binary answer.
Cleared.
Not cleared.
Safe.
Unsafe.
Real life does not work that cleanly.
A background investigation can uncover criminal history.
Employment problems.
Credential issues.
Financial concerns.
Disciplinary history.
Known misconduct.
Previous employers.
Professional qualifications.
References.
Depending on the role and jurisdiction, it may provide much more.
That is valuable.
But vetting tells us what can be known and verified at that moment.
It does not give us the future.
A person with a clean history can develop a grievance.
A person’s personal circumstances can change.
A person can experience a crisis.
Ideology can change.
Relationships can deteriorate.
Financial pressure can develop.
Substance abuse can begin.
A mental-health crisis can emerge.
A person can hide behavior.
Or important information may exist in one organization and never reach another.
That does not make vetting worthless.
It means vetting is one layer.
Continuous trust is stronger than one-time trust
This is the distinction I use in private protection.
I want to vet people appropriately before giving them sensitive access.
But I do not want the organization to stop paying attention the moment the background check comes back clean.
A high-access role needs continuing professional accountability.
That could be a protector.
A driver.
A pilot.
An estate manager.
An executive assistant.
An IT administrator.
A nanny.
A senior household employee.
These people are not threats.
They are trusted professionals.
That trust is exactly why their roles deserve good systems around them.
Insider risk is different because insiders start inside the perimeter
An outsider may need to defeat the gate.
An insider may already have the code.
An outsider may need to identify the principal’s vehicle.
The driver already knows it.
An outsider may need to learn the itinerary.
The executive assistant may have written it.
An outsider may need to learn the residence.
The protector may have worked inside it for years.
An outsider may have to understand the aircraft.
The pilot operates it.
This does not mean organizations should distrust insiders.
That would make a professional operation impossible.
It means the consequences of access should be recognized.
UHNW travel is a chain of trusted insiders
Think about a typical complex private trip.
The executive assistant begins scheduling.
The family office coordinates availability.
An aviation broker may source an aircraft.
The charter operator supplies aircraft and crew.
A fixed-base operator handles ground services.
Handlers manage baggage and passenger processing.
A driver brings the principal to the airport.
The executive protection team controls the movement.
A second transportation provider may receive the principal on arrival.
A hotel has the reservation.
Another team may conduct an advance.
Local security may be involved.
Immigration support may have documents.
Medical personnel may have information.
The family office may be coordinating a second residence.
That is a lot of trusted access.
And the principal may personally know only a fraction of those people.
This is why travel security cannot be treated as “put a protector on the trip.”
Travel security is the management of the entire movement environment.
Private aviation due diligence starts with the operator
For U.S.-based charter, there is a basic factual question that family offices should not overlook: is the aircraft being operated by a legitimate, properly certificated charter operator?
The Federal Aviation Administration maintains a searchable list of certificated Part 135 operators and aircraft and explicitly advises charter customers to verify that the operator and aircraft are authorized for charter service. The FAA notes that legitimate Part 135 operations are subject to higher levels of pilot qualification, training, maintenance and operational oversight than ordinary private flying.
That is basic due diligence.
It is not the complete security review.
For an UHNW family, I also want to understand who is actually operating the aircraft, not simply who sold the trip.
The broker and the operator may not be the same organization.
The name on the quote may not be the entity exercising operational control.
If I am responsible for the principal’s travel-security picture, I want clarity.
Which operator?
Which aircraft?
Which crew?
What is the tail number?
What is the planned routing?
Who is handling the flight?
Who is meeting the aircraft?
Who has received the passenger information?
The aviation professionals can determine the aviation safety details.
The security team needs to understand the operational chain.
A reputable operator does not eliminate the need for contingency planning
This is another important distinction.
The family office may say:
“We use an excellent aviation company.”
Good.
You should.
That does not answer what happens if the plan changes.
Aviation disruptions happen for completely ordinary reasons.
Weather.
Maintenance.
Crew duty limitations.
Airspace closure.
Airport closure.
Medical emergencies.
Mechanical issues.
Security events.
Government restrictions.
A principal can leave Los Angeles expecting to land in one country and end up several hundred miles away somewhere else.
The aviation operator manages the aircraft.
The family office and protection team still have to manage the principal.
A diversion changes the entire protection environment
This is one of the strongest lessons from Flight 1073.
The aircraft was supposed to land in Tel Aviv.
It landed in Tabuk, Saudi Arabia.
From an aviation perspective, that is a diversion.
From a protection perspective, it means almost every assumption around arrival just changed.
The expected airport is gone.
The expected driver is gone.
The expected route is gone.
The expected hotel may no longer make sense.
The advance work may be irrelevant.
Immigration circumstances may change.
Medical capability changes.
Language changes.
Local law-enforcement relationships change.
The family’s communications plan may change.
The principal may be exhausted, injured or under stress.
Family members may be somewhere else entirely.
That is why a serious travel-security program cannot be built only around Plan A.
Travel contingency planning does not mean predicting every destination
You cannot pre-advance every airport in the world.
That is not realistic.
The objective is to have a process that still functions when you land somewhere you did not expect.
I want to know who takes control of coordination.
Who establishes where the principal actually is?
Who verifies whether the airport environment is secure?
Who obtains appropriate transportation?
Who determines whether the principal stays at the airport or moves?
Who finds accommodation if necessary?
Who communicates with the family office?
Who handles medical needs?
Who understands immigration or entry issues?
Who reorganizes the next flight?
Who informs the destination team that the original movement is cancelled?
You do not need all of those answers before takeoff.
You need a clear process for producing the answers quickly.
One person should own the complete travel picture
This is where family-office travel often becomes fragmented.
The executive assistant books the aircraft.
Security books the vehicle.
A household employee manages luggage.
A travel adviser books the hotel.
An aviation broker handles the flight.
A local vendor handles transportation at the destination.
The principal changes one meeting personally.
Everybody controls one piece.
Nobody controls the journey.
I want somebody to understand the complete movement from door to door.
That person does not need to personally book everything.
They need to know how the pieces interact.
Door-to-door travel security is a better way to think about the problem
The trip does not begin when the aircraft takes off.
It begins before the principal leaves the residence.
Residence.
Vehicle.
Airport.
FBO or terminal.
Aircraft.
Arrival airport.
Ground transportation.
Hotel or residence.
Public movements.
Return journey.
Each transition creates different vulnerabilities.
The strongest travel-security programs treat them as one connected system.
A critical person becoming unavailable should not collapse the plan
Flight 1073 illustrates this in the most dramatic possible way.
The captain became severely injured.
Other qualified personnel were required to take over.
In private protection, the same planning concept applies much more broadly.
What if the primary driver becomes ill?
What if the protection agent is hospitalized?
What if the executive assistant loses phone service?
What if the local security provider fails to show?
What if the family’s physician cannot be reached?
What if the planned aircraft becomes unavailable?
What if a vehicle breaks down?
What if the hotel becomes inaccessible?
What if the principal’s passport is lost?
If the trip depends entirely on one person remaining available, the trip has a single point of failure.
Redundancy should be proportionate to the trip
Not every movement needs three backup vehicles and two backup aircraft.
That would be absurd.
Redundancy should follow consequence.
A routine domestic trip to a major U.S. city gives the team many recovery options.
A remote international movement may not.
A medically fragile principal may require different contingency planning.
A family traveling with young children may have different needs.
A highly visible principal arriving during political unrest has another risk profile entirely.
I am looking for the points where failure would leave us without options.
Backup personnel matter too
Protection programs often think about backup vehicles and equipment but forget human redundancy.
Who is the second person who knows the plan?
If the security lead is unavailable, who takes over?
If the primary driver cannot continue, does somebody else know the route?
If the executive assistant coordinating the trip is asleep in another time zone, who can authorize a change?
If a family member is separated from the principal, who owns that movement?
Good travel security does not allow critical knowledge to sit with one person.
Reporting culture is another form of redundancy
The new reporting about the alleged FlyDubai attacker makes this especially relevant.
If a concern arises around someone with high access, where does that information go?
Does the organization have a process?
Is the person raising the concern taken seriously?
Is the information documented?
Can it follow the individual when appropriate and lawful?
Can different departments compare what they know?
I do not know enough about the FlyDubai employment history to say what did or did not happen there.
But the broader lesson is obvious.
Information that remains trapped in one organization cannot protect another organization that never receives it.
A protector should never be afraid to report something because the person involved is trusted
This applies to private security directly.
Suppose a driver begins behaving in a materially unusual way.
Suppose a protector repeatedly shows up impaired.
Suppose a household employee begins asking questions outside their normal responsibilities.
Suppose somebody appears increasingly angry about the principal.
Suppose an aviation contact raises a concern about a crew member.
The person observing that change should have somewhere to take it.
They should not have to decide whether the person is “dangerous.”
That is too high a threshold.
Report the behavior.
Let the appropriate people assess it.
Reporting does not mean accusation
This distinction protects everybody.
There is a huge difference between saying:
“He is dangerous.”
and:
“He arrived two hours late three times this week, appeared disoriented and made the following statement.”
The second is information.
The first is a conclusion.
Professional protective programs should collect the first and be very careful about the second.
Insider risk is not limited to violence
When people hear the phrase insider threat, they often imagine an attack.
That is only one possibility.
An insider can create exposure by accident.
Sending an itinerary to the wrong person.
Posting a photo.
Talking about the principal in public.
Losing a device.
Sharing a gate code.
Discussing a flight schedule.
Leaving passenger information on a desk.
Using an insecure group chat.
Most insider-related vulnerabilities in private households are probably far more mundane than intentional violence.
They still matter.
Travel information should be compartmentalized
A complex trip generates an enormous amount of sensitive information.
Passenger names.
Passport information.
Aircraft registration.
Departure airport.
Arrival airport.
Exact departure time.
Hotels.
Drivers.
Vehicle details.
Meeting locations.
Children’s names.
Staff names.
Security contacts.
Medical requirements.
Phone numbers.
Do all of those people need the entire itinerary?
Usually not.
A broad itinerary email chain is an unnecessary vulnerability
This is something I would eliminate wherever practical.
Ten people are copied.
Then one person forwards the message.
Then a vendor replies all.
Then somebody adds a second vendor.
Now a complete picture of the principal’s movement is sitting in multiple inboxes across several organizations.
The information should be distributed according to need.
The driver needs the pickup.
The aviation provider needs passenger and flight information.
The hotel needs what the hotel needs.
The executive protection team needs enough to protect the principal.
Not everybody needs everything.
Tail numbers and aircraft information deserve discipline too
Private aviation can create a false sense of anonymity.
The aircraft itself can become part of the principal’s identifiable pattern.
If the same tail number is consistently associated with the family and travel information circulates broadly, somebody interested in the principal may gain additional visibility into movements.
This does not mean hiding basic regulatory information that is legally public.
It means not unnecessarily broadcasting the connection.
The aviation broker should not automatically be treated as the operator
This distinction can be important for family offices.
A broker may arrange the trip, but another company may actually hold operational control of the aircraft.
In the United States, the FAA explicitly recommends verifying the operator and aircraft used for a charter rather than relying solely on marketing or booking arrangements.
For a security team, that means the operational questions should reach the actual operator.
Who is flying?
Which aircraft?
Who handles the flight?
What changes are expected?
Who should security contact if something moves?
Private aviation security is not only aircraft security
Many vulnerabilities happen around the aircraft rather than inside it.
Arrival at the FBO.
Baggage.
Vehicles.
Ramp access.
Ground handlers.
Passenger processing.
Last-minute vendor changes.
People asking when the aircraft will depart.
Someone photographing passengers.
Someone trying to deliver something to the aircraft.
The transition from vehicle to aircraft can be one of the most exposed portions of the movement.
That is where executive protection and aviation operations need to coordinate.
Commercial aviation presents a different but connected problem
A family flying commercial may have less control over crew selection and airport operations.
That does not mean travel security disappears.
The security team shifts attention toward the things it can control.
Airport arrival timing.
Check-in.
Public exposure.
Lounges.
Ground movements.
Baggage.
Family separation.
Documentation.
Contingency planning.
Arrival transportation.
Destination security.
If a commercial flight diverts, the family office still has the same basic problem:
the principal is somewhere they were not supposed to be.
Families traveling together create different consequences
A principal traveling alone is one problem.
A principal traveling with a spouse and four children is another.
If the flight diverts, we now have:
children;
luggage;
potentially medications;
different passports;
family members under stress;
more transportation;
different hotel requirements;
and more people who need to remain accounted for.
The protective plan should reflect the actual travelers.
Medical planning should be built into UHNW travel
The FlyDubai incident involved serious injuries to the captain.
For UHNW travel, medical planning does not begin only when somebody is injured.
I want to know:
Does the principal have important medications?
Are they carried in the right place?
Does the family have medical information available if required?
Does anyone traveling have meaningful medical training?
What happens if the principal becomes ill in transit?
What happens if a child becomes ill?
Where is the nearest appropriate medical facility at the destination?
What if the flight diverts somewhere else?
You cannot know every hospital along every possible diversion route.
You can have a process for identifying and reaching appropriate care quickly.
Medication should not disappear with checked luggage
This is a simple but important operational point.
If a critical medication is inside a bag that is inaccessible during an extended delay or diversion, a manageable situation can become a medical problem.
Important medications and essential medical items should travel in a way that keeps them accessible to the person who may need them, subject of course to applicable aviation and customs rules.
Communications have to survive the original plan
A diversion creates communications problems immediately.
Who knows the aircraft diverted?
Does the receiving team know?
Does the driver’s phone work in the new country?
Does the family office know where the principal is?
Who talks to relatives?
Who communicates with the residence?
Who handles media if the principal is publicly known?
Who talks to the aviation provider?
Who talks to the insurer if necessary?
If one phone or application is the only communication method, that is a fragile system.
The family office should have a travel decision hierarchy
When everything is going normally, authority can remain informal.
When the trip collapses, ambiguity wastes time.
Who can approve another aircraft?
Who can authorize a hotel?
Who can change the ground transportation provider?
Who decides whether the principal stays or continues?
Who decides whether additional protection is required?
Who has authority if the principal is unavailable?
Those questions are better answered before the emergency.
Executive protection should not wait at the destination
I do not consider travel protection to begin when the principal lands.
If the protection provider’s plan is simply:
“We will meet you at the airport,”
that is destination security.
Travel security is broader.
What happens if the departure is delayed?
What happens if the principal switches airports?
What happens if the flight diverts?
What happens if a family member becomes separated?
What happens if travel information leaks?
What happens if the arrival vehicle does not show?
What happens if there is civil unrest at the destination before arrival?
What happens if a local vendor cancels?
These are all part of the movement.
Advance work should include failure points
A good advance does not only identify where everything is supposed to happen.
It identifies where the plan can fail.
Where is the principal most exposed?
Where could transportation break down?
What happens if the intended entrance is closed?
What happens if the hotel moves the principal’s room?
What if the meeting location changes?
What if the airport transfer route is blocked?
What alternatives exist?
The objective is not to create a 200-page contingency manual.
The objective is to preserve options.
A travel plan should distinguish inconvenience from genuine security problems
This matters too.
Not every travel disruption is a security crisis.
A delayed aircraft may simply be inconvenient.
A lost bag may be annoying.
A hotel room change may be ordinary.
Professional protectors should not make routine travel feel like a crisis operation.
But they should recognize when an inconvenience begins affecting security.
For example:
The original driver disappears and an unknown replacement arrives.
That deserves verification.
A hotel changes the room.
Fine.
The new room creates an unacceptable exposure.
Now it becomes a security issue.
A flight diverts.
That happens.
The principal now has no secure ground transportation and is publicly visible in an unfamiliar terminal.
Now security has work to do.
Do not let urgency eliminate verification
Travel disruptions create exactly the environment in which people start accepting shortcuts.
Everybody is tired.
The aircraft is late.
The principal is angry.
Children are exhausted.
Phones are ringing.
Someone says a new driver is waiting outside.
That is when procedures matter most.
The faster and more chaotic the situation becomes, the more important it is to verify changes in transportation, personnel and destination.
Last-minute substitutions deserve attention
Different pilot.
Different driver.
Different aircraft.
Different tail number.
Different security agent.
Different hotel.
Different ground handler.
Substitutions happen.
They are not automatically suspicious.
But the protection team should know they occurred and confirm that the new arrangement is legitimate.
Security should know the difference between planned and unplanned change
Aviation teams change crew for operational reasons all the time.
Vehicles change.
Hotels change rooms.
The protection team does not need to challenge every operational decision.
It needs accurate information about the change so the protective plan can adjust.
The Flight 1073 case also highlights the importance of crew redundancy
One of the most remarkable parts of the incident is that additional qualified flight personnel were traveling aboard the aircraft and were able to help once the captain was seriously injured and the attacker was restrained.
That was an extraordinary circumstance, not something a family office can reasonably plan to replicate.
But the larger resilience principle applies everywhere.
One failure should not produce total system failure.
Single points of failure should be deliberately identified
When I look at a travel operation, I want to know:
What has no backup?
One driver?
One phone?
One person with the hotel information?
One person with copies of passports?
One protector who knows the itinerary?
One aviation contact?
One vehicle?
One route?
One way to reach the children?
The answer does not always mean creating a physical backup.
Sometimes redundancy is simply making sure another authorized person has the information and ability to act.
Family offices should know where their travel data lives
Travel information often spreads across more systems than anyone realizes.
Email.
Calendars.
Airline apps.
Aviation broker systems.
FBO systems.
Hotel systems.
Driver applications.
Messaging groups.
Shared documents.
Travel-agency platforms.
Security logs.
The family office cannot eliminate that distribution.
It can minimize unnecessary distribution.
Travel security is inseparable from cyber and information security
An attacker does not need to physically follow the principal if a compromised email account provides tomorrow’s itinerary.
A stalker may not need to watch the residence if a family member is posting the airport in real time.
A criminal may not need to identify the hotel if a vendor sends the reservation to the wrong recipient.
Physical security begins with information long before the principal arrives.
The residence needs to know when the travel picture changes
This works in both directions.
If the family is expected home at 8 p.m. and a diversion means they will not return for another day, the residential team may need to know.
Occupancy changes.
Staffing changes.
Deliveries may need to be managed.
Vehicles may remain away.
Household employees may need revised instructions.
This is why residential security and travel security should not operate independently.
Protective intelligence should follow the trip
Travel can change the threat picture.
A principal may attract attention abroad that never existed at home.
A protest may be announced around an event.
A local individual may begin contacting the principal.
A family member may post travel publicly.
A business dispute may become more visible.
Travel-security planning should continue receiving relevant intelligence as the trip unfolds.
The risk picture does not freeze at takeoff.
Returning home does not automatically end the travel-security event
Sometimes an event abroad creates new exposure at home.
A public incident.
Media coverage.
A legal dispute.
A confrontation.
An arrest.
A controversial appearance.
If something during travel changes who is interested in the principal, the residential and executive-protection teams need to know before the principal returns.
What HNW and UHNW families can review now
Identify who owns travel security
Somebody should understand the complete movement, even if multiple departments handle individual pieces.
Verify the actual aviation operator
For U.S. charter, confirm that the operator and aircraft are properly authorized. The FAA maintains current tools specifically for this purpose.
Separate the broker from the operator in your planning
Know who sold the flight and who is actually operating it.
Understand critical personnel
Know which people have access to the principal, itinerary and movement information.
Do not treat vetting as permanent certainty
Continue paying attention to behavior and professional concerns after hiring.
Create a reporting path
Pilots, drivers, protectors, assistants and other personnel supporting the family should know where to raise a concern.
Identify single points of failure
Ask what happens if the driver, protection lead, coordinator, aircraft or primary communication system becomes unavailable.
Plan for diversion
Decide who takes control if the aircraft lands somewhere other than planned.
Keep essential medication accessible
Do not allow critical medical needs to become dependent on inaccessible luggage.
Compartmentalize itineraries
Give people the information required for their role rather than distributing the complete movement to everyone.
Verify last-minute changes
New drivers, changed vehicles, altered hotels or unexpected personnel should be confirmed through established channels.
Connect travel security with residential security
The estate should receive the information it needs when arrival times, occupancy and household plans change.
Connect travel security with executive protection
The mobile detail needs the current movement picture, not yesterday’s itinerary.
Review how quickly the program can recover
The strongest test of contingency planning is not whether the original plan is perfect.
It is how quickly the team can create a safe new plan when the original one fails.
How MSB Protection approaches UHNW travel security
At MSB Protection, I look at travel security as one part of the wider protective system.
I do not separate the aircraft from the vehicle.
The vehicle from the hotel.
The hotel from the itinerary.
The itinerary from protective intelligence.
The travel team from the residence.
The principal moves through all of those environments.
The protection program needs to understand how they connect.
For a significant trip, that can mean looking at:
- origin residence;
- departure movement;
- airport or FBO;
- aviation provider;
- aircraft and crew arrangements;
- passenger information;
- arrival airport;
- ground transportation;
- hotels or residences;
- local threat environment;
- medical support;
- communications;
- protective intelligence;
- children and family members;
- information exposure;
- alternate routes;
- diversion planning;
- and the return home.
The level of planning should match the trip.
A two-hour domestic movement does not require the same preparation as a multi-country journey with a highly exposed principal and several family members.
But the underlying approach is the same.
Understand the journey.
Identify what matters.
Identify where failure would create unacceptable exposure.
Build enough redundancy that one problem does not destroy the entire plan.
This incident is not an argument against commercial or private aviation
That would be the wrong conclusion.
Millions of people fly safely.
Private aviation can provide enormous security, privacy and logistical advantages for UHNW families.
Commercial aviation can also be entirely appropriate depending on the trip.
The lesson from Flight 1073 is not:
“Flying is dangerous.”
The lesson is:
Trusted systems still require resilience.
And it is not an argument to distrust every pilot or crew member
Professional aviation depends on enormous trust.
So does executive protection.
I trust my protectors.
Families trust their drivers.
Passengers trust flight crews.
Principals trust executive assistants.
Households trust estate managers.
The correct response to insider risk is not suspicion.
It is good process.
Vetting.
Professional standards.
Reporting.
Compartmentalization.
Supervision.
Redundancy.
Contingency planning.
Frequently asked questions about UHNW travel security
What happened on FlyDubai Flight 1073?
On September 30, 2026, FlyDubai Flight FZ1073 was traveling from Dubai to Tel Aviv when the co-pilot attacked the captain inside the cockpit with a crash axe and attempted to take control of the aircraft, according to the UAE Attorney-General. Passengers and crew intervened, additional pilots traveling aboard the aircraft helped regain control, and the aircraft landed safely in Tabuk, Saudi Arabia.
Was the weapon brought onto the plane by a passenger?
No. UAE authorities say the co-pilot used the aircraft’s emergency crash axe, a tool kept aboard the aircraft for emergency use.
Was the FlyDubai incident terrorism?
As of October 3, 2026, UAE authorities officially describe the incident as an attempted terrorist act. Investigators are still examining the motive, planning, circumstances and any related links.
Has anyone established that another country or organization directed the attack?
Not publicly. Various political figures have speculated about possible outside links, but UAE investigators have said the investigation into associated links remains ongoing. Those claims should not be treated as established fact without evidence.
Had the co-pilot previously been identified as a security concern?
According to reporting from ABC News and the Associated Press, officials said the co-pilot had previously been barred from flying by Oman Air after security concerns involving alleged extremist material or views. Exactly what information was later available to FlyDubai and how that information was shared remains part of the broader unanswered question.
Does that mean FlyDubai failed to conduct a background check?
The public reporting reviewed does not establish that. Some reports indicate standard security checks were conducted, while questions remain about whether previous concerns from Oman were visible or communicated. It would be premature to conclude exactly where the failure occurred before the investigation is complete.
Can background checks eliminate insider risk?
No. Background checks can identify known history and reduce uncertainty, but they cannot predict every future act or detect information that is unavailable to the screening organization. Vetting should be combined with good reporting, professional supervision and appropriate access controls.
Why is insider risk relevant to executive protection?
Because insiders already have access and familiarity. A driver may know vehicle patterns. A protector may know residences and routes. An assistant may know the calendar. A pilot has access to the aircraft. Good protection recognizes that trusted access deserves appropriate controls without treating trusted employees as adversaries.
Does UHNW travel security include private aviation?
Yes. Travel security can include the residence-to-airport movement, private aviation, commercial aviation, FBOs, ground handlers, hotels, drivers, local transportation, destination intelligence and the return home.
How should a family office vet a private charter operator?
For U.S. charter operations, the FAA recommends verifying that the operator and aircraft are properly authorized for charter service. The FAA maintains current Part 135 operator and aircraft resources for that purpose. Additional due diligence may be appropriate depending on the principal and trip.
What is the difference between a charter broker and an aircraft operator?
A broker may arrange or sell the trip, while a separate certificated operator may actually exercise operational control of the aircraft. For security planning, the family office should understand both relationships and know which company is responsible for operating the flight.
Should the family office know the flight crew?
The amount of information required depends on the trip and risk profile. For higher-risk private movements, knowing who the actual operator and assigned crew are can be useful as part of broader due diligence. Aviation-specific qualification decisions belong with the appropriate operator and aviation professionals.
What should a family office plan for if a flight diverts?
Someone should have responsibility for coordinating the principal’s new ground transportation, communications, medical needs, accommodation if necessary, security posture and onward travel. The exact aviation decisions remain with the flight crew and operator.
Why is an aircraft diversion a security issue?
Because the principal may suddenly arrive at an unplanned airport without the transportation, advance work, local contacts or protective arrangements that existed at the intended destination.
Can an executive protection team prepare for every diversion airport?
No. The better approach is to establish a process that allows the team to assess an unexpected location quickly and rebuild the plan when required.
What is door-to-door travel security?
Door-to-door travel security looks at the entire movement rather than just the destination. It includes the residence, ground transportation, airport, aircraft, destination transportation, hotel or residence, local movements and return travel.
What are single points of failure in travel security?
A single point of failure is something the trip depends on without a practical backup. Examples can include one driver, one communication method, one person who holds the itinerary, one vehicle or one person with authority to make emergency changes.
Should every trip have backup vehicles and personnel?
No. Redundancy should be proportionate to the consequences and difficulty of recovery. A routine domestic movement has very different requirements from travel in a remote or unstable environment.
Why does reporting culture matter in travel security?
Because concerns are only useful when they reach someone able to evaluate them. Pilots, drivers, protectors, assistants and other personnel should have a simple way to raise material concerns without being required to decide whether a person is actually dangerous.
Should travel information be shared with all household staff?
No. People should receive the information they need for their role. Broad distribution of complete itineraries unnecessarily increases exposure.
Is a travel itinerary sensitive security information?
It can be. A detailed itinerary can reveal the principal’s future location, aircraft, hotels, drivers, meeting locations and the times when residences may be unoccupied.
Should tail numbers be treated as sensitive?
The regulatory status of aircraft may be public, but there is still little reason to unnecessarily advertise which aircraft is associated with a private family or specific movement.
What should happen if a driver changes at the last minute?
The replacement should be verified through the established transportation provider or trusted coordination channel. Urgency should not eliminate basic verification.
What should happen if the aircraft changes?
The family office and protection team should confirm the revised operator, aircraft and movement details through the appropriate aviation provider so the rest of the protective plan can be updated.
What medical issues should travel security consider?
Relevant considerations can include essential medications, known medical conditions, emergency contacts, accessible medical information, medically trained personnel and how appropriate care would be located if an emergency occurs away from the intended destination.
Should medication be placed in checked luggage?
Critical medication should generally remain accessible to the person who may need it, consistent with aviation, customs and medical requirements. A diversion or baggage delay should not unnecessarily separate the traveler from essential medication.
How does travel security connect with residential security?
The residence needs to understand relevant changes in the family’s return, occupancy and security environment. Events during travel can also change the threat picture at home.
How does travel security connect with protective intelligence?
The threat environment can change throughout a trip. Protective intelligence helps the team understand developing events, local concerns, unwanted attention and new information that may affect the principal’s movement.
How does executive protection fit into private aviation?
Executive protection manages the principal around the aviation movement: transitions, ground transportation, information, coordination and contingency response. Aviation professionals remain responsible for operating the aircraft.
Should executive protection dictate aviation decisions?
No. Qualified aviation personnel should make aviation decisions. The protection team should understand those decisions quickly enough to adapt the principal’s security plan around them.
Is private aviation safer from a security perspective than commercial aviation?
The two environments offer different advantages and vulnerabilities. Private aviation can provide greater control over exposure, timing, access and passenger environment. Commercial aviation has its own extensive security infrastructure. The appropriate choice depends on the principal, trip and risk profile.
Does the FlyDubai incident mean private or commercial aviation is unsafe?
No. The incident is extraordinary. The lesson for UHNW protection is not to fear aviation; it is to build resilience into trusted systems so that one unexpected failure does not collapse the entire travel plan.
How often should a family office review its travel-security program?
Review it periodically and whenever the family’s travel pattern changes materially. New destinations, children traveling independently, increased public visibility, new aviation providers, health changes or changes in the threat picture can all justify reassessment.
Final thoughts: good travel security begins where the original plan ends
FlyDubai Flight 1073 is an extraordinary event.
The captain was attacked by the person sitting beside him.
The aircraft lost thousands of feet of altitude.
The captain managed, despite serious injuries, to create an opportunity for others to intervene.
Passengers and crew acted.
Additional pilots stepped in.
The aircraft landed somewhere it was never intended to land.
And the system recovered.
That last point is the part I focus on.
Protection is not just preventing every bad thing from happening.
We cannot.
The principal can use an excellent aircraft.
A highly regarded operator.
A professional driver.
A strong protection team.
A secure hotel.
A detailed advance.
Something can still go wrong.
The real test is what happens next.
Does one person’s failure collapse the trip?
Does one cancelled flight leave the principal stranded?
Does one lost phone destroy communication?
Does one compromised itinerary expose the entire movement?
Does one unavailable driver leave the family accepting transportation from somebody nobody has verified?
Does a diversion put the principal into an unfamiliar environment with no one taking control?
Or does the protection program absorb the disruption, reorganize and continue?
That is resilience.
And in my experience, resilience is one of the most important differences between simply having security and having a real protection program.
For high-net-worth and ultra-high-net-worth families, travel security should not be built around the assumption that every part of the trip will work exactly as planned.
It should be built around the understanding that eventually something will not.
The aircraft changes.
The vehicle does not arrive.
The airport closes.
The principal gets sick.
The route becomes unusable.
A staff member becomes unavailable.
An insider creates a problem.
The destination changes.
The itinerary leaks.
The question is not whether every disruption can be prevented.
The question is whether the protective system still works afterward.
That is how I look at UHNW travel security.
Not just the destination.
Not just the protector.
Not just the aircraft.
The complete journey.
And the ability to keep protecting the family when the journey stops going according to plan.
Sources
About Michael Braun
Michael Braun is a former Special Unit Operator, former Manager at Gavin de Becker & Associates, and Founder & CEO of MSB Protection, an executive protection and residential security firm serving high-net-worth and ultra-high-net-worth clients.
Braun has built his career at the intersection of specialized protective operations, executive protection, residential security, protective intelligence, and security risk management. His experience spans special-unit operations, leadership within Gavin de Becker & Associates, and the development and oversight of private protection programs within demanding UHNW environments.
He has been recognized by The Top 100 Magazine as a leading CEO in the private security field and is the subject of an upcoming Marquis Who’s Who feature highlighting his leadership and contributions to the profession.
Today, Braun is recognized for his work in executive protection, UHNW estate security, residential protection, protective intelligence, adversarial security assessments, and security auditing throughout Beverly Hills and Southern California.
His work focuses on moving private security beyond simply “providing a body” and toward intelligence-led, risk-based protection programs designed to identify vulnerabilities before an adversary can exploit them.
Looking for Executive Protection or Residential Security Services?
If you are a high-net-worth or ultra-high-net-worth individual, family office, estate manager, chief of staff, or executive in Beverly Hills, Los Angeles, Malibu or Southern California, MSB Protection provides executive protection, residential security, 24/7 protection, protective intelligence, medical-readiness planning, and security risk management.
We evaluate the complete security environment, from threat exposure and residential vulnerabilities to personnel, technology, procedures, protective intelligence, and emergency response, and build a program around the risks that actually exist.
Contact us for a confidential consultation or message us at +1 (805) 285-2807.